
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/61A59876012A11EFB75C350FC4F9AE02.roa
File: 61A59876012A11EFB75C350FC4F9AE02.roa (raw, json)
Hash identifier: z1kC7ixKWc94mNbOx5wcAEuMc543/xXPe6FxxWEqPQc=
Subject key identifier: 98:12:A1:78:39:17:52:16:73:8D:5D:76:E7:1A:AD:7B:79:8F:6D:00
Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78
Certificate serial: 0176
Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/61A59876012A11EFB75C350FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:25:41 +0000
ROA not before: Fri 05 Sep 2025 05:41:41 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 16509
IP address blocks: 117.74.104.0/24 maxlen: 24
117.74.105.0/24 maxlen: 24
117.74.106.0/24 maxlen: 24
117.74.107.0/24 maxlen: 24
117.74.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl
rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78
Validity
Not Before: Sep 5 05:41:41 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a59de5-1de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:d1:77:d0:f3:3d:3b:a1:ab:57:ca:fc:36:
b6:dc:d7:6b:c8:9c:34:d9:25:73:7f:21:f6:ae:00:
2f:91:5b:7d:28:4d:76:39:ef:66:ea:87:21:02:ff:
d8:09:c5:56:13:b0:29:20:4a:26:fa:ca:52:fc:a1:
c6:41:ec:3a:fe:a8:6d:5d:6c:06:1a:9c:4e:1f:88:
4a:41:b5:d8:9f:a4:79:04:18:88:c9:ec:ed:96:6a:
d0:a6:32:28:28:06:04:66:3b:43:32:98:16:71:32:
a6:f4:dc:a8:f3:93:9b:2a:16:64:ef:06:35:d4:ee:
42:bd:d0:17:83:93:65:05:47:78:5a:b1:7b:c2:73:
7f:00:08:b5:ae:44:01:2d:40:f1:a0:d6:1a:24:4d:
ea:c5:75:5d:a0:52:18:83:8a:25:eb:8e:7c:f4:87:
92:f0:51:ed:75:45:46:29:0e:b4:7c:5e:1c:80:1f:
59:90:cf:19:8b:d5:06:63:af:ae:35:c6:79:66:73:
fd:f9:d2:e5:68:5e:cd:21:42:f2:4b:e7:3b:a1:9f:
38:2f:98:a0:3f:c2:c3:12:82:d4:68:a8:a9:e0:69:
45:dd:0e:27:46:b5:67:13:8d:3a:ee:99:1d:44:a9:
57:82:7d:99:a4:02:ee:25:f7:6a:10:b5:0d:1c:8c:
bd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:12:A1:78:39:17:52:16:73:8D:5D:76:E7:1A:AD:7B:79:8F:6D:00
X509v3 Authority Key Identifier:
keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/61A59876012A11EFB75C350FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
117.74.104.0-117.74.108.255
Signature Algorithm: sha256WithRSAEncryption
79:b4:0e:71:23:7c:4e:de:6d:d9:56:8a:e4:19:e1:41:de:3d:
10:22:fa:5a:5d:63:44:c5:82:4e:c2:37:bb:da:9f:ce:f3:85:
cf:f6:08:41:10:5a:a3:11:bb:bc:ae:72:fd:3c:10:8e:fb:f9:
dc:92:3d:2e:43:59:64:bf:65:c4:e3:1a:8a:40:42:6b:62:30:
b9:de:01:f2:5c:27:8b:50:ee:af:5d:01:2d:b8:cd:b7:e0:4e:
c9:5d:bd:82:cc:9b:5f:1a:5c:1d:bd:f0:f2:f1:a2:79:6d:ab:
12:67:4e:fc:27:d2:86:72:7e:e3:d0:59:37:f4:2a:06:e3:b2:
74:92:8f:1d:86:96:0b:37:1d:4a:c8:bb:72:db:60:c7:35:22:
17:c8:b1:df:90:8c:fa:93:c9:4b:62:77:cc:18:5c:13:43:13:
4b:a7:ae:0d:f3:c3:d2:32:66:5b:fa:6f:3f:70:64:52:94:78:
c1:17:de:25:a8:06:50:af:d7:4f:84:45:91:b3:32:9d:dc:df:
21:bf:37:e5:92:a5:39:aa:52:06:ed:98:79:39:42:6c:9b:f4:
1b:77:33:b0:50:3c:aa:41:7d:4c:b9:4c:e1:07:9a:dc:73:75:
c1:73:5e:57:d8:59:36:48:4b:47:c7:c9:c7:46:51:6d:63:87:
ae:16:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:30 2026 by rpki-client