
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/61FC1B6A60B511F0A2C58668C4F9AE02.roa
File: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (raw, json)
Hash identifier: HgsCBlPfUxEGN7fUuKP9EFyk8NbYZcFbFk0fllEBLvI=
Subject key identifier: 07:0B:F8:1B:DA:5F:56:6E:62:3C:59:F4:DA:56:B6:0F:DA:47:29:63
Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Certificate serial: E4
Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/61FC1B6A60B511F0A2C58668C4F9AE02.roa
Signing time: Sat 19 Sep 2026 06:56:31 +0000
ROA not before: Sat 19 Sep 2026 06:56:31 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154047
IP address blocks: 165.101.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Validity
Not Before: Sep 19 06:56:31 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aae321f-0eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:6c:d8:8a:b4:26:9c:d4:76:29:02:89:e6:
25:43:c8:55:6a:07:7e:b2:30:58:e5:2c:c6:1b:5d:
3c:7e:e8:f7:e1:24:8a:87:0f:01:98:ac:b5:55:ee:
e0:ec:38:cd:18:3a:ff:2f:95:0b:32:ee:8c:93:46:
e9:4e:6d:cb:08:bb:d8:e9:d6:53:52:bd:26:4e:43:
7c:ca:11:db:e6:f9:90:8d:42:06:d5:0f:3d:dc:be:
0e:a5:5b:f3:7b:3a:00:87:2f:90:65:db:65:2f:d3:
5e:41:67:62:34:60:22:f3:e5:ac:dd:81:fa:df:73:
ee:32:eb:2e:83:31:9d:78:02:9e:d5:48:f5:1c:bd:
e7:16:74:df:91:c4:62:56:8e:bd:38:f1:16:d4:72:
db:4e:64:c6:84:f5:a8:2c:2e:6b:40:37:4a:f1:8f:
27:25:cb:8b:0e:2a:1c:06:df:d2:b8:ec:15:1d:0d:
ba:32:f1:83:7f:3c:6d:ed:28:36:ac:ae:86:43:74:
9f:c8:21:fc:a7:de:04:ed:64:a5:be:1e:80:f4:7b:
41:4f:be:9a:f8:53:67:41:f1:10:28:03:c2:c9:fe:
af:05:22:d5:4c:d8:2a:ef:03:71:b1:70:43:e0:a4:
18:83:0d:2a:c9:da:9f:23:5e:6b:36:9b:f0:cd:53:
b4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0B:F8:1B:DA:5F:56:6E:62:3C:59:F4:DA:56:B6:0F:DA:47:29:63
X509v3 Authority Key Identifier:
keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/61FC1B6A60B511F0A2C58668C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.188.0/23
Signature Algorithm: sha256WithRSAEncryption
00:15:11:8e:b5:46:bd:e7:1e:1e:63:0d:b9:d6:f8:73:40:c5:
e9:53:4c:3c:9c:05:d3:4e:36:a5:cb:20:21:e1:4b:3b:43:fc:
0b:ab:f0:96:6d:b1:d8:b2:55:d0:f6:bc:2f:0f:88:a1:57:99:
ae:a6:c9:9e:a8:26:d9:b6:5b:e4:28:2e:b3:f6:a8:ba:73:ab:
8c:34:84:35:9a:c5:b0:1b:7b:23:d3:e3:02:19:9d:b4:91:60:
0e:76:69:da:6d:27:a7:a0:9d:bb:8d:d0:2b:27:79:f4:8f:44:
6f:a4:c4:49:16:0c:80:48:62:ba:7e:c1:7c:62:d5:14:fb:39:
b6:e0:23:68:2a:58:d5:88:d5:21:b4:be:26:79:42:51:f7:b8:
75:8e:27:7b:18:8b:3e:f5:11:8a:01:64:a9:ca:85:7f:a7:37:
cd:f9:2e:21:24:27:ad:58:93:41:6c:38:93:f4:97:0f:2a:da:
67:ca:13:aa:94:58:53:be:e9:f4:7b:13:38:ad:72:3c:bf:96:
0e:ca:ea:86:eb:c2:93:11:ae:db:79:98:56:53:77:0f:11:22:
22:09:98:35:4a:4c:da:11:6b:62:93:5f:c6:5a:ca:c5:c4:59:
eb:91:04:b5:38:4a:69:80:c9:2a:33:8d:f9:87:fc:eb:5e:b6:
79:2f:8a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:34:55 2026 by rpki-client