
$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/61EFB2ACAC3611EDA5995F3FC4F9AE02.roa
File: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (raw, json)
Hash identifier: lxrRVOjIONZ0+sk1QUPdtSqTSIWnhV1Sgp2inbSvE0o=
Subject key identifier: 36:A9:0E:5E:23:1F:17:FC:78:C6:72:BA:9A:9B:93:CB:FB:61:14:6E
Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Certificate serial: 0B6E
Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/61EFB2ACAC3611EDA5995F3FC4F9AE02.roa
Signing time: Wed 11 Mar 2026 06:22:43 +0000
ROA not before: Wed 11 Mar 2026 06:22:43 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 24462
IP address blocks: 59.148.165.0/24 maxlen: 24
202.77.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2926 (0xb6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Validity
Not Before: Mar 11 06:22:43 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69b10a33-cba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:73:0e:f2:96:e2:96:2d:5e:fc:2a:ba:ba:
8c:0a:a0:6e:de:36:76:6c:da:de:e5:27:13:24:06:
36:6c:5d:e2:62:a5:91:a8:ca:bf:63:64:a8:fc:e5:
bf:b7:c8:15:96:c6:7f:b0:26:b1:99:30:c3:6d:8e:
c5:f3:25:5d:34:4f:62:0d:b8:50:76:17:52:66:5f:
1b:fb:34:f6:22:21:11:6b:e8:8d:50:e7:67:76:4a:
a5:cd:b4:4d:e3:4a:0d:41:28:49:01:4b:96:b3:cc:
7c:eb:4c:6b:2e:fd:a1:8a:83:b4:d7:39:70:c8:03:
b7:c5:e9:3d:46:ab:6d:91:e7:92:e7:49:d9:b1:af:
3b:61:c8:f3:cf:73:aa:f8:c0:11:a4:e3:97:d7:81:
2e:d5:6e:4d:60:ef:05:bf:ee:ea:97:98:c8:e6:98:
a9:b8:e9:a8:57:c4:23:be:48:39:88:7d:f0:d5:d5:
7e:b0:25:c5:37:33:03:c1:51:d3:a5:87:12:55:11:
ef:08:25:10:74:01:22:80:e2:83:49:62:0c:1e:de:
d2:9b:ce:e6:d7:e5:b4:22:7b:06:4b:24:c1:84:fa:
e3:96:12:7c:77:be:82:46:d9:d6:66:dc:0b:0a:9b:
dc:aa:7d:13:b5:44:54:67:1f:b0:41:58:59:07:cc:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A9:0E:5E:23:1F:17:FC:78:C6:72:BA:9A:9B:93:CB:FB:61:14:6E
X509v3 Authority Key Identifier:
keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/61EFB2ACAC3611EDA5995F3FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
59.148.165.0/24
202.77.51.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f9:45:93:dc:10:b5:88:28:06:38:d5:b9:1c:00:65:80:65:
9f:8e:84:74:b1:bf:e2:9d:2c:a7:80:16:c2:07:71:3e:0d:ea:
e8:d7:6f:19:fc:2c:d4:5f:dd:80:68:2d:4e:e7:a9:38:7a:97:
15:5a:93:b5:54:96:b2:de:af:d7:8c:04:3b:4a:92:52:7d:ed:
0e:b6:d1:3e:9b:fd:8f:01:5e:6e:2d:c8:7e:16:2f:73:d1:3b:
5c:ea:fe:f6:4f:50:07:31:b5:60:b3:a1:f5:35:cc:ba:ab:e4:
b8:37:f9:46:90:e0:ee:0b:b4:6e:de:fb:a8:4e:fb:1a:91:24:
d5:df:35:6c:4f:13:a0:e8:78:3f:21:31:4c:e1:06:e0:eb:7a:
bc:91:c0:c0:24:b2:70:ee:3e:95:b4:b5:95:17:f4:56:b0:72:
12:62:54:34:3f:bc:93:5b:a3:1d:dc:44:b9:3f:7c:cd:15:32:
ee:7f:c3:2e:4a:e3:88:75:5d:e3:24:6d:b6:ac:67:00:f6:d7:
70:fe:70:2d:cb:99:0a:e5:f6:c5:a2:ed:7b:0e:06:7e:1f:51:
62:e9:8d:f9:90:1a:af:5f:82:64:3f:42:d8:31:d2:a6:d3:4d:
3e:b5:e4:2e:fa:ab:87:57:0b:ed:d9:bc:4e:0e:19:3c:e1:ef:
76:94:2f:ec
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICC24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE
NTQ0QTYyQTYwHhcNMjYwMzExMDYyMjQzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWIxMGEzMy1jYmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmMJzDvKW4pYtXvwqurqMCqBu3jZ2bNre5ScTJAY2bF3iYqWRqMq/Y2So/OW/
t8gVlsZ/sCaxmTDDbY7F8yVdNE9iDbhQdhdSZl8b+zT2IiERa+iNUOdndkqlzbRN
40oNQShJAUuWs8x860xrLv2hioO01zlwyAO3xek9RqttkeeS50nZsa87Ycjzz3Oq
+MARpOOX14Eu1W5NYO8Fv+7ql5jI5pipuOmoV8Qjvkg5iH3w1dV+sCXFNzMDwVHT
pYcSVRHvCCUQdAEigOKDSWIMHt7Sm87m1+W0InsGSyTBhPrjlhJ8d76CRtnWZtwL
Cpvcqn0TtURUZx+wQVhZB8yu/wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDapDl4j
Hxf8eMZyupqbk8v7YRRuMB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1
MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTY0N0MvNDM3Q0M0MDY4NTEzMTFFQUFBMEIwQTdGQzRGOUFFMDIvNjFFRkIyQUNB
QzM2MTFFREE1OTk1RjNGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAO5SlAwQAyk0zMA0GCSqGSIb3DQEBCwUAA4IBAQBU+UWT3BC1iCgG
ONW5HABlgGWfjoR0sb/inSyngBbCB3E+Dero128Z/CzUX92AaC1O56k4epcVWpO1
VJay3q/XjAQ7SpJSfe0OttE+m/2PAV5uLch+Fi9z0Ttc6v72T1AHMbVgs6H1Ncy6
q+S4N/lGkODuC7Ru3vuoTvsakSTV3zVsTxOg6Hg/ITFM4Qbg63q8kcDAJLJw7j6V
tLWVF/RWsHISYlQ0P7yTW6Md3ES5P3zNFTLuf8MuSuOIdV3jJG22rGcA9tdw/nAt
y5kK5fbFou17DgZ+H1Fi6Y35kBqvX4JkP0LYMdKm000+teQu+quHVwvt2bxODhk8
4e92lC/s
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:07 2026 by rpki-client