
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91618CC/B2C5B306B7D211F1BDEC96036411F970/D54A9D0AB7FB11F18C36E6CA6F11F970.roa
File: D54A9D0AB7FB11F18C36E6CA6F11F970.roa (raw, json)
Hash identifier: m6GJJlDAYoPmtj9vhMGFDJg1YTCQS/lQ+X7FjyZPAxo=
Subject key identifier: 3C:26:4D:B2:8B:A3:3C:9C:02:40:7A:E9:5A:9E:5C:1C:5D:1E:44:00
Certificate issuer: /CN=A91618CC/serialNumber=33BE54FBE8F3F43F00A1B8A041EF26787121CA7E
Certificate serial: 03
Authority key identifier: 33:BE:54:FB:E8:F3:F4:3F:00:A1:B8:A0:41:EF:26:78:71:21:CA:7E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M75U--jz9D8AobigQe8meHEhyn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91618CC/B2C5B306B7D211F1BDEC96036411F970/D54A9D0AB7FB11F18C36E6CA6F11F970.roa
Signing time: Thu 24 Sep 2026 09:39:27 +0000
ROA not before: Thu 24 Sep 2026 09:39:27 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 154646
IP address blocks: 162.4.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91618CC/B2C5B306B7D211F1BDEC96036411F970/M75U--jz9D8AobigQe8meHEhyn4.crl
rsync://rpki.apnic.net/member_repository/A91618CC/B2C5B306B7D211F1BDEC96036411F970/M75U--jz9D8AobigQe8meHEhyn4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M75U--jz9D8AobigQe8meHEhyn4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91618CC, serialNumber=33BE54FBE8F3F43F00A1B8A041EF26787121CA7E
Validity
Not Before: Sep 24 09:39:27 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ab4efcf-246e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:20:b6:85:7c:fe:97:3d:fc:3d:a2:39:10:71:
94:03:fc:f2:ab:df:4f:b1:7a:be:b7:26:d7:f1:94:
9f:3c:0f:ae:dc:3b:06:8e:21:56:d6:82:87:d2:6e:
16:cb:97:1e:14:ae:e8:2d:bf:7b:30:fa:e5:83:ee:
e0:7c:5d:27:59:5a:85:79:4a:4a:7a:87:47:1c:d8:
66:fc:8e:24:d2:f1:e1:a4:4e:70:e2:d3:04:9c:4d:
cb:c5:6b:fb:6d:90:1c:a4:41:07:4c:f2:b6:28:fd:
0a:f0:85:a2:67:aa:07:1d:3b:6c:0b:41:65:60:ad:
66:fe:6c:ff:55:d9:03:b6:5e:ba:a3:3d:83:8e:a6:
9d:a5:30:26:fd:66:5e:01:9e:78:e9:1c:af:ff:8e:
fe:fc:5f:97:91:20:d1:4f:9d:35:63:ef:32:25:90:
98:a6:8c:f9:56:b2:72:43:9d:c5:40:bf:44:f9:8d:
3f:af:f9:78:d5:36:20:b7:03:e2:90:c5:2c:33:e1:
86:bf:29:24:e6:51:83:ef:c1:9d:32:98:3a:db:fa:
84:b3:f5:ea:13:e0:0e:d7:f7:db:8e:bd:8a:e1:80:
a0:0a:7a:29:c2:5b:e1:2e:1a:d7:a0:f7:dd:fc:46:
61:b6:52:79:d9:29:82:32:f9:d5:63:48:65:31:71:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:26:4D:B2:8B:A3:3C:9C:02:40:7A:E9:5A:9E:5C:1C:5D:1E:44:00
X509v3 Authority Key Identifier:
keyid:33:BE:54:FB:E8:F3:F4:3F:00:A1:B8:A0:41:EF:26:78:71:21:CA:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91618CC/B2C5B306B7D211F1BDEC96036411F970/M75U--jz9D8AobigQe8meHEhyn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M75U--jz9D8AobigQe8meHEhyn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618CC/B2C5B306B7D211F1BDEC96036411F970/D54A9D0AB7FB11F18C36E6CA6F11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.60.0/24
