
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/60DB6CCA4EFF11F1A5F5EC7BA4833773.roa
File: 60DB6CCA4EFF11F1A5F5EC7BA4833773.roa (raw, json)
Hash identifier: mY/FOCcURrqlorv2xJh+RWjjQwbG9GW87KnRS8kWnM0=
Subject key identifier: 2E:82:4F:9D:E0:9D:49:1C:56:02:8A:F8:61:74:F2:8A:40:F1:85:65
Certificate issuer: /CN=A91DD92D/serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Certificate serial: 27
Authority key identifier: E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/60DB6CCA4EFF11F1A5F5EC7BA4833773.roa
Signing time: Wed 13 May 2026 19:10:17 +0000
ROA not before: Wed 13 May 2026 19:10:17 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 150142
IP address blocks: 163.128.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD92D, serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Validity
Not Before: May 13 19:10:17 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a04cc99-79fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:0d:88:c5:43:1d:a0:f8:f3:6d:d8:3c:6c:
3e:54:e3:ce:ad:df:87:c0:ab:5f:de:4f:89:bb:9d:
a0:a4:91:f8:76:1c:70:bd:96:84:fe:e2:d9:79:b3:
98:6c:54:3d:b3:53:8c:9a:c5:e7:12:91:cb:4b:12:
ab:08:72:14:a6:d5:55:2a:3f:45:ed:77:1b:af:78:
88:52:6d:4c:fd:43:14:41:ba:85:5a:a2:5f:37:d6:
a3:ff:66:86:0c:7d:1c:de:56:1f:49:ca:63:5e:f7:
90:30:49:e3:ed:05:5b:5e:54:27:9c:a6:b6:82:08:
9a:6e:53:16:ac:51:35:ed:92:f8:c8:6a:b3:dc:10:
0c:78:89:f9:90:65:85:a9:91:a4:b9:a9:ed:b3:b7:
2a:f1:cc:56:d9:87:80:40:c1:18:e2:16:9a:79:99:
26:fc:72:24:1f:60:73:33:3f:8e:f4:0c:4a:fd:be:
af:38:8a:2c:b5:94:bd:fd:96:26:23:4a:f5:6e:97:
6f:d9:eb:e6:44:f5:43:8c:90:d9:81:b4:42:f8:0d:
58:7c:60:73:94:e1:a8:e3:c0:65:ca:ac:a7:51:48:
35:d5:a2:0f:6f:6a:88:0c:19:03:78:b9:07:ab:e8:
fb:1a:ad:24:e9:22:b1:44:da:5d:47:c3:ce:3e:d1:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:82:4F:9D:E0:9D:49:1C:56:02:8A:F8:61:74:F2:8A:40:F1:85:65
X509v3 Authority Key Identifier:
keyid:E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/60DB6CCA4EFF11F1A5F5EC7BA4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.216.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ef:07:f4:d3:9b:79:a7:a2:85:97:8c:bd:bb:9f:85:e5:6a:
0a:3b:8f:12:16:ee:b5:5b:19:05:9e:c4:a7:7b:31:97:be:7f:
48:0f:5c:f9:ad:26:6e:48:65:39:85:92:e4:54:4a:ee:44:de:
89:5d:50:67:37:b6:be:da:ec:a2:f9:95:e7:5d:93:c8:13:89:
bd:26:cb:96:89:4a:bc:47:a8:62:fd:ee:71:89:08:e0:00:7c:
53:57:b5:b9:c1:59:12:7d:6b:88:bd:f6:fa:e4:4c:2c:cf:86:
3c:53:82:e2:43:53:cb:9e:c5:b1:1d:dd:19:fe:db:0f:62:66:
dc:57:c7:f7:30:5a:ea:b3:3f:e9:5d:c5:d0:69:4c:7f:31:40:
83:e5:bc:dc:58:4f:df:d1:db:4d:02:d6:b3:9d:cd:e4:8b:b4:
e5:ec:f1:b8:77:ef:61:ac:a3:f9:06:51:bf:b0:12:a0:4d:67:
12:53:96:80:6d:98:41:07:45:dd:f2:03:e4:96:c4:2c:d8:0c:
ff:ee:91:37:53:8f:13:6c:c3:7e:dd:d6:e2:bd:5a:cc:e9:b5:
dc:ae:1a:36:fc:d4:12:e7:8b:4f:f2:86:38:db:7f:fa:ed:57:
eb:83:1f:6e:4d:4e:7e:50:d0:53:be:d0:e4:f9:84:72:3e:90:
13:c0:84:a1
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RDkyRDExMC8GA1UEBRMoRTU3MzNCMTNGRDg2QTIzNjk0NzAyQzNFMjhGM0ZGMDk0
OTdBOTM3MTAeFw0yNjA1MTMxOTEwMTdaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMDRjYzk5LTc5ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4Lg2IxUMdoPjzbdg8bD5U486t34fAq1/eT4m7naCkkfh2HHC9loT+4tl5s5hs
VD2zU4yaxecSkctLEqsIchSm1VUqP0XtdxuveIhSbUz9QxRBuoVaol831qP/ZoYM
fRzeVh9JymNe95AwSePtBVteVCecpraCCJpuUxasUTXtkvjIarPcEAx4ifmQZYWp
kaS5qe2ztyrxzFbZh4BAwRjiFpp5mSb8ciQfYHMzP470DEr9vq84iiy1lL39liYj
SvVul2/Z6+ZE9UOMkNmBtEL4DVh8YHOU4ajjwGXKrKdRSDXVog9vaogMGQN4uQer
6PsarSTpIrFE2l1Hw84+0S/tAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQULoJPneCd
SRxWAor4YXTyikDxhWUwHwYDVR0jBBgwFoAU5XM7E/2GojaUcCw+KPP/CUl6k3Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREOTJELzI0RDhFM0RDMzZG
NTExRjE4NTlBQjRGRUI5ODMzNzczLzVYTTdFXzJHb2phVWNDdy1LUFBfQ1VsNmsz
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNVhNN0VfMkdvamFVY0N3LUtQUF9DVWw2azNFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDkyRC8yNEQ4RTNEQzM2RjUxMUYxODU5QUI0RkVCOTgzMzc3My82MERCNkNDQTRF
RkYxMUYxQTVGNUVDN0JBNDgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACjgNgwDQYJKoZIhvcNAQELBQADggEBACjvB/TTm3mnooWXjL27n4Xl
ago7jxIW7rVbGQWexKd7MZe+f0gPXPmtJm5IZTmFkuRUSu5E3oldUGc3tr7a7KL5
leddk8gTib0my5aJSrxHqGL97nGJCOAAfFNXtbnBWRJ9a4i99vrkTCzPhjxTguJD
U8uexbEd3Rn+2w9iZtxXx/cwWuqzP+ldxdBpTH8xQIPlvNxYT9/R200C1rOdzeSL
tOXs8bh372Gso/kGUb+wEqBNZxJTloBtmEEHRd3yA+SWxCzYDP/ukTdTjxNsw37d
1uK9WszptdyuGjb81BLni0/yhjjbf/rtV+uDH25NTn5Q0FO+0OT5hHI+kBPAhKE=
-----END CERTIFICATE-----
Generated at Thu May 21 10:49:54 2026 by rpki-client