
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/1A824A0E993511EF9BB0A677C4F9AE02.roa
File: 1A824A0E993511EF9BB0A677C4F9AE02.roa (raw, json)
Hash identifier: 6fxjc5x0PMuyQHDZPq53o6511LiVD/hbb3OuySb/iEA=
Subject key identifier: DC:26:1C:DD:1E:5B:A1:97:36:71:96:DC:F2:A0:CC:E2:52:0A:3B:4A
Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2
Certificate serial: 0169
Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/1A824A0E993511EF9BB0A677C4F9AE02.roa
Signing time: Mon 17 Aug 2026 05:55:29 +0000
ROA not before: Mon 17 Aug 2026 05:55:29 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 45327
IP address blocks: 116.90.64.0/21 maxlen: 21
116.90.64.0/24 maxlen: 24
116.90.65.0/24 maxlen: 24
116.90.66.0/24 maxlen: 24
116.90.67.0/24 maxlen: 24
116.90.70.0/24 maxlen: 24
116.90.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl
rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Sep 2026 04:54:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2
Validity
Not Before: Aug 17 05:55:29 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a82a251-b44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:96:6d:45:4a:1b:55:f5:88:51:9a:b2:7a:92:
a0:2e:f9:9e:37:78:36:62:aa:b3:ec:af:93:aa:c4:
ed:fd:db:49:d9:14:49:42:a0:d1:fa:90:44:43:a8:
dc:35:29:8f:7a:45:7b:e4:8b:e7:2d:a3:96:78:d8:
e8:ad:71:0e:26:f4:2a:0b:4c:47:e7:27:a4:d0:14:
c6:65:d1:5d:64:5e:15:8e:ae:c6:b9:94:1c:c4:07:
04:d9:17:d0:74:64:6b:ed:ee:7a:4e:eb:7f:41:f6:
fc:a7:fe:4e:0b:68:b6:7c:2c:36:2f:10:68:58:4a:
bc:5f:5d:22:b1:ae:39:8d:a2:56:68:8a:b8:06:b0:
48:8c:b9:d2:22:86:4c:e0:eb:f8:8c:d1:20:34:fd:
00:07:34:ee:01:7a:31:a5:6a:5e:fd:20:29:e0:ec:
3e:cf:08:7e:25:3a:f9:3a:a8:57:ac:cf:cf:fe:84:
96:cb:09:ee:58:b8:f8:26:47:92:88:98:2c:a6:de:
68:ed:fd:d1:48:ca:f6:ae:80:0b:41:82:b2:c5:aa:
4a:05:f3:00:52:fb:47:8d:9f:75:bd:d9:6a:50:77:
b0:53:2a:64:ce:8d:2d:cc:d4:b7:bb:c5:20:b3:11:
a2:2e:e2:34:93:21:6d:e7:7d:0a:21:fe:04:2b:af:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:26:1C:DD:1E:5B:A1:97:36:71:96:DC:F2:A0:CC:E2:52:0A:3B:4A
X509v3 Authority Key Identifier:
keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/1A824A0E993511EF9BB0A677C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.90.64.0/21
Signature Algorithm: sha256WithRSAEncryption
36:4e:f3:85:91:ef:76:29:74:69:86:19:a3:93:2f:6a:15:8b:
24:8f:a9:14:38:9e:bd:f9:76:ec:0e:15:a4:07:67:8a:7d:33:
0f:9c:21:bb:1e:01:6a:8b:81:58:81:f0:90:4e:ff:9d:73:95:
7c:0b:b3:38:93:93:79:34:7c:0b:e8:26:9d:1e:b3:4e:05:49:
75:2c:af:07:8b:88:99:a1:25:3d:cb:29:71:97:4d:68:9a:9a:
99:b8:37:2c:fd:9c:d9:67:32:99:5c:db:36:98:0c:33:27:68:
79:d7:9e:0d:84:af:cb:ce:34:b1:92:f9:76:31:90:b5:b6:ab:
80:fb:e5:85:71:8e:82:f2:8d:4f:c3:4b:50:e5:c7:d2:e5:42:
2f:1c:05:0b:6a:1c:71:de:d8:42:94:11:af:c2:49:df:4f:6c:
6c:05:c5:8c:93:28:14:07:97:9d:93:6e:e6:e8:03:25:a1:b6:
9f:4b:b4:4c:03:ee:ce:fc:95:c3:37:1b:d7:af:d1:29:88:ff:
22:9e:23:62:b1:38:08:27:1c:15:d6:d3:68:34:ab:05:a0:1c:
58:bc:97:93:e2:94:3e:0a:87:c9:cb:43:44:b6:8e:f9:76:c6:
1d:a5:14:40:30:d4:4a:d1:9d:bd:c6:a1:d1:5c:3b:2b:18:02:
d6:81:6b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 18:08:44 2026 by rpki-client