
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/D21111C2190011F187AE9EA5203D8C67.roa
File: D21111C2190011F187AE9EA5203D8C67.roa (raw, json)
Hash identifier: QBY/KlIfl7r0REBMASrW8pgiV36TJqXHiWnzxZNFLi8=
Subject key identifier: 77:F2:03:99:71:A8:95:72:67:20:06:5D:F7:51:9C:8B:F5:83:B0:14
Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
Certificate serial: 0371
Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/D21111C2190011F187AE9EA5203D8C67.roa
Signing time: Mon 15 Jun 2026 01:30:22 +0000
ROA not before: Mon 15 Jun 2026 01:30:22 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 45867
IP address blocks: 140.168.64.0/18 maxlen: 21
140.168.66.0/24 maxlen: 24
140.168.67.0/24 maxlen: 24
140.168.78.0/24 maxlen: 24
140.168.79.0/24 maxlen: 24
140.168.80.0/24 maxlen: 24
140.168.81.0/24 maxlen: 24
140.168.87.0/24 maxlen: 24
140.168.128.0/18 maxlen: 21
140.168.135.0/24 maxlen: 24
140.168.138.0/24 maxlen: 24
140.168.139.0/24 maxlen: 24
140.168.166.0/24 maxlen: 24
140.168.234.0/23 maxlen: 24
140.168.236.0/22 maxlen: 24
140.168.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl
rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 881 (0x371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
Validity
Not Before: Jun 15 01:30:22 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2f55ae-5179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:17:40:25:c1:de:d0:8a:ff:49:00:e4:83:
e3:90:fc:48:dd:ab:91:a4:4f:85:80:36:79:53:2d:
22:f4:81:f4:c9:62:72:ee:9d:50:66:55:14:ee:ea:
47:12:d2:6c:88:da:1a:3e:d1:87:a7:f9:fc:cb:69:
15:c3:a3:b6:16:99:4e:4d:3c:1d:d7:dd:4e:f4:52:
63:9a:ff:e8:2f:6d:cc:98:e3:1d:36:83:93:8f:dc:
c2:75:87:31:51:8a:be:db:53:98:aa:09:ad:85:13:
cf:8d:93:6e:f0:0a:cf:7b:33:7d:0e:7f:18:66:9b:
0b:fe:b9:16:f2:02:e6:53:21:c7:38:5c:1d:cb:6e:
7a:e0:44:84:b3:57:f1:d4:20:b3:44:73:0b:c1:39:
95:7f:af:d6:35:b7:90:1d:a3:a0:7a:cc:50:fa:fa:
6e:5a:f5:bd:57:06:00:e3:fa:3d:63:08:0c:4b:b7:
58:62:5f:74:9c:bb:14:9d:14:64:fa:8c:b5:c5:67:
5e:0e:cd:98:6d:d4:56:31:a9:70:56:df:93:36:5d:
4d:a8:94:f1:b3:35:d5:13:3a:49:40:2d:c6:05:2a:
22:58:e3:40:91:e4:43:7b:c5:75:01:dd:6f:6c:75:
1b:f8:9d:e3:42:82:60:3f:24:c0:4d:c6:c6:e6:b9:
d6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F2:03:99:71:A8:95:72:67:20:06:5D:F7:51:9C:8B:F5:83:B0:14
X509v3 Authority Key Identifier:
keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/D21111C2190011F187AE9EA5203D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
140.168.64.0-140.168.191.255
140.168.234.0-140.168.239.255
140.168.250.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:d8:ac:d0:6b:cb:94:90:d0:bb:ea:e6:10:d5:26:73:7d:2c:
af:ba:d3:32:f4:26:97:2d:79:72:59:65:26:fb:a2:b6:55:04:
71:d9:cd:50:e4:d5:44:aa:2c:c3:1e:d3:d7:1a:c0:ff:ab:6f:
d5:68:9f:19:3c:dc:40:1a:d8:1b:4e:cf:38:65:4f:b6:d0:62:
05:49:1b:ec:7b:4f:1a:bd:c4:94:65:c5:7b:0c:e2:4d:e5:18:
8a:13:0c:f5:8c:c7:68:98:38:3d:87:6d:63:60:0d:91:1d:ef:
0e:69:9f:5f:d2:d3:b1:fc:3d:bf:aa:9f:3a:96:8a:41:36:03:
a1:f9:7a:08:04:be:73:ab:27:84:30:6e:5d:6e:b6:9c:e4:de:
ed:0d:c8:b6:24:4b:ae:53:f9:8a:b3:06:1b:bc:21:77:a1:d8:
7c:8e:eb:9c:29:e7:db:52:2b:64:82:07:5f:91:63:4c:1e:54:
84:69:ea:05:1d:4d:7c:47:77:b7:f4:75:c6:77:05:ea:44:2e:
4f:02:17:d3:54:13:bd:f1:13:35:e2:20:e7:8c:74:b8:70:32:
31:49:e4:58:ea:98:27:6c:d8:b5:84:8c:9d:70:06:ca:21:51:
72:2e:07:94:83:c1:df:78:3b:0f:ef:fb:72:fb:4e:5e:ca:93:
a6:c9:ad:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:22 2026 by rpki-client