
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/DA504F0E175911EC87322F85C4F9AE02.roa
File: DA504F0E175911EC87322F85C4F9AE02.roa (raw, json)
Hash identifier: fBWTjHPBb9W8ORcqqmeo2+AlFAMHhNrE1/hdXfgEV54=
Subject key identifier: F4:F5:E2:79:5E:75:E1:94:28:3C:C7:DC:6E:50:37:95:F3:02:86:33
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 0719
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/DA504F0E175911EC87322F85C4F9AE02.roa
Signing time: Wed 02 Sep 2026 23:44:12 +0000
ROA not before: Wed 02 Sep 2026 23:44:12 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 4804
IP address blocks: 1.44.0.0/21 maxlen: 21
1.44.8.0/21 maxlen: 21
1.44.16.0/21 maxlen: 21
1.44.24.0/21 maxlen: 21
1.44.32.0/21 maxlen: 21
1.44.40.0/21 maxlen: 21
1.44.48.0/21 maxlen: 21
1.44.56.0/21 maxlen: 21
61.88.184.0/24 maxlen: 24
61.88.185.0/24 maxlen: 24
61.88.186.0/24 maxlen: 24
61.88.190.0/24 maxlen: 24
119.225.240.0/21 maxlen: 21
119.225.248.0/21 maxlen: 21
202.139.72.0/22 maxlen: 22
203.2.75.0/24 maxlen: 24
203.10.68.0/24 maxlen: 24
203.202.52.0/24 maxlen: 24
203.202.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 22:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817 (0x719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Sep 2 23:44:12 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98b4cc-bc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:3e:35:a6:7c:9c:a7:b0:0b:9a:d3:a4:62:
3f:f5:6a:30:37:e1:e1:5e:0b:a3:00:26:ce:e2:c4:
51:0c:68:2d:dd:2a:94:a8:68:62:d4:d2:39:21:e0:
6a:3c:81:5f:43:4d:39:fe:a6:5c:ae:0b:e6:35:f5:
4a:11:45:82:85:c0:aa:c2:8c:74:ca:a1:d3:2d:9d:
2e:92:30:f8:cc:2f:bb:2b:e7:ba:46:12:a2:29:6c:
ac:0f:32:c6:ad:37:17:ed:b6:1c:83:e8:dc:93:8a:
ed:19:ee:c7:3c:b1:0c:66:b8:16:3a:c6:81:07:97:
63:e5:c6:a5:6d:e2:b8:49:8e:be:69:ee:b4:27:f5:
f0:5f:e3:8a:78:8a:d7:9f:dc:22:c4:6a:80:f8:96:
2a:93:a0:d9:e5:fc:9e:8a:31:52:a4:33:5c:19:0e:
8c:1b:ed:a8:f9:e8:0f:42:29:a8:7d:81:17:6e:bf:
97:b3:53:55:6d:d9:ee:8b:66:c8:41:46:cb:35:5f:
75:ec:83:80:e5:f4:3b:27:7c:29:fa:60:7f:22:8a:
d5:53:d7:cc:3c:64:03:7c:a3:c0:c0:1c:ea:ab:4c:
5b:3a:a4:e6:cd:4f:27:0d:83:63:1c:97:5b:fc:dd:
2d:92:35:8d:44:6d:0d:5b:74:0a:f1:23:66:92:98:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F5:E2:79:5E:75:E1:94:28:3C:C7:DC:6E:50:37:95:F3:02:86:33
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/DA504F0E175911EC87322F85C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.44.0.0/18
61.88.184.0-61.88.186.255
61.88.190.0/24
119.225.240.0/20
202.139.72.0/22
203.2.75.0/24
203.10.68.0/24
203.202.52.0/23
