
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/61C915302DA611F1B2990DECA2833773.roa
File: 61C915302DA611F1B2990DECA2833773.roa (raw, json)
Hash identifier: KaomdsVrAqV74tigFGzbofL46Dx0oPl1SoGoDWsWCag=
Subject key identifier: B7:80:C2:CD:B5:EE:43:01:CB:0B:1A:5B:09:82:FE:B3:2C:37:F3:BA
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 0967
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/61C915302DA611F1B2990DECA2833773.roa
Signing time: Wed 01 Apr 2026 08:40:05 +0000
ROA not before: Wed 01 Apr 2026 08:40:05 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 21859
IP address blocks: 164.90.73.0/24 maxlen: 24
164.90.97.0/24 maxlen: 24
164.90.104.0/24 maxlen: 24
164.90.123.0/24 maxlen: 24
164.90.124.0/24 maxlen: 24
202.63.36.0/24 maxlen: 24
202.63.39.0/24 maxlen: 24
202.63.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 20:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2407 (0x967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: Apr 1 08:40:05 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69ccd9e5-51f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:2e:24:2f:d7:8f:c3:7b:62:e6:5a:c4:42:
cc:fc:79:97:2a:73:94:10:30:ee:79:90:b8:67:2e:
88:c0:96:e1:0a:a7:6d:07:25:90:cc:51:f5:64:45:
9f:ff:ba:f7:2a:01:1a:af:c6:b5:ae:66:bb:82:1e:
66:d2:6e:d5:27:08:96:a4:57:72:51:0b:5a:a3:92:
88:54:68:2c:71:40:6d:10:97:45:70:7b:a3:1f:3d:
8d:b1:5c:86:98:f1:59:14:c0:35:79:a3:d1:bc:c2:
9d:df:3c:62:23:df:09:77:65:83:8a:a4:4a:20:3f:
f6:52:b5:3a:92:6f:f8:ef:aa:9d:37:1c:6e:ce:8e:
65:a1:c5:2e:b3:cd:be:36:1c:2f:be:00:51:08:86:
41:92:bc:e9:55:b1:78:9f:ac:fb:91:16:fa:5a:df:
f4:66:57:f7:a8:46:52:01:ed:6c:49:0a:41:1d:1b:
ff:9a:b8:f3:9b:10:fa:d8:96:69:58:86:4c:c1:8a:
df:58:b4:b0:6d:73:cc:72:04:9f:f8:c8:d1:6b:e9:
d5:bb:5a:aa:19:a1:11:fd:02:3a:47:fe:5a:ca:b2:
9d:f5:10:99:58:31:83:98:8c:90:67:52:87:89:a0:
42:83:8d:bd:53:5d:ca:bc:c5:a4:2d:30:17:2e:ae:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:80:C2:CD:B5:EE:43:01:CB:0B:1A:5B:09:82:FE:B3:2C:37:F3:BA
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/61C915302DA611F1B2990DECA2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
164.90.73.0/24
164.90.97.0/24
164.90.104.0/24
164.90.123.0-164.90.124.255
202.63.36.0/24
202.63.39.0-202.63.40.255
Signature Algorithm: sha256WithRSAEncryption
37:47:c4:fa:fd:a6:f8:29:3d:27:89:ea:0b:7b:7d:51:b7:7c:
ad:e5:5d:c0:04:80:dc:cb:95:b7:93:3f:e2:fa:a8:86:5c:8e:
15:6d:c1:c8:e5:f8:fa:c5:5e:14:2f:ba:47:82:43:2d:e9:91:
9c:9f:75:c7:d9:7d:aa:02:ec:bc:22:1f:f5:0b:86:e6:b4:d3:
2a:1a:ad:9e:7e:dc:68:1d:59:5f:7a:cf:4e:46:8e:2c:13:54:
21:e9:38:db:98:54:b1:cc:ed:a7:bc:af:cf:1f:c0:b3:e0:06:
80:c8:01:60:7d:1c:6e:2d:85:09:66:88:74:3a:9c:72:6b:2b:
70:61:b3:2d:b1:ff:f7:dd:06:ba:3b:18:df:26:98:10:2c:17:
2c:68:36:7b:17:03:e4:94:c1:44:50:ec:bc:59:6f:e7:b1:90:
5f:9a:db:20:9c:d8:a5:26:85:1f:49:d1:c4:10:db:30:20:cc:
06:45:f1:bc:46:9b:01:24:4f:73:5c:54:6b:cc:65:f7:0e:ed:
5d:d1:29:a9:ef:54:e0:ac:0d:aa:d7:98:53:87:b3:80:96:9c:
ac:76:a7:93:c5:94:e9:ef:93:cd:65:91:4a:f1:fe:26:b0:90:
e9:c3:8b:b4:59:78:f0:de:d3:12:a1:98:47:38:20:63:f3:42:
44:5d:7f:3e
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgICCWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG
RDJCRTgyNjAwHhcNMjYwNDAxMDg0MDA1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNjZDllNS01MWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzOUuJC/Xj8N7YuZaxELM/HmXKnOUEDDueZC4Zy6IwJbhCqdtByWQzFH1ZEWf
/7r3KgEar8a1rma7gh5m0m7VJwiWpFdyUQtao5KIVGgscUBtEJdFcHujHz2NsVyG
mPFZFMA1eaPRvMKd3zxiI98Jd2WDiqRKID/2UrU6km/476qdNxxuzo5locUus82+
NhwvvgBRCIZBkrzpVbF4n6z7kRb6Wt/0Zlf3qEZSAe1sSQpBHRv/mrjzmxD62JZp
WIZMwYrfWLSwbXPMcgSf+MjRa+nVu1qqGaER/QI6R/5ayrKd9RCZWDGDmIyQZ1KH
iaBCg429U13KvMWkLTAXLq6xCwIDAQABo4ICjjCCAoowHQYDVR0OBBYEFLeAws21
7kMBywsaWwmC/rMsN/O6MB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1
RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REY5M0EvRkY1MUU1OUVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvNjFDOTE1MzAy
REE2MTFGMUIyOTkwREVDQTI4MzM3NzMucm9hME0GCCsGAQUFBwEHAQH/BD4wPDA6
BAIAATA0AwQApFpJAwQApFphAwQApFpoMAwDBACkWnsDBACkWnwDBADKPyQwDAME
AMo/JwMEAMo/KDANBgkqhkiG9w0BAQsFAAOCAQEAN0fE+v2m+Ck9J4nqC3t9Ubd8
reVdwASA3MuVt5M/4vqohlyOFW3ByOX4+sVeFC+6R4JDLemRnJ91x9l9qgLsvCIf
9QuG5rTTKhqtnn7caB1ZX3rPTkaOLBNUIek425hUscztp7yvzx/As+AGgMgBYH0c
bi2FCWaIdDqccmsrcGGzLbH/990GujsY3yaYECwXLGg2excD5JTBRFDsvFlv57GQ
X5rbIJzYpSaFH0nRxBDbMCDMBkXxvEabASRPc1xUa8xl9w7tXdEpqe9U4KwNqteY
U4ezgJacrHank8WU6e+TzWWRSvH+JrCQ6cOLtFl48N7TEqGYRzggY/NCRF1/Pg==
-----END CERTIFICATE-----
Generated at Tue Apr 7 04:59:31 2026 by rpki-client