
$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/4DC60A785C7F11F089D20138C4F9AE02.roa
File: 4DC60A785C7F11F089D20138C4F9AE02.roa (raw, json)
Hash identifier: fH+Os/s7SYYFE9B1LFr1LyTEBlLJ9szkGGwcIpwvf+8=
Subject key identifier: 51:97:1C:6D:42:3C:FC:BC:C7:81:C7:03:19:55:AB:C0:05:0B:1C:CD
Certificate issuer: /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Certificate serial: C3
Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/4DC60A785C7F11F089D20138C4F9AE02.roa
Signing time: Thu 09 Jul 2026 09:35:18 +0000
ROA not before: Thu 09 Jul 2026 09:35:18 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 153995
IP address blocks: 165.101.74.0/23 maxlen: 23
165.101.74.0/24 maxlen: 24
165.101.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Validity
Not Before: Jul 9 09:35:18 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4f6b56-b993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:b0:f4:a4:64:47:1f:cf:96:f4:61:35:59:
7a:7f:9f:5b:7d:45:d7:b0:f7:e8:59:42:ac:f3:8a:
dc:af:92:d0:30:4a:90:0a:20:8e:43:8c:1c:26:dc:
b1:bd:ac:c6:6c:50:9f:e4:0e:a9:fa:23:bf:7b:7d:
9c:c8:ab:c8:cc:71:a1:5d:e2:1f:29:52:79:87:9d:
ca:40:cc:f5:c2:c2:44:dc:c7:a3:c7:70:75:79:47:
eb:d6:d4:1c:18:a2:a4:05:ec:69:c8:d5:eb:0d:3a:
39:fc:89:fb:56:ae:ff:bc:d5:f5:91:06:9c:ed:b2:
f0:9a:5a:f1:5c:6c:33:04:59:16:9b:9b:39:17:2f:
61:5d:db:f8:66:08:fc:f8:be:71:5a:26:78:e6:4d:
ee:4c:8c:dd:f8:c5:1d:04:58:1c:87:e0:dc:b0:49:
63:a5:18:0d:d6:91:51:f4:bf:d3:b8:af:0d:59:a0:
18:d7:d3:ad:e6:5d:0e:1b:a2:cd:bf:b9:c9:d8:b9:
f8:2a:b4:27:ef:dc:96:3e:f5:e4:aa:fd:9e:89:8d:
9e:7f:27:3f:dd:f9:e9:20:5e:66:3d:10:4e:65:42:
c4:ea:16:47:78:cf:9f:01:f4:68:7b:34:b9:11:9e:
ed:05:ba:96:32:0b:71:23:30:31:00:68:eb:a7:e1:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:97:1C:6D:42:3C:FC:BC:C7:81:C7:03:19:55:AB:C0:05:0B:1C:CD
X509v3 Authority Key Identifier:
keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/4DC60A785C7F11F089D20138C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.74.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:f4:44:a0:49:ac:88:7c:66:a2:2f:7c:c3:91:ef:6a:13:63:
82:c1:75:26:d4:85:a9:37:7a:f3:05:fd:cc:1a:6d:c1:45:2f:
32:13:0c:fe:80:78:88:b6:39:7f:5e:e5:0e:2c:c5:25:1c:5e:
5c:6a:29:e2:20:43:be:2a:3d:c4:84:29:a7:14:02:f8:9a:cb:
ce:08:de:fb:85:5c:6b:9b:92:cf:07:be:78:ec:73:dd:56:a2:
f1:c3:34:5e:53:e7:42:d0:2a:de:89:68:78:a7:d1:31:fb:87:
9b:5d:eb:fc:18:77:e4:36:ac:7a:1d:3b:29:6a:a4:9c:f4:5f:
82:0b:4b:a3:66:f1:3c:d7:f6:f8:2a:a6:c3:e6:c1:5b:04:29:
48:ae:95:4a:90:39:5a:95:ce:98:d6:63:9f:31:ae:bb:f8:16:
1a:04:a4:b1:85:1e:16:a8:d4:02:f8:f0:21:b8:69:06:40:5f:
31:d3:36:45:7a:a4:55:fb:28:9d:e3:6b:2e:40:87:f4:54:1a:
e6:95:bb:29:23:2d:b0:76:a6:37:69:36:1c:e7:d1:e3:bd:54:
44:f6:42:d5:a9:a5:8c:b6:6b:c7:6d:a6:27:51:39:4c:b8:85:
1e:51:6e:e3:4e:02:60:90:8f:ca:8f:2a:cb:d8:d1:c8:90:67:
ec:2c:09:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:10 2026 by rpki-client