Signature Algorithm: sha256WithRSAEncryption
88:8a:f2:8d:a8:10:ed:9f:35:ef:24:17:a4:40:4f:98:89:23:
13:36:ba:b1:8c:7c:3d:ac:c4:f9:11:eb:79:af:88:d1:6f:2d:
a0:5a:f8:2b:c8:60:29:0b:90:f4:f5:1c:85:79:1d:5c:1d:96:
ab:a2:43:53:06:50:96:1c:cd:2c:0b:39:d2:9f:46:86:74:53:
00:45:78:61:3b:4f:7f:ac:76:04:69:33:d7:27:f6:69:22:4f:
f1:7d:34:c4:2b:33:0e:de:e7:66:2b:f9:e5:dc:24:7b:c4:2c:
fe:21:c3:19:a2:3a:c0:15:b0:e5:23:10:f8:08:f0:e7:e5:2d:
e3:0a:5d:88:92:3d:9f:d8:4d:ce:d2:63:08:72:be:ff:a6:ab:
9d:ea:9b:f0:d4:54:50:de:57:30:ef:94:d7:f0:73:d9:37:b8:
6c:4b:15:af:bc:55:76:c2:14:a1:b1:be:16:45:a8:4f:53:37:
6e:62:48:0e:b5:19:a9:52:c1:07:96:18:c3:cb:3b:4a:e3:96:
09:2b:21:5b:f5:90:c7:09:ac:b9:f4:0f:02:72:a8:be:d3:e5:
ae:9a:97:15:c6:c6:2e:5c:54:39:f4:c9:47:d7:d8:4e:28:45:
3d:dc:0d:e3:ec:ba:62:4c:8b:0b:d6:b5:10:73:9e:d2:39:9a:
77:f7:94:ff
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE0QjExMTAvBgNVBAUTKDYxNzE0MzJENTU5NENCM0Y2MDhEM0JFMEY1MjYwMEJC
RUM0NkU1RkIwHhcNMjYwOTAyMjM0NDEyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4YjRjYy1iYzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3xs+NaZ8nKewC5rTpGI/9WowN+HhXgujACbO4sRRDGgt3SqUqGhi1NI5IeBq
PIFfQ005/qZcrgvmNfVKEUWChcCqwox0yqHTLZ0ukjD4zC+7K+e6RhKiKWysDzLG
rTcX7bYcg+jck4rtGe7HPLEMZrgWOsaBB5dj5calbeK4SY6+ae60J/XwX+OKeIrX
n9wixGqA+JYqk6DZ5fyeijFSpDNcGQ6MG+2o+egPQimofYEXbr+Xs1NVbdnui2bI
QUbLNV917IOA5fQ7J3wp+mB/IorVU9fMPGQDfKPAwBzqq0xbOqTmzU8nDYNjHJdb
/N0tkjWNRG0NW3QK8SNmkpjPyQIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFPT14nle
deGUKDzH3G5QN5XzAoYzMB8GA1UdIwQYMBaAFGFxQy1VlMs/YI074PUmALvsRuX7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS84NDE4OTIyNkZC
RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6OWdqVHZnOVNZQXUteEc1
ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lYRkRMVldVeXo5Z2pUdmc5U1lBdS14RzVmcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTE0QjEvODQxODkyMjZGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvREE1MDRGMEUx
NzU5MTFFQzg3MzIyRjg1QzRGOUFFMDIucm9hMFEGCCsGAQUFBwEHAQH/BEIwQDA+
BAIAATA4AwQGASwAMAwDBAM9WLgDBAA9WLoDBAA9WL4DBAR34fADBALKi0gDBADL
AksDBADLCkQDBAHLyjQwDQYJKoZIhvcNAQELBQADggEBAIiK8o2oEO2fNe8kF6RA
T5iJIxM2urGMfD2sxPkR63mviNFvLaBa+CvIYCkLkPT1HIV5HVwdlquiQ1MGUJYc
zSwLOdKfRoZ0UwBFeGE7T3+sdgRpM9cn9mkiT/F9NMQrMw7e52Yr+eXcJHvELP4h
wxmiOsAVsOUjEPgI8OflLeMKXYiSPZ/YTc7SYwhyvv+mq53qm/DUVFDeVzDvlNfw
c9k3uGxLFa+8VXbCFKGxvhZFqE9TN25iSA61GalSwQeWGMPLO0rjlgkrIVv1kMcJ
rLn0DwJyqL7T5a6alxXGxi5cVDn0yUfX2E4oRT3cDePsumJMiwvWtRBzntI5mnf3
lP8=
-----END CERTIFICATE-----
Generated at Tue Sep 15 08:52:18 2026 by rpki-client