
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/447A88023DDC11F0ACD9F475C4F9AE02.roa
File: 447A88023DDC11F0ACD9F475C4F9AE02.roa (raw, json)
Hash identifier: yApvKnBxIUvq7AlUwJW85McmrlejDSLKrMcrZmKRC/A=
Subject key identifier: 8D:96:DF:EF:78:79:5D:6D:9C:E9:F4:D0:00:FA:FF:F9:66:0A:13:6D
Certificate issuer: /CN=A91F8177/serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
Certificate serial: 9A
Authority key identifier: 1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/447A88023DDC11F0ACD9F475C4F9AE02.roa
Signing time: Wed 11 Mar 2026 06:48:34 +0000
ROA not before: Wed 11 Mar 2026 06:48:34 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 135345
IP address blocks: 163.61.94.0/24 maxlen: 24
163.61.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl
rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8177, serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
Validity
Not Before: Mar 11 06:48:34 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69b11042-4dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:92:1f:fc:b8:5b:6a:d9:b8:92:32:06:1e:
36:bd:fa:40:eb:8c:c8:7d:5e:18:73:fe:4e:64:30:
59:99:4d:ed:cb:4c:98:4e:55:6a:8d:f0:c0:68:49:
a2:25:03:ac:fd:f3:b1:59:ce:8a:b9:0e:1c:0d:a4:
2f:1b:27:bd:aa:6c:0a:ea:35:52:f6:67:8f:b1:fc:
83:d9:09:c8:5d:72:fd:