Signature Algorithm: sha256WithRSAEncryption
23:4c:88:e3:28:86:ed:bc:1f:22:40:e1:62:23:85:8f:ec:04:
87:d8:c8:0b:8a:05:6f:a1:0b:7d:7c:4e:3e:2a:38:45:c3:32:
33:e7:5f:d1:69:be:44:4c:f8:cc:ba:62:b7:82:e5:55:97:66:
ee:54:27:ca:f4:ae:e9:a0:c5:d4:ca:cb:53:36:92:07:b3:b7:
e1:b7:34:25:57:a8:a9:ba:78:8c:24:33:92:c3:d8:c8:42:80:
15:ed:2f:fe:5b:11:75:be:96:f9:3c:5f:bb:b2:d9:dd:21:1f:
84:12:11:d6:d0:86:3a:53:9e:46:bc:ee:60:8a:8a:6b:dd:43:
aa:54:af:af:1c:80:c3:02:7d:65:9c:6e:ed:43:13:d8:b7:7e:
aa:8e:c1:48:33:ef:ab:5f:38:08:2c:3b:2c:a2:80:6f:34:9e:
72:c3:bf:97:a1:08:cb:da:cb:9c:0b:83:57:0f:ec:35:8f:e6:
ba:36:32:70:8d:db:6f:de:25:ce:64:9e:94:40:e5:d0:7e:4f:
71:d7:43:5c:da:07:f0:5d:23:71:f3:b1:ac:5c:a5:97:2c:c9:
5b:ea:93:b5:cd:22:b3:5c:27:43:ba:b3:74:3b:0f:33:1d:ec:
73:41:55:68:a7:09:b9:bc:12:b0:36:22:cc:c5:eb:e6:4b:3b:
f6:71:fa:41
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MThDQzExMC8GA1UEBRMoMzNCRTU0RkJFOEYzRjQzRjAwQTFCOEEwNDFFRjI2Nzg3
MTIxQ0E3RTAeFw0yNjA5MjQwOTM5MjdaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYjRlZmNmLTI0NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzILaFfP6XPfw9ojkQcZQD/PKr30+xer63JtfxlJ88D67cOwaOIVbWgofSbhbL
lx4Urugtv3sw+uWD7uB8XSdZWoV5Skp6h0cc2Gb8jiTS8eGkTnDi0wScTcvFa/tt
kBykQQdM8rYo/QrwhaJnqgcdO2wLQWVgrWb+bP9V2QO2XrqjPYOOpp2lMCb9Zl4B
nnjpHK//jv78X5eRINFPnTVj7zIlkJimjPlWsnJDncVAv0T5jT+v+XjVNiC3A+KQ
xSwz4Ya/KSTmUYPvwZ0ymDrb+oSz9eoT4A7X99uOvYrhgKAKeinCW+EuGteg9938
RmG2UnnZKYIy+dVjSGUxcVrzAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUPCZNsouj
PJwCQHrpWp5cHF0eRAAwHwYDVR0jBBgwFoAUM75U++jz9D8AobigQe8meHEhyn4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxOENDL0IyQzVCMzA2QjdE
MjExRjFCREVDOTYwMzY0MTFGOTcwL003NVUtLWp6OUQ4QW9iaWdRZThtZUhFaHlu
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTTc1VS0tano5RDhBb2JpZ1FlOG1lSEVoeW40LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MThDQy9CMkM1QjMwNkI3RDIxMUYxQkRFQzk2MDM2NDExRjk3MC9ENTRBOUQwQUI3
RkIxMUYxOEMzNkU2Q0E2RjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACiBDwwDQYJKoZIhvcNAQELBQADggEBACNMiOMohu28HyJA4WIjhY/s
BIfYyAuKBW+hC318Tj4qOEXDMjPnX9FpvkRM+My6YreC5VWXZu5UJ8r0rumgxdTK
y1M2kgezt+G3NCVXqKm6eIwkM5LD2MhCgBXtL/5bEXW+lvk8X7uy2d0hH4QSEdbQ
hjpTnka87mCKimvdQ6pUr68cgMMCfWWcbu1DE9i3fqqOwUgz76tfOAgsOyyigG80
nnLDv5ehCMvay5wLg1cP7DWP5ro2MnCN22/eJc5knpRA5dB+T3HXQ1zaB/BdI3Hz
saxcpZcsyVvqk7XNIrNcJ0O6s3Q7DzMd7HNBVWinCbm8ErA2IszF6+ZLO/Zx+kE=
-----END CERTIFICATE-----
Generated at Wed Oct 7 05:52:29 2026 by rpki-client