
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/FF145268EEAB11EFAD1FDC0CC4F9AE02.roa
File: FF145268EEAB11EFAD1FDC0CC4F9AE02.roa (raw, json)
Hash identifier: Ijr7pknls9pg+4Wg5NKopzDSsAmBixFAij3IGeHjjw0=
Subject key identifier: 07:70:1F:86:49:22:C2:0C:01:00:F0:F8:63:3A:74:8B:60:2B:45:5D
Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial: 2725
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/FF145268EEAB11EFAD1FDC0CC4F9AE02.roa
Signing time: Tue 19 May 2026 06:41:02 +0000
ROA not before: Tue 19 May 2026 06:41:02 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132618
IP address blocks: 111.84.24.0/24 maxlen: 24
111.84.73.0/24 maxlen: 24
111.84.78.0/24 maxlen: 24
2404:8d02:4443::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 15:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10021 (0x2725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Validity
Not Before: May 19 06:41:02 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a0c05fe-81e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:6a:ed:f3:3e:01:4c:c8:c9:73:ec:47:7e:
a8:04:0c:e8:a8:29:b6:0e:c9:85:0c:be:75:08:05:
b8:3a:43:94:55:c1:de:de:2e:e4:66:30:c6:d7:dd:
01:02:f5:d2:db:ef:77:2a:04:06:16:77:4b:4d:c3:
ff:b0:e0:b1:fd:11:73:5d:18:01:66:ae:53:ad:61:
1f:c1:10:59:0a:bc:98:c8:a8:a3:a1:d1:0a:d8:bd:
35:b8:a2:ae:0a:17:43:ec:c8:2e:10:7e:6e:1e:69:
08:d5:41:be:34:9e:a2:5b:d1:b1:4c:f8:56:43:16:
66:aa:04:d1:f8:09:76:36:d5:90:4f:be:71:80:44:
97:7f:95:13:f0:e1:ca:5e:56:39:f3:69:82:37:1a:
40:11:8f:0c:ff:29:ac:ca:57:df:95:b5:02:10:aa:
ea:7b:a1:12:35:01:43:21:32:75:31:9b:c5:31:c3:
17:1f:d2:d6:61:bc:75:ce:e4:a7:a3:8f:02:db:55:
21:0d:73:08:b0:6f:99:18:83:45:b4:8c:f9:62:d9:
32:e2:b2:a2:4b:99:96:a0:86:ef:e5:cd:9a:bf:1e:
62:c0:a1:d2:2c:be:e5:78:c4:1e:4a:84:54:33:b8:
99:e3:c2:8a:15:8a:70:46:ec:df:39:0b:1a:fc:10:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:70:1F:86:49:22:C2:0C:01:00:F0:F8:63:3A:74:8B:60:2B:45:5D
X509v3 Authority Key Identifier:
keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/FF145268EEAB11EFAD1FDC0CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
111.84.24.0/24
111.84.73.0/24
111.84.78.0/24
IPv6:
2404:8d02:4443::/48
Signature Algorithm: sha256WithRSAEncryption
2d:29:4e:e0:2b:ba:10:ca:6d:b6:92:9f:5f:ae:80:cf:30:e7:
aa:4d:2d:55:94:e6:57:c7:d9:e3:9a:58:d6:87:ed:ff:bf:10:
66:6a:80:f0:28:20:ed:62:e7:e7:e1:5d:00:0d:9f:21:87:b8:
d0:8d:b2:08:f1:a7:1e:de:1c:5f:db:ab:12:6c:68:41:ba:e3:
25:65:f2:b0:e6:79:5d:03:a4:79:c1:b1:8c:a5:e3:92:34:21:
6d:bc:04:1a:28:06:4c:cc:1e:c7:fa:6d:2e:d9:b4:03:c1:36:
72:cb:7f:92:02:c5:fd:38:0d:2f:d2:a1:68:b5:d7:c0:02:3a:
59:af:ea:2e:07:d5:9c:24:e5:af:b1:eb:43:7b:65:4c:8e:fe:
af:97:53:df:d4:be:17:0f:c8:64:40:2a:e0:df:dc:e1:9f:b7:
db:42:5d:1d:ee:ae:9d:65:7c:73:af:47:8c:43:f1:34:20:07:
f7:53:09:57:c2:47:b5:d4:25:f7:27:a1:80:8d:3d:b6:53:fa:
8a:9a:c7:96:ed:d4:43:b0:9e:56:5f:f9:29:5e:3a:53:a5:7d:
85:35:85:f4:c0:10:26:56:16:87:c1:f3:c1:cd:0d:b3:a5:73:
4c:fc:96:2e:33:df:be:70:71:f9:80:76:1f:98:b8:7a:a0:13:
76:b8:8b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 19:41:29 2026 by rpki-client