
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa
File: 6EC9CC12746911F0B5BCC83EC4F9AE02.roa (raw, json)
Hash identifier: OwRUzuQroalc1cy5B+Anh6MY7IANW3CG/sTYPfIy2lA=
Subject key identifier: BE:05:52:3D:6A:6B:5E:AC:8C:8E:EA:5C:A1:D5:42:E8:4F:E3:C2:9A
Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
Certificate serial: 0753
Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa
Signing time: Tue 03 Mar 2026 05:45:24 +0000
ROA not before: Tue 03 Mar 2026 05:45:24 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 21859
IP address blocks: 122.10.140.0/22 maxlen: 24
122.10.149.0/24 maxlen: 24
122.10.196.0/23 maxlen: 24
122.10.221.0/24 maxlen: 24
122.10.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl
rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1875 (0x753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
Validity
Not Before: Mar 3 05:45:24 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a67574-a5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:b8:13:b0:12:3c:8b:d7:af:52:e2:45:2e:
14:51:0b:56:03:74:15:e0:50:90:cf:eb:17:67:8c:
56:ef:fb:21:64:04:4d:fd:40:f4:02:5c:0f:a1:df:
95:9d:15:fd:47:b9:c1:dd:d1:b4:2c:2b:4e:fa:5b:
30:db:71:69:a9:8f:13:a1:bb:bb:dd:ad:4c:b7:c7:
99:98:82:3c:1a:e6:c9:9e:75:bf:d6:18:46:b8:9b:
32:72:d4:07:94:03:56:97:a7:0f:bb:ca:be:81:8c:
0c:04:b0:73:71:a9:d2:b6:8a:6e:a2:31:15:f9:3a:
43:67:20:b4:76:7a:6a:20:7d:c8:72:6c:9c:d8:16:
3d:49:a3:62:95:d4:b0:68:1f:65:71:6a:80:89:dd:
dc:70:09:c3:5b:00:28:ce:62:2d:9b:bd:c3:98:b1:
4a:a2:5a:5a:38:75:5e:e7:69:95:20:cb:02:bf:c8:
e2:9c:8b:89:d7:3c:2b:40:f5:fe:42:e1:c0:39:c1:
35:69:c6:04:0b:28:2d:48:31:fb:d1:af:9c:40:58:
ef:a3:c7:a1:6f:5a:ad:e6:4a:fe:6d:f5:57:53:7b:
e2:7a:d6:0f:b9:b5:ae:35:51:d4:99:7e:0d:5a:1f:
b6:d3:bc:6b:89:3f:f0:54:c0:51:87:99:71:f3:21:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:05:52:3D:6A:6B:5E:AC:8C:8E:EA:5C:A1:D5:42:E8:4F:E3:C2:9A
X509v3 Authority Key Identifier:
keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.10.140.0/22
122.10.149.0/24
122.10.196.0/23
122.10.221.0/24
122.10.223.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d1:94:ed:6e:ee:df:8d:bb:c3:d9:6f:e7:92:0a:e6:6e:77:
54:a2:a6:8e:c6:a6:9b:7f:15:3e:81:44:44:60:fa:40:f4:c7:
98:04:36:c4:84:30:73:03:b8:98:ac:e4:1e:eb:36:0f:c8:07:
aa:b4:82:c8:aa:99:1a:e6:51:ea:15:ef:34:29:a9:2d:fb:27:
15:e5:cd:62:ab:c9:3b:0f:f6:43:11:32:41:be:cb:69:ff:ce:
2e:3c:17:f0:99:87:1e:5e:7c:30:7e:dc:9d:87:36:66:b9:c6:
d7:a1:71:7d:f5:5d:ee:f4:01:b3:09:a1:89:1f:18:a0:b0:a4:
ea:32:ae:e0:c5:eb:d1:38:36:52:8b:c2:c5:e1:6b:22:93:76:
98:8c:86:8c:a6:02:11:54:02:6c:a7:91:59:a7:1c:ee:66:b2:
9e:1f:a2:24:67:d3:bb:62:b2:0f:ca:fa:c7:fd:80:22:3a:ce:
0f:c7:4c:ed:d1:f1:91:fe:ab:da:94:48:61:37:99:44:3f:e7:
8d:07:33:53:13:f0:9d:04:0e:1f:fc:c5:ba:8d:35:5a:f0:3b:
c5:e3:70:f7:72:43:a0:81:16:c0:91:39:74:a2:33:57:2b:0c:
06:39:f3:d7:ce:03:71:89:76:4a:41:99:6e:5b:90:d6:37:d9:
a1:e8:89:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:53:28 2026 by rpki-client