
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/70A77C348D6C11EBAFD23A2EC4F9AE02.roa
File: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (raw, json)
Hash identifier: VDBG2w47npIoKGnSUG19h4msTJ7z1dezZlZeedxqUyw=
Subject key identifier: BB:93:74:BD:5E:80:72:FD:95:37:0C:28:6C:09:25:ED:34:41:4E:37
Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Certificate serial: 06FE
Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/70A77C348D6C11EBAFD23A2EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:47:40 +0000
ROA not before: Wed 26 Nov 2025 21:13:19 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 1221
IP address blocks: 139.163.18.0/24 maxlen: 24
139.163.40.0/24 maxlen: 24
139.163.83.0/24 maxlen: 24
139.163.85.0/24 maxlen: 24
139.163.131.0/24 maxlen: 24
139.163.132.0/24 maxlen: 24
139.163.133.0/24 maxlen: 24
139.163.137.0/24 maxlen: 24
139.163.138.0/24 maxlen: 24
139.163.139.0/24 maxlen: 24
139.163.250.0/24 maxlen: 24
168.134.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 21:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1790 (0x6fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Validity
Not Before: Nov 26 21:13:19 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46dac-e8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:69:33:a4:4b:18:d5:d6:c3:41:41:e1:82:6a:
c8:f8:c5:73:0e:44:70:9f:9a:9b:c3:21:20:b2:a0:
9f:84:0d:d9:65:09:0c:07:02:bc:a3:88:4c:45:d1:
38:a4:5f:68:1d:c2:2d:be:21:08:c1:26:0f:2a:55:
b1:2b:77:fc:5a:99:5f:ef:07:02:2e:4d:dc:c9:4a:
89:7c:85:69:68:95:0e:b8:b1:3d:c3:60:9c:70:6a:
71:f8:a4:0c:46:7f:51:1d:83:e2:8f:9d:0a:4e:08:
96:29:ec:9a:21:ff:8a:e3:9b:a2:31:79:ca:4c:b4:
ea:e7:b3:a2:91:0b:16:14:37:0f:f1:fd:63:ab:28:
86:06:d1:8e:81:39:1c:11:5e:73:96:99:09:05:36:
bd:a3:55:55:d5:6e:a3:10:b0:bf:1d:29:02:8b:ac:
c3:fb:5f:02:d6:13:48:85:16:b9:10:ec:62:e6:86:
69:7c:d6:89:d9:b6:03:cb:43:d6:85:6d:07:16:39:
bd:bb:16:7d:d8:ac:87:51:4f:d5:98:9f:89:2a:02:
a5:2a:5e:d3:14:c1:cc:27:9b:11:61:5e:a5:e1:6e:
df:9b:72:50:5c:cd:27:dd:bb:d4:07:c5:38:31:a1:
75:1b:17:db:6c:74:cf:08:7f:98:10:9c:d3:2a:96:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:93:74:BD:5E:80:72:FD:95:37:0C:28:6C:09:25:ED:34:41:4E:37
X509v3 Authority Key Identifier:
keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/70A77C348D6C11EBAFD23A2EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
139.163.18.0/24
139.163.40.0/24
139.163.83.0/24
139.163.85.0/24
139.163.131.0-139.163.133.255
139.163.137.0-139.163.139.255
139.163.250.0/24
168.134.0.0/24
Signature Algorithm: sha256WithRSAEncryption
48:3a:15:0b:26:9b:e4:f3:7f:9d:23:3e:38:6a:08:9c:9c:1f:
04:dd:32:11:bc:94:c3:c7:8d:cb:73:a5:6b:7f:d2:12:e6:03:
b3:81:76:0a:5f:1c:27:d5:71:b5:6f:cb:2c:9a:5d:60:2c:a4:
5d:2e:bd:41:18:f0:15:90:a6:d9:e0:04:06:43:85:44:59:24:
b9:6f:84:2e:bb:9b:62:7c:ed:6c:a6:93:26:16:d4:98:0a:0d:
3e:71:5b:d8:23:67:87:83:7c:d4:df:38:a5:77:b2:b9:82:95:
c1:de:97:1b:98:fc:02:f9:78:f0:9e:5b:2e:3f:f8:d4:58:88:
b5:60:ed:ca:41:7b:62:75:3e:7c:99:9f:00:7a:a2:54:23:92:
21:23:da:36:ca:44:69:a3:4e:97:c8:fb:07:b7:db:07:49:b7:
34:fc:16:f1:82:a3:7a:8f:56:0a:ce:4a:de:21:4d:27:af:c4:
9a:ea:7a:55:10:b8:41:23:46:46:39:4d:6d:b9:4a:c9:b9:7c:
ec:59:7a:81:90:d3:d3:57:46:ee:87:27:63:50:f4:fe:df:ee:
66:12:84:a4:78:10:8b:5f:b3:92:f2:97:bf:c4:cc:d6:e9:d5:
71:24:35:01:85:b2:dd:0e:bc:da:80:89:12:5d:19:02:d7:7a:
ca:88:42:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:47:57 2026 by rpki-client