
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B772717A9AB611F1A85C11C64311F970.roa
File: B772717A9AB611F1A85C11C64311F970.roa (raw, json)
Hash identifier: d/1nKtzVJFOAvD5GcQzX2uqaT0vrUxJNjX9GjTKmfrM=
Subject key identifier: 64:67:C3:25:7B:E7:49:01:3B:6D:CA:3B:26:7D:9F:E9:F1:B3:AF:9D
Certificate issuer: /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial: 0250
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B772717A9AB611F1A85C11C64311F970.roa
Signing time: Fri 02 Oct 2026 14:32:45 +0000
ROA not before: Fri 02 Oct 2026 14:32:44 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 197537
IP address blocks: 61.13.160.0/20 maxlen: 24
61.16.40.0/21 maxlen: 24
202.52.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 03:34:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Validity
Not Before: Oct 2 14:32:44 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6abfc08c-fa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:a2:63:bb:87:bc:d4:88:22:54:ba:cf:91:
aa:f0:8f:dc:82:50:8a:e2:ec:90:78:9f:f8:74:81:
65:fc:92:5a:8c:37:ad:f5:fe:07:02:cf:7b:79:7c:
df:db:c8:c6:1e:d3:70:24:c9:5d:79:0d:d7:b6:3f:
9a:63:35:aa:db:ee:de:6f:52:fa:69:db:b4:bf:5b:
9f:bb:65:c5:ff:dc:6c:2e:fe:2c:90:fa:70:c7:04:
07:fc:95:5b:89:10:eb:19:00:97:50:c0:78:af:94:
4a:15:9e:d5:ea:00:19:8c:49:7f:18:2e:32:3d:d7:
b7:fb:20:f0:e3:f8:19:90:e5:e4:75:86:26:35:b2:
19:63:2f:d7:97:9b:45:f9:d0:7f:d7:ab:bb:ab:e3:
25:08:50:9d:21:a8:ad:1a:71:3e:54:ac:7a:87:c1:
01:d3:36:ee:22:a8:87:8a:43:a2:a8:dd:66:d2:23:
61:af:b8:b8:f1:42:fe:f6:95:72:ec:6c:27:60:96:
25:4f:61:cd:45:2a:e0:18:c0:83:d2:6f:21:f4:73:
fd:73:40:d2:d6:29:3f:67:9d:47:7b:0f:c4:83:46:
2b:92:d7:47:6e:ab:e2:39:2d:03:47:6d:1b:e3:4e:
7c:10:ca:6c:91:81:23:58:1a:47:39:7a:f3:00:3a:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:67:C3:25:7B:E7:49:01:3B:6D:CA:3B:26:7D:9F:E9:F1:B3:AF:9D
X509v3 Authority Key Identifier:
keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B772717A9AB611F1A85C11C64311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.13.160.0/20
61.16.40.0/21
202.52.112.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:fc:1a:5e:85:85:48:59:b1:23:98:f7:b0:dc:7b:3d:e9:33:
1e:08:ee:62:92:17:27:66:f9:16:f6:5b:cf:08:4e:d0:65:b4:
e6:af:a0:d3:8a:0e:47:d4:92:03:53:10:86:b2:68:fe:43:84:
5e:f4:5a:d8:07:c6:9d:91:4e:ad:d0:d9:e6:73:0a:99:77:c4:
92:47:74:d7:e3:ac:41:16:f8:37:ac:d0:da:4a:79:7c:e6:7f:
ee:f7:12:30:b2:48:10:5d:d0:26:3b:91:fe:9c:59:1d:70:42:
38:cb:3c:b3:c0:c2:ee:eb:73:a8:6c:73:55:cc:4b:4f:ac:23:
38:22:a1:fd:a8:73:f3:b3:41:03:ed:92:88:cf:f7:a4:53:2b:
9d:ad:23:a4:68:36:16:b1:56:11:b9:ce:aa:10:0b:b2:2b:77:
af:d8:59:6c:13:f2:ad:cc:4a:14:95:67:d2:2a:f1:e1:09:69:
0d:38:3b:2d:6e:c3:5f:6f:1f:7d:c9:ce:04:3d:69:8f:cf:29:
2b:e2:59:60:16:ce:bc:77:4d:41:07:d0:d8:01:2d:4c:36:06:
8b:cb:18:65:09:bc:13:eb:79:b1:d3:c7:7f:8a:a1:9c:c7:5b:
af:cf:cf:d2:26:cb:b0:83:79:70:bd:7e:f1:28:72:2d:c1:70:
ea:2a:e8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 19:08:38 2026 by rpki-client