
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B88F65049AB611F1A85C11C64311F970.roa
File: B88F65049AB611F1A85C11C64311F970.roa (raw, json)
Hash identifier: xHqlLzVPPIyi+9RP4Uhd/nQXiAksoICjKZK9VptHjn0=
Subject key identifier: 31:A0:84:94:96:86:74:21:AE:40:12:21:1A:84:28:26:85:30:53:BF
Certificate issuer: /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial: 0251
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B88F65049AB611F1A85C11C64311F970.roa
Signing time: Fri 02 Oct 2026 14:32:47 +0000
ROA not before: Fri 02 Oct 2026 14:32:47 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 4637
IP address blocks: 61.13.160.0/20 maxlen: 24
61.16.40.0/21 maxlen: 24
202.52.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 03:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Validity
Not Before: Oct 2 14:32:47 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6abfc08e-1744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cf:01:fc:cd:c9:9f:e7:80:20:70:6b:1d:4a:
9c:83:c0:04:3d:0f:a2:b3:54:6b:27:e2:6f:d9:11:
dd:00:c0:ad:0d:5c:85:b3:08:86:41:04:ca:91:62:
36:44:5a:92:e0:91:0f:94:34:20:2a:58:6e:e9:f9:
94:55:18:5b:06:85:c4:1f:c3:42:df:1e:54:fc:73:
2a:a7:b7:1c:79:01:c6:95:74:fb:e3:68:ee:83:74:
4f:be:85:65:98:f8:bf:27:dd:ed:37:3e:52:3b:5c:
ca:73:a0:0b:a6:42:03:d1:25:bf:a9:bc:79:a9:d7:
d4:e8:a6:11:5e:b6:e1:c5:bd:26:cb:02:88:31:bb:
86:e7:7b:e5:2f:b9:96:9f:2d:ae:f8:8d:8a:8c:c7:
16:fe:87:8d:76:2b:42:6a:2c:21:fb:3f:85:a9:29:
f7:bf:69:1d:a6:bd:48:6b:e0:a7:42:22:c3:d3:0c:
a2:6f:45:85:6b:98:59:c6:91:59:14:b6:8f:d5:cc:
f3:a7:14:17:ca:6c:0d:10:76:32:f1:b6:97:db:e0:
75:c1:2e:38:44:50:af:9a:6d:cb:9d:6d:8e:5d:40:
d6:0a:a1:dd:7f:cd:11:de:e0:97:60:30:40:31:27:
b2:e7:c4:3a:12:ad:42:73:8d:b0:b3:f9:48:1d:60:
ee:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A0:84:94:96:86:74:21:AE:40:12:21:1A:84:28:26:85:30:53:BF
X509v3 Authority Key Identifier:
keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B88F65049AB611F1A85C11C64311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.13.160.0/20
61.16.40.0/21
202.52.112.0/20
Signature Algorithm: sha256WithRSAEncryption
44:6d:f8:31:21:06:ae:3a:9b:ea:c1:69:46:ed:11:7d:5c:43:
13:fe:af:64:4d:86:24:3d:e4:1d:8d:be:59:29:a3:33:16:b2:
c2:25:bb:43:6a:64:65:a2:4d:7c:44:b6:64:bb:da:5c:85:cc:
76:c4:84:7a:c8:b7:8d:22:54:c3:46:45:6d:ec:da:f7:22:9e:
3a:bf:ed:25:37:fb:d1:e5:5f:ac:f1:ec:82:56:84:5a:34:9d:
6a:29:b2:3d:15:05:bf:98:1a:fb:9c:d3:53:b1:01:67:92:dd:
05:d7:9e:16:e4:9c:2f:b8:d3:e9:54:e9:5f:33:4e:27:d2:86:
06:6b:9f:b8:ff:3d:18:26:b6:47:2f:fd:53:7b:bb:3c:bf:cf:
4c:37:c1:af:d2:96:e2:5f:2c:89:c5:21:6a:2a:9e:c0:db:5a:
c4:81:05:20:16:75:a9:84:07:47:db:82:da:7c:ec:26:d4:3f:
43:71:7b:e6:6f:84:9e:65:59:eb:0e:45:4f:ea:1e:ba:28:e3:
64:b7:7f:09:89:5b:31:15:24:c1:6a:fd:97:07:73:a9:c5:ef:
88:94:1e:0f:ae:0a:50:f4:8d:f3:0f:7a:f0:f0:1f:ec:3c:d6:
40:b4:6a:cb:07:dc:2a:57:51:11:eb:de:d5:b0:84:65:78:d0:
e5:d3:20:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:23:35 2026 by rpki-client