
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/F60B4BC272C611F1AF8F5FA470A30FBC.roa
File: F60B4BC272C611F1AF8F5FA470A30FBC.roa (raw, json)
Hash identifier: u2ZcwrTd5VGUBKX9MxJ7Nhaz/rLCCBhAn2QaEhijF8Y=
Subject key identifier: 7F:FA:03:66:74:85:89:BD:90:B8:E6:B0:2D:57:4A:DD:68:5B:28:23
Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
Certificate serial: BA
Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/F60B4BC272C611F1AF8F5FA470A30FBC.roa
Signing time: Sun 28 Jun 2026 07:57:08 +0000
ROA not before: Sun 28 Jun 2026 07:57:08 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 136396
IP address blocks: 49.213.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl
rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 16 Jul 2026 09:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
Validity
Not Before: Jun 28 07:57:08 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a40d3d4-5175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:84:00:29:4d:f4:32:ba:69:6f:d8:c5:ca:
61:f0:2b:80:cf:3b:00:f9:a3:07:35:d2:a5:e0:ad:
01:6d:58:cc:6e:89:f2:e0:84:2b:bd:17:78:c2:b0:
ff:21:b7:5a:92:a5:01:c9:c8:b3:32:6e:e0:d8:aa:
9a:d5:42:d0:ef:8e:28:74:64:b2:d5:51:03:db:c1:
37:99:b7:b2:34:4b:5f:fa:13:cf:56:25:52:56:74:
96:ce:06:29:76:87:6b:d6:cf:71:ab:f7:0c:90:f5:
db:11:d1:66:4f:b6:01:b4:81:3d:ee:ba:5c:e6:45:
68:61:52:30:8c:f2:0c:43:50:67:ae:42:6f:d9:77:
fe:40:3b:c0:28:d2:16:58:2a:ed:05:0c:c4:78:83:
a1:f8:f9:fc:7b:e7:c3:91:fd:63:69:85:bb:25:06:
6d:e8:57:9b:72:9a:ba:73:85:27:94:8e:6e:c5:1a:
4e:f5:d7:8c:d1:59:e5:47:d7:cb:29:01:22:1f:58:
76:75:81:07:51:c4:97:0b:ee:05:df:64:de:99:b9:
12:ab:e9:ab:61:0a:61:50:b2:5f:68:61:21:3f:e9:
bb:d6:d4:60:13:4f:a2:7c:64:77:26:92:bb:4f:ad:
dd:80:6b:43:51:c4:3d:66:bf:b5:d3:6a:f2:0f:38:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FA:03:66:74:85:89:BD:90:B8:E6:B0:2D:57:4A:DD:68:5B:28:23
X509v3 Authority Key Identifier:
keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/F60B4BC272C611F1AF8F5FA470A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
49.213.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f6:50:22:78:38:7c:34:3b:5d:52:b6:af:ce:e7:c8:2f:86:
9e:6c:88:aa:0b:77:b8:6d:d4:5f:b6:63:a2:b2:e6:32:90:27:
fd:17:4f:16:2a:8d:dc:e0:41:fc:b3:85:1d:f3:16:cd:a3:61:
c8:0a:9f:42:e9:81:f9:cb:3e:1e:d0:47:b8:c0:02:da:ee:9b:
11:f9:c5:2c:24:85:1e:bc:7e:f9:77:af:b4:e3:a6:e9:18:32:
b2:5f:b9:f0:ff:5a:3f:a9:17:13:d5:8d:23:26:7d:bc:dc:d2:
34:b4:3d:e4:51:d6:d3:ac:e8:86:a7:c4:60:be:5a:a1:ed:a9:
dd:77:e2:dc:a9:79:31:4c:16:3c:aa:5d:d6:f9:3c:29:19:14:
e0:fd:eb:c7:86:96:a4:43:f8:c0:79:e9:eb:2b:f9:7c:73:b2:
91:59:12:90:8c:9b:ed:0f:91:20:01:10:c8:83:fe:30:5a:01:
a0:ed:3f:b3:5f:da:1c:ba:8a:88:8f:39:d7:5f:6e:6c:77:7b:
72:eb:71:5f:c5:1b:9f:84:b0:9e:10:81:d0:15:08:c5:8d:6d:
30:ca:a4:8e:04:73:5d:ef:cc:4c:7c:54:9b:65:65:76:95:00:
41:13:71:38:b6:c1:a5:33:59:b6:63:2c:8e:ca:cc:ef:e7:b3:
67:9f:c2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 21:40:05 2026 by rpki-client