
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B644549E9AB611F1A85C11C64311F970.roa
File: B644549E9AB611F1A85C11C64311F970.roa (raw, json)
Hash identifier: ez+GxbU99kOmhCwoy0SFhe4ozBreUtL75YU8kctCjiU=
Subject key identifier: 8A:91:C4:13:EE:71:4D:AE:3D:21:E7:BC:76:14:57:67:30:DE:88:E4
Certificate issuer: /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial: 024F
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B644549E9AB611F1A85C11C64311F970.roa
Signing time: Fri 02 Oct 2026 14:32:42 +0000
ROA not before: Fri 02 Oct 2026 14:32:42 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 174
IP address blocks: 61.13.160.0/20 maxlen: 24
61.16.40.0/21 maxlen: 24
202.52.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 03:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Validity
Not Before: Oct 2 14:32:42 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6abfc08a-2bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:7b:65:0c:29:bb:01:d2:1e:c2:01:81:b2:
f1:30:c3:23:c9:6a:c3:20:3d:6c:d1:2c:81:ec:56:
f1:63:8a:c4:8b:91:8b:70:2e:ce:56:b0:ed:0e:8b:
ba:04:0d:34:79:1b:d2:a3:28:97:48:90:37:e2:53:
b6:3c:8d:88:ae:71:0f:41:01:18:77:90:d0:0b:38:
e2:2c:98:e1:ba:34:13:2c:07:ac:fd:0f:aa:bc:c1:
b6:7e:65:48:69:fc:1b:9b:1f:70:dc:f1:f5:a0:24:
cf:77:ea:8a:c5:c8:26:25:60:b1:74:8c:60:5a:43:
e9:42:6d:25:e1:cc:7d:86:11:d0:25:cc:b2:06:71:
17:02:9b:ad:2b:5f:85:c2:4c:38:bd:ab:a3:61:98:
fa:3b:40:f3:b6:1e:63:77:75:c1:86:f7:c0:79:35:
0f:9c:61:4c:ef:2d:d3:52:18:4f:55:b7:3c:ca:e7:
68:b9:90:7d:01:52:6c:43:e3:82:08:2a:0b:e6:ba:
8d:8a:d7:3d:5f:6c:a0:73:b1:36:95:6a:64:80:8d:
d2:e1:7f:a8:0e:2a:bd:f8:74:11:85:be:6e:b6:99:
46:c4:d5:75:0a:70:f2:47:0c:da:a6:f1:02:78:23:
3b:36:37:bf:3d:e9:f1:06:d0:bb:3e:56:1a:d9:50:
83:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:91:C4:13:EE:71:4D:AE:3D:21:E7:BC:76:14:57:67:30:DE:88:E4
X509v3 Authority Key Identifier:
keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B644549E9AB611F1A85C11C64311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.13.160.0/20
61.16.40.0/21
202.52.112.0/20
Signature Algorithm: sha256WithRSAEncryption
88:de:ad:c1:e2:09:23:db:ea:46:34:ef:9a:55:ff:a6:0d:81:
c6:66:8f:1e:cc:3a:4a:7d:aa:1e:22:53:26:4b:8d:67:ea:18:
5c:43:c9:77:50:df:f1:63:95:ee:d7:42:81:27:fd:a1:0f:37:
4c:f0:3f:46:92:3c:9d:2f:45:06:6f:da:02:c5:dd:a8:c5:39:
1d:a0:3e:99:59:c7:e6:cd:0f:33:74:6f:4b:8a:3c:46:57:a1:
5c:17:87:1d:85:47:e1:4a:ba:5b:e0:9d:15:d8:16:ae:33:e9:
c9:32:5b:c5:89:01:92:69:e5:5e:5a:d5:45:c4:d4:e4:3e:33:
59:93:c3:a0:e9:d1:12:f9:2d:e5:9b:ef:a6:57:e6:34:ad:df:
ed:08:38:44:f5:72:45:af:8a:f2:42:8b:79:96:8b:da:f9:10:
25:7e:85:86:6f:c5:df:60:f4:0d:95:a5:ff:19:97:c8:35:e7:
15:c7:ee:2d:c0:c8:3c:aa:0c:2c:52:9a:f0:53:1f:af:37:7e:
38:5f:c3:57:71:6e:6d:31:11:a2:2f:58:03:61:1c:fb:0b:95:
b8:d4:86:c1:c9:88:52:3c:35:4f:24:40:5f:48:30:70:80:26:
88:41:33:31:4c:d6:12:f4:a7:f9:ab:c9:e1:09:4c:ad:4a:72:
77:32:76:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:28:16 2026 by rpki-client