
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/616950CE619411F1AAF641588347A888.roa
File: 616950CE619411F1AAF641588347A888.roa (raw, json)
Hash identifier: 85l6JVvihxAkzulND/6hVXZpBAFkUy/kNDU9a1Amuro=
Subject key identifier: 1E:FC:DE:BB:15:A2:C3:22:ED:28:02:12:6D:3C:92:C3:86:FB:2D:13
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 02B9
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/616950CE619411F1AAF641588347A888.roa
Signing time: Mon 22 Jun 2026 06:32:53 +0000
ROA not before: Mon 22 Jun 2026 06:32:53 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 45173
IP address blocks: 87.124.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Jun 22 06:32:53 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a38d714-d667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:08:26:6c:23:f3:80:34:4c:c0:b6:fb:6d:32:
d1:67:21:e5:2e:ff:d7:b7:ad:f5:af:80:62:ce:c7:
38:ad:71:1e:3e:d5:00:a6:d7:5b:87:c1:6f:ab:ef:
93:aa:5a:27:58:65:c0:4c:40:ca:be:66:74:3b:76:
d6:f2:48:7b:0e:27:47:2e:5e:3f:46:aa:f3:d9:f4:
ea:31:61:a1:57:2a:ae:cd:9c:e1:a3:e8:d4:07:e3:
d1:6b:50:18:da:a5:29:e3:9c:4f:ad:46:0e:22:e4:
28:6f:be:0f:a2:cc:cf:9d:bd:1c:2e:8c:69:11:d3:
e0:77:10:6a:52:53:c4:cd:f2:25:9c:95:6f:29:c5:
c3:0b:af:ea:19:88:c4:3e:0e:1d:cd:34:6c:36:c4:
4c:70:80:29:fe:3c:6c:7d:f3:af:0f:ab:30:d2:63:
ff:ed:94:40:d9:a6:27:9c:76:06:7b:95:e9:f3:09:
8f:cd:08:62:e3:95:14:60:d8:be:9f:6e:3d:d3:b8:
ab:25:31:7f:cc:d8:14:2c:96:95:2e:43:58:2c:a5:
d7:0d:6b:be:06:d5:df:8a:8f:05:b1:de:75:6e:46:
d8:4f:b8:ab:14:90:56:c7:ba:58:6c:1d:5a:ec:88:
72:c7:ab:8d:77:b8:61:fa:8d:68:ad:04:7c:d3:47:
f2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FC:DE:BB:15:A2:C3:22:ED:28:02:12:6D:3C:92:C3:86:FB:2D:13
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/616950CE619411F1AAF641588347A888.roa
sbgp-ipAddrBlock: critical
IPv4:
87.124.89.0/24
Signature Algorithm: sha256WithRSAEncryption
26:15:6f:b9:c3:c9:9e:ca:32:35:15:77:f0:28:59:9f:8c:24:
4b:36:0a:18:64:4e:c7:ad:e3:2a:ac:40:a4:e3:82:d8:a6:03:
45:d8:24:8c:96:58:d9:03:f2:07:25:1c:fa:ff:a3:66:42:e8:
42:83:24:56:f1:bf:a8:50:01:1b:a1:3c:8b:cf:2e:d9:6f:59:
05:80:2d:c9:69:51:3d:95:55:00:aa:5c:67:25:0e:04:48:5d:
fe:c9:aa:14:81:80:27:fc:77:3e:37:ef:d4:38:dd:1f:94:8d:
e9:c1:d4:35:56:5d:ac:d7:24:c9:c0:00:0b:f9:9f:dc:7b:34:
be:4f:cb:29:5e:70:a7:24:72:07:68:8f:ae:15:35:ef:d4:dd:
4d:cd:7f:f7:fa:c1:b4:54:04:21:f9:df:01:99:b1:61:22:64:
cd:1e:7d:95:97:41:5d:4b:10:f9:9a:7f:f3:75:5c:fb:c7:63:
a9:f6:4a:e0:36:5b:d2:9d:01:32:04:dc:eb:1a:b4:d9:2c:fe:
7a:4f:8e:0e:ca:a0:0c:00:9b:e9:59:89:fb:0c:96:9a:52:49:
e5:6d:30:5f:57:10:d8:42:86:a0:23:cd:f8:e1:75:0d:fd:87:
ec:fd:f4:c7:1b:25:e7:e8:dc:5b:d6:1f:a3:30:00:c0:93:14:
67:d4:c0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:33:24 2026 by rpki-client