
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/B4F27262FA2911EFA783CE2DC4F9AE02.roa
File: B4F27262FA2911EFA783CE2DC4F9AE02.roa (raw, json)
Hash identifier: uufA5ZmNxri3hkizmrTV+/5I7T9shm+y03oLPhZQF5k=
Subject key identifier: 57:B4:57:53:EA:54:18:DC:9A:A8:3F:19:BC:D7:C3:CF:A4:9F:86:B6
Certificate issuer: /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial: DF
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/B4F27262FA2911EFA783CE2DC4F9AE02.roa
Signing time: Thu 05 Mar 2026 05:43:12 +0000
ROA not before: Thu 05 Mar 2026 05:43:12 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 16509
IP address blocks: 163.61.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Validity
Not Before: Mar 5 05:43:12 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a917ef-02fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:4a:f5:c3:4a:ec:29:d4:80:07:0a:23:a5:
9a:1a:ac:b8:45:33:f7:44:a4:8d:b3:ec:93:3e:69:
45:de:c3:d2:22:d4:b1:d8:0c:95:25:a5:2f:ad:4d:
ce:5a:c6:84:ee:82:18:23:c9:3b:e8:6f:d7:2b:20:
a3:1e:00:21:e3:76:ba:11:fa:54:93:98:7b:27:f2:
ae:7f:83:44:69:e1:c9:dd:3b:2e:a8:98:45:0c:79:
8c:c4:d2:0e:27:e6:cb:83:08:1c:e1:71:85:5d:a2:
29:fe:4c:80:32:27:60:ae:46:7b:12:e6:d7:88:70:
e5:c2:07:58:e5:3b:66:74:fb:27:b5:ca:72:72:0b:
17:e1:5d:d6:71:01:02:f5:43:d6:4d:21:a6:1a:30:
45:ce:4c:2c:69:cf:66:79:e0:9f:67:60:c3:7c:6d:
07:2c:42:27:ad:57:96:60:69:b7:0d:83:82:27:df:
e4:9f:32:b8:67:7c:89:90:6f:51:d3:47:57:72:39:
12:35:1b:94:9a:2d:a9:e5:90:30:aa:47:24:28:98:
a7:2f:dc:00:9c:5e:2f:98:eb:d9:8e:57:0b:5b:0a:
a3:d4:93:9d:cd:e7:3c:1f:6d:2e:ef:5d:3a:bd:a3:
96:5d:1f:ca:02:99:ba:0b:65:29:4b:33:07:8c:c9:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B4:57:53:EA:54:18:DC:9A:A8:3F:19:BC:D7:C3:CF:A4:9F:86:B6
X509v3 Authority Key Identifier:
keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/B4F27262FA2911EFA783CE2DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.88.0/24
Signature Algorithm: sha256WithRSAEncryption
07:6a:e8:8d:99:f5:88:d8:da:ef:ed:f7:4a:a8:d5:e4:d0:58:
da:c0:63:96:56:d3:44:38:9b:e0:2f:45:23:d9:0e:c4:eb:f7:
68:45:43:3e:a6:38:cb:d9:12:aa:6a:6a:10:51:6d:33:cc:5e:
82:d4:26:fc:84:c3:69:88:80:c9:2c:e0:ed:c4:1d:e2:77:d5:
8d:fa:6f:e5:38:b5:86:ac:bd:25:10:b6:84:41:5d:61:b6:a3:
73:ae:cd:28:04:09:66:d3:b6:32:60:f3:50:d1:de:06:bc:96:
e3:ed:51:c7:28:fe:aa:70:51:e5:b8:81:67:93:37:fd:e4:81:
0c:2a:12:06:dd:9f:62:fc:2a:81:3d:9f:1d:b8:d8:e8:32:ca:
a9:59:3a:d1:a6:ff:3b:a1:01:4f:a2:87:a2:3a:52:49:af:fb:
4e:dd:d9:48:2e:1f:04:1b:4f:48:2e:63:a9:0d:af:4d:a6:8b:
60:b6:b6:1f:50:79:9f:19:c3:16:ac:44:54:83:a1:41:41:88:
fa:b6:e6:19:3f:a3:ee:c4:0a:17:0b:6c:58:9f:df:60:7e:6d:
28:6a:ba:68:d0:e2:4c:77:37:c7:33:bf:b5:0e:a5:f8:cb:79:
ee:9b:93:80:ce:67:98:d4:39:a4:3c:8a:2b:f7:72:a1:68:88:
4e:5f:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:33 2026 by rpki-client