
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/660C8B72D03511EC9D87A00DC4F9AE02.roa
File: 660C8B72D03511EC9D87A00DC4F9AE02.roa (raw, json)
Hash identifier: 8pCRZkKvWm4B+OYadRNBlzVfsGTScvKklXx9re+6XL8=
Subject key identifier: FD:A4:C4:EA:52:42:C3:52:60:A1:3C:F1:72:24:CB:79:10:E7:7F:D2
Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial: 1440
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/660C8B72D03511EC9D87A00DC4F9AE02.roa
Signing time: Thu 06 Aug 2026 17:33:35 +0000
ROA not before: Thu 06 Aug 2026 17:33:35 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 139690
IP address blocks: 45.65.2.0/23 maxlen: 24
124.155.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 17:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5184 (0x1440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Validity
Not Before: Aug 6 17:33:35 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a74c56f-10c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6a:fb:fd:0e:76:59:2c:57:ea:e0:9e:2d:3d:
fc:8f:0e:1d:77:53:e4:ae:6a:9d:71:f2:a3:22:ad:
c2:01:8c:fd:60:9b:9a:f7:c4:bf:a9:64:86:7e:dc:
a5:22:af:24:4e:b2:5d:24:14:d9:78:85:22:11:fb:
18:29:c7:0f:c1:5f:ae:a3:e7:88:59:04:73:87:62:
80:69:00:b8:51:3c:59:f5:f2:1a:3a:61:5e:0f:3e:
91:05:56:fb:d1:20:93:2f:73:b5:2e:e0:39:c3:47:
a8:6a:5e:ac:b3:98:58:5f:6f:42:15:27:3f:9d:78:
83:db:6c:28:95:06:09:55:2e:7a:65:d3:ec:d4:16:
e3:0f:f0:19:c2:cd:40:05:c9:55:52:44:fe:2a:b4:
e0:1f:ae:49:03:71:97:e9:0d:b6:3f:24:85:bf:f0:
46:96:38:ac:59:a2:be:9b:dd:31:e0:1e:b6:ea:dd:
89:f7:7f:e8:61:ac:0c:39:26:79:7a:c5:b7:9b:9c:
70:5e:da:fa:1f:30:c1:ba:ca:32:73:74:d3:47:9f:
7c:0c:35:23:3a:20:ed:f9:c6:00:4f:03:a4:42:75:
7f:aa:6e:b9:60:ef:49:92:f8:63:5a:54:b7:ae:4b:
a0:8e:9e:ca:62:6b:ec:a7:5d:46:16:16:ac:46:d8:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A4:C4:EA:52:42:C3:52:60:A1:3C:F1:72:24:CB:79:10:E7:7F:D2
X509v3 Authority Key Identifier:
keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/660C8B72D03511EC9D87A00DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.65.2.0/23
124.155.216.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ee:b0:24:4c:d2:c6:d3:18:9c:a4:d4:aa:d3:db:4c:e0:fc:
cb:68:dd:70:5f:fa:85:54:64:e8:5a:1c:c6:5f:4d:c0:be:2d:
25:ff:a8:eb:b6:35:9d:06:d4:6e:9d:ba:5f:63:a0:cf:12:c4:
e8:f0:9a:ab:28:d1:ba:b6:fc:6f:eb:d8:7e:5f:63:2f:28:e6:
c3:8f:82:1e:6b:31:0f:16:1d:3f:67:f7:b2:22:33:b9:03:0d:
13:b0:d6:8b:b0:00:9b:7e:d9:df:1f:ea:e4:c6:39:ca:19:3d:
0f:e3:e0:bf:28:bd:34:b3:24:64:87:da:dc:b8:82:8b:2a:24:
bb:83:45:fc:af:1b:b3:dd:d6:82:1e:3c:9b:fe:1c:34:7a:58:
f5:22:ca:c1:0e:46:a5:b4:9f:c7:3b:0a:04:8e:b9:a2:37:78:
07:37:df:a2:5b:0f:c5:6e:66:eb:ee:f9:c8:ca:a9:0b:19:b4:
4b:f4:a7:66:71:28:c9:24:a8:2f:68:84:7c:8b:d8:ee:6d:1a:
28:15:dd:5e:dd:df:0b:4b:eb:24:a9:69:1b:a6:29:10:18:ff:
0a:65:5b:64:69:29:0d:ae:32:e8:ff:54:47:4a:45:49:aa:90:
9f:25:cf:28:20:43:42:94:4e:16:d4:5a:2f:c3:03:dc:4b:11:
98:ed:90:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:03:36 2026 by rpki-client