
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B644549E9AB611F1A85C11C64311F970.roa
File: B644549E9AB611F1A85C11C64311F970.roa (raw, json)
Hash identifier: sMWv5VesipLfMMB1tylLMVVsAID4hr1IbwBRqNM7rCE=
Subject key identifier: 67:AD:DA:44:3D:17:34:E4:E6:C6:08:BC:29:3F:52:84:D8:3B:36:23
Certificate issuer: /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial: 0225
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B644549E9AB611F1A85C11C64311F970.roa
Signing time: Tue 18 Aug 2026 03:41:36 +0000
ROA not before: Tue 18 Aug 2026 03:41:36 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 174
IP address blocks: 61.16.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 03:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Validity
Not Before: Aug 18 03:41:36 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a83d470-2909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:b1:d8:ff:33:51:ed:4b:2c:76:b9:72:9f:
5a:01:66:2a:f2:b5:60:fc:31:26:db:14:e5:8a:30:
12:0b:f0:c4:64:63:af:2d:d5:6b:fb:56:1e:cc:e0:
1b:ac:8a:d9:74:20:f9:4c:83:a4:66:60:ff:54:a8:
86:a6:e0:3f:b6:e1:93:61:db:58:73:98:67:4f:62:
6f:d9:46:95:53:3d:85:9a:d7:74:9c:c0:d7:ef:41:
c3:d4:58:89:a8:08:bf:ad:bc:b3:5e:d5:de:46:55:
28:ba:bd:7b:23:43:aa:8c:ba:0c:0a:fc:70:54:5b:
0a:ee:11:97:50:71:94:fb:63:1b:5a:07:88:66:63:
8e:49:22:cf:79:05:92:ff:f2:64:62:97:b0:48:36:
87:d5:3e:a6:3f:92:e0:52:f0:aa:46:95:f6:92:00:
93:57:46:fa:50:0d:11:6e:f8:e5:a5:46:2b:70:63:
6c:87:26:c6:99:8d:f6:c6:b8:92:18:2e:db:1b:71:
0b:ab:f5:59:cc:e6:ea:f7:ef:4a:e2:5e:98:96:3a:
bb:69:97:29:b0:85:75:64:4b:d3:00:ac:2f:de:c7:
53:bf:b5:35:03:6c:23:11:3d:bd:bc:34:f7:cc:67:
57:41:d3:b1:40:e2:d4:df:a9:9c:53:53:ee:b6:d4:
f7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AD:DA:44:3D:17:34:E4:E6:C6:08:BC:29:3F:52:84:D8:3B:36:23
X509v3 Authority Key Identifier:
keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B644549E9AB611F1A85C11C64311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.16.40.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:31:48:ba:14:ba:0b:ac:62:61:64:00:aa:fe:c7:5c:3d:46:
04:4b:05:69:2a:a4:f3:bc:2d:ed:ee:a3:ad:37:bb:cf:b1:ce:
de:f5:99:03:c7:85:f2:25:c0:78:f9:f2:81:2a:96:b1:9c:60:
af:24:14:a8:73:1f:8f:7d:0b:6c:53:66:93:9b:e9:6b:65:46:
56:b8:2f:3d:ae:5d:77:8a:0a:62:47:bc:fd:b4:8f:b5:11:4f:
06:62:ed:37:1d:71:26:b4:75:0a:b5:65:69:30:c3:ad:1e:f5:
5d:54:b9:65:84:7d:ad:59:a2:26:4e:c0:b2:72:31:d2:3f:b5:
dd:ac:23:e1:4a:56:dd:78:f0:f0:ec:d4:fd:b6:98:d2:c7:a8:
51:64:a4:11:bd:4a:23:00:04:97:74:eb:12:10:27:47:34:b8:
ec:3a:f5:2b:fd:3d:ae:65:c6:56:7c:f8:e1:b4:a5:6d:0f:bd:
90:b4:e6:b8:04:01:bb:9f:f9:4c:35:f5:06:ca:7a:e9:57:b6:
b5:da:3b:ca:6a:91:3a:ba:f3:95:ac:fe:2a:6e:50:6b:a4:5d:
5b:bd:91:5e:d8:65:11:16:ae:67:2b:00:ee:91:2a:33:dc:e9:
89:2e:47:62:b6:61:98:05:fe:ac:29:ce:d9:2c:87:1f:39:10:
bf:4f:ad:fe
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE3NkQxMTAvBgNVBAUTKEFBMDE3OEVBNzg1MTFBMTVCMTQ3MEVCRkMwQzU3MjFB
NzBFMjc2OUYwHhcNMjYwODE4MDM0MTM2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTgzZDQ3MC0yOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr6Sx2P8zUe1LLHa5cp9aAWYq8rVg/DEm2xTlijASC/DEZGOvLdVr+1YezOAb
rIrZdCD5TIOkZmD/VKiGpuA/tuGTYdtYc5hnT2Jv2UaVUz2Fmtd0nMDX70HD1FiJ
qAi/rbyzXtXeRlUour17I0OqjLoMCvxwVFsK7hGXUHGU+2MbWgeIZmOOSSLPeQWS
//JkYpewSDaH1T6mP5LgUvCqRpX2kgCTV0b6UA0RbvjlpUYrcGNshybGmY32xriS
GC7bG3ELq/VZzObq9+9K4l6Yljq7aZcpsIV1ZEvTAKwv3sdTv7U1A2wjET29vDT3
zGdXQdOxQOLU36mcU1PuttT36wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGet2kQ9
FzTk5sYIvCk/UoTYOzYjMB8GA1UdIwQYMBaAFKoBeOp4URoVsUcOv8DFchpw4naf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTc2RC9GMDJBMzVFOEE5
MTQxMUVFQjI3MTJEM0ZDNEY5QUUwMi9xZ0Y0Nm5oUkdoV3hSdzZfd01WeUduRGlk
cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FnRjQ2bmhSR2hXeFJ3Nl93TVZ5R25EaWRwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDE3NkQvRjAyQTM1RThBOTE0MTFFRUIyNzEyRDNGQzRGOUFFMDIvQjY0NDU0OUU5
QUI2MTFGMUE4NUMxMUM2NDMxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDPRAoMA0GCSqGSIb3DQEBCwUAA4IBAQCKMUi6FLoLrGJhZACq/sdc
PUYESwVpKqTzvC3t7qOtN7vPsc7e9ZkDx4XyJcB4+fKBKpaxnGCvJBSocx+PfQts
U2aTm+lrZUZWuC89rl13igpiR7z9tI+1EU8GYu03HXEmtHUKtWVpMMOtHvVdVLll
hH2tWaImTsCycjHSP7XdrCPhSlbdePDw7NT9tpjSx6hRZKQRvUojAASXdOsSECdH
NLjsOvUr/T2uZcZWfPjhtKVtD72QtOa4BAG7n/lMNfUGynrpV7a12jvKapE6uvOV
rP4qblBrpF1bvZFe2GURFq5nKwDukSoz3OmJLkditmGYBf6sKc7ZLIcfORC/T63+
-----END CERTIFICATE-----
Generated at Tue Aug 25 20:23:46 2026 by rpki-client