
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/64B446CA7EAA11F1B173303066A30FBC.roa
File: 64B446CA7EAA11F1B173303066A30FBC.roa (raw, json)
Hash identifier: tb/s6gLIXaYTsezXokt2OrwPKppQtIENbSawKe+uw8Y=
Subject key identifier: FB:10:54:C0:FD:F2:B0:2C:73:A8:07:82:E6:55:56:D0:B9:2A:77:44
Certificate issuer: /CN=A91FC3D0/serialNumber=021E96A71D99740FF4258BEC390C4C876A3758E1
Certificate serial: 2E
Authority key identifier: 02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/64B446CA7EAA11F1B173303066A30FBC.roa
Signing time: Mon 13 Jul 2026 11:02:52 +0000
ROA not before: Mon 13 Jul 2026 11:02:52 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 12083
IP address blocks: 162.4.152.0/24 maxlen: 24
162.4.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl
rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC3D0, serialNumber=021E96A71D99740FF4258BEC390C4C876A3758E1
Validity
Not Before: Jul 13 11:02:52 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a54c5dc-3f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:97:f7:b4:b5:c8:aa:cf:9f:76:30:13:ec:
f3:d1:7d:1c:e4:60:a7:ae:93:ef:8f:9d:37:ab:61:
8e:ea:75:9b:d7:9f:5a:64:d5:cb:8b:53:40:4d:5d:
e1:e3:16:7c:9e:4b:94:dd:e6:d6:65:21:55:61:d7:
8b:14:cf:8a:cf:21:d5:48:3c:e7:a9:bb:20:25:6e:
c0:72:9c:a4:6c:2b:cd:94:7f:8d:d4:f2:b8:91:ca:
62:99:9f:a5:9d:4a:22:ac:fb:30:e1:bc:34:a6:36:
84:43:25:d6:59:8b:71:e1:3d:74:a6:fa:ff:fe:dc:
01:f7:6b:e8:0b:ad:c2:7d:fb:50:13:fa:68:f9:08:
67:46:25:cf:f9:85:94:7b:86:eb:8e:d5:c7:5f:1b:
56:a8:14:a6:2e:01:3c:d0:c0:6d:0a:2a:95:75:e2:
69:0c:62:48:d2:33:f1:08:78:10:4c:2d:91:b2:a4:
2e:a5:f1:d1:57:ab:c7:a4:6f:6f:35:35:50:57:3f:
66:71:e4:4f:14:b3:ef:b8:7a:c4:05:52:d1:07:69:
54:1b:4e:77:90:c7:06:c4:c5:23:28:16:d8:3f:92:
e3:f1:e2:12:04:7b:73:ea:e3:e9:36:71:33:e2:98:
71:e0:cc:52:74:4f:f7:76:d6:f2:6c:7e:14:9a:34:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:10:54:C0:FD:F2:B0:2C:73:A8:07:82:E6:55:56:D0:B9:2A:77:44
X509v3 Authority Key Identifier:
keyid:02:1E:96:A7:1D:99:74:0F:F4:25:8B:EC:39:0C:4C:87:6A:37:58:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ah6Wpx2ZdA_0JYvsOQxMh2o3WOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/A706D7CE544611F18EF4CDA7A7833773/64B446CA7EAA11F1B173303066A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.152.0/23
Signature Algorithm: sha256WithRSAEncryption
90:08:8a:5e:89:1c:d2:c7:fd:b3:70:08:2b:e2:bb:8d:c2:04:
f5:cc:72:30:fd:4b:c7:1d:e0:6c:ee:10:6e:f3:34:f8:6f:fa:
6d:87:42:c4:34:ea:85:26:60:ba:89:5f:f0:ac:b7:45:b3:a6:
4b:83:f1:0f:68:af:12:4b:ae:b6:3d:2d:af:af:c8:38:ab:0d:
52:b9:7d:ec:a5:38:61:9f:6f:96:af:ad:2d:df:62:43:8d:cd:
0f:85:6e:73:8d:f9:f1:cb:88:f5:6c:07:6c:e5:83:11:2e:b6:
8e:d4:46:7d:7a:f6:43:78:ed:02:cc:93:a6:04:48:c4:68:dd:
d6:8f:a4:8e:81:73:7b:83:17:11:06:6b:1b:bf:c6:99:ee:60:
63:29:23:7e:b6:c9:39:a0:61:11:93:29:b3:2d:d8:6f:d2:52:
f9:1d:6b:d3:4e:da:14:7f:2d:19:27:10:ad:e5:90:ae:50:15:
46:d0:8d:8d:af:04:ab:17:b5:9b:80:da:ae:04:91:0c:b7:f1:
47:f9:61:61:1d:bf:3f:19:1c:48:6f:f7:a7:47:f6:b3:02:34:
23:1a:55:85:85:12:ee:be:b5:20:ce:b4:13:16:85:39:e6:92:
43:ec:43:8b:25:42:3e:8a:22:ef:89:f0:15:67:2b:1f:61:e5:
d6:5d:10:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:35 2026 by rpki-client