
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/61CC010AE4BA11EE8037FD6DC4F9AE02.roa
File: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (raw, json)
Hash identifier: 02sqYdbDRE0+Eg/3piDn9CDT+5Zx0sH2Kq685uMN8gM=
Subject key identifier: 61:0E:BA:CF:DF:3C:A9:BE:22:86:22:41:25:D3:6F:4F:CF:D5:AE:06
Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Certificate serial: 02F1
Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/61CC010AE4BA11EE8037FD6DC4F9AE02.roa
Signing time: Tue 17 Mar 2026 01:34:42 +0000
ROA not before: Tue 17 Mar 2026 01:34:42 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 140217
IP address blocks: 166.120.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Validity
Not Before: Mar 17 01:34:42 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69b8afb2-bde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:18:d3:5b:c3:78:5e:82:56:f0:57:c2:89:
bb:44:17:ae:1c:07:12:47:16:8b:55:75:e8:a0:56:
2a:8d:31:dc:b7:f6:b6:51:93:3f:12:77:85:91:9d:
ae:7f:94:24:54:ac:27:9f:3c:30:6e:93:3f:66:38:
28:27:43:d6:bf:61:10:c3:71:36:15:a0:72:ad:66:
c8:74:6f:02:e9:1f:77:ba:22:71:01:ba:a4:a9:32:
09:15:b8:7a:15:f7:76:ee:b8:8f:61:1a:bf:7b:11:
2b:4a:43:14:c8:8e:8c:1f:22:3e:07:0f:f1:df:57:
41:d8:fe:da:49:2d:46:dd:5b:b4:67:2e:ce:a6:dc:
7e:dd:61:13:6d:fd:07:5e:27:98:1e:24:5b:7e:ba:
63:a2:be:e7:0d:b6:ef:d4:9c:62:8a:fa:6f:5a:1f:
4a:b2:99:2d:56:02:22:14:07:51:0d:11:9c:69:d3:
89:77:a1:b6:51:a3:e1:89:d1:f1:94:5e:e8:26:f5:
aa:65:7e:d4:e8:54:eb:d5:b3:fa:b5:d9:41:7f:f2:
90:33:0c:c1:7d:55:f7:09:5a:0e:81:5d:0e:ed:b6:
95:a2:6f:da:c5:8d:2d:a9:69:52:0a:de:32:c2:63:
09:17:c4:ce:3e:2e:f7:b3:91:08:e6:aa:39:cd:8f:
9c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0E:BA:CF:DF:3C:A9:BE:22:86:22:41:25:D3:6F:4F:CF:D5:AE:06
X509v3 Authority Key Identifier:
keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/61CC010AE4BA11EE8037FD6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
166.120.192.0/22
Signature Algorithm: sha256WithRSAEncryption
70:90:a1:86:6d:d8:52:df:e3:0b:c3:91:4a:25:8e:0d:7a:64:
63:64:0b:e7:48:00:42:31:2b:df:79:d6:44:0e:bd:33:19:79:
76:bb:1e:ce:70:66:1d:de:f7:19:16:94:67:5f:d5:5f:39:17:
02:53:0f:81:98:70:95:33:59:c5:26:08:3f:57:59:e9:e9:5b:
18:82:a4:01:e8:2b:bb:8b:f9:a4:95:a7:75:e1:5d:1f:2d:95:
fc:89:f2:11:90:ec:95:b7:b8:0d:21:8b:ac:8d:4c:32:27:bd:
ea:e5:04:80:a1:b8:7a:5c:05:03:36:3e:bd:24:cf:c6:dc:75:
25:3e:34:4c:6d:74:c2:ed:41:ea:18:d7:77:3b:51:36:f2:e5:
96:80:2b:b3:77:c1:97:7f:f4:04:87:cd:82:1a:97:d9:bc:40:
77:04:24:4b:97:8f:6d:f5:ac:5d:a1:66:bb:de:96:21:7b:5a:
a3:96:9b:88:1b:49:5f:1b:73:65:16:33:c4:a1:d8:23:54:5d:
6c:1e:2a:59:88:24:13:cf:3e:a0:1d:98:9c:06:e4:09:fd:bc:
35:a3:6b:2e:dd:fa:78:fd:e2:62:23:28:e0:64:60:f5:50:4f:
c7:99:6d:d9:b2:df:63:cd:5c:7a:dd:bd:00:79:45:80:b7:a9:
5b:a7:44:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:59:16 2026 by rpki-client