
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/00606C184A3011EFBC542C18C4F9AE02.roa
File: 00606C184A3011EFBC542C18C4F9AE02.roa (raw, json)
Hash identifier: 5VZ6JaxYHvz/jnyWG4tULUFalKqQD2n3eSx0z0cU+H8=
Subject key identifier: D2:56:14:D3:25:61:F0:AC:78:DD:D1:6C:C0:4C:55:4B:4E:A3:E7:78
Certificate issuer: /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Certificate serial: 0137
Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/00606C184A3011EFBC542C18C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:19:51 +0000
ROA not before: Fri 07 Nov 2025 01:10:39 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 24074
IP address blocks: 202.12.248.0/22 maxlen: 22
202.12.252.0/22 maxlen: 22
202.27.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Validity
Not Before: Nov 7 01:10:39 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a58e77-c6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:22:00:e9:49:6a:1e:a4:1c:e5:4f:0a:5d:
42:cc:57:41:5e:cb:43:a9:4b:16:31:08:0f:53:27:
4c:4b:88:1e:6f:21:c8:9c:d5:f5:48:69:04:b8:88:
7f:3d:e3:e0:62:25:0c:fc:eb:42:be:ce:17:22:95:
41:87:07:82:e4:17:80:85:7d:a9:05:d1:f5:02:80:
6b:95:c2:d4:91:13:6f:9c:bf:74:68:27:e8:35:87:
21:8a:c3:58:e6:b3:01:ac:83:6f:55:47:9a:8f:f4:
53:fc:88:78:1e:63:a0:3c:98:a2:56:41:66:85:90:
f7:17:76:62:6c:93:25:36:c6:44:89:50:92:5f:41:
6b:09:c1:44:5f:67:42:0f:d3:01:9b:0d:2d:3b:35:
e6:9f:35:c2:07:3c:52:30:19:5d:79:55:bb:73:b7:
99:a0:b4:f6:fe:6c:c2:16:f0:e5:2a:7d:aa:a3:8e:
20:a2:e4:3c:16:7a:40:d1:b4:bc:90:c3:87:b6:c1:
8f:4a:a7:67:0f:ad:40:64:cc:ea:99:92:3f:4c:ba:
3a:d7:45:b0:4c:84:4f:f0:61:99:fd:1f:4b:86:97:
43:0f:15:14:e8:dc:6e:37:5c:fd:64:c0:35:e5:eb:
2f:06:11:ce:35:d2:9e:00:73:91:17:31:b6:b7:cf:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:56:14:D3:25:61:F0:AC:78:DD:D1:6C:C0:4C:55:4B:4E:A3:E7:78
X509v3 Authority Key Identifier:
keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/00606C184A3011EFBC542C18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.12.248.0/21
202.27.140.0/24
Signature Algorithm: sha256WithRSAEncryption
69:60:9f:7b:44:f4:76:fb:ce:6b:72:b9:c7:a2:f2:ce:bf:e7:
ab:1e:76:d1:fd:04:13:31:b1:c1:53:5f:f5:5d:b9:b8:cd:50:
4b:ac:9c:6c:5b:24:a2:01:cc:4e:e2:6d:c2:2b:16:aa:67:78:
99:48:02:b0:6f:92:40:17:7f:ff:38:a9:de:16:ae:66:2d:33:
75:3a:f8:93:b4:9e:9e:c5:05:ed:55:99:1a:c4:f6:a0:3a:ad:
ed:82:89:e6:4b:4e:c2:eb:f1:bf:2d:bc:1a:67:28:24:5e:18:
54:43:6c:70:c2:54:d2:ae:64:48:72:56:78:d1:29:d9:fa:48:
87:29:3c:51:64:18:6f:a4:2e:ae:2d:52:b5:00:23:4f:c5:8b:
8c:11:60:ba:9a:0a:42:b3:27:96:34:fe:c9:b0:a4:50:db:47:
29:d1:27:e7:e8:84:dc:a4:4d:ed:0b:36:1c:65:73:05:66:fc:
45:09:2c:a8:cc:56:91:3b:31:3c:b7:f5:18:6b:c4:53:34:5b:
48:fd:55:b9:73:87:3c:14:76:cf:cf:83:18:6f:85:98:da:f8:
8b:7a:76:02:56:8a:6d:00:3d:eb:bc:c1:93:2f:92:57:fe:06:
8f:6c:d3:56:7d:6b:cb:fc:09:d4:08:34:69:c4:e0:2a:b3:23:
5c:60:62:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:53:38 2026 by rpki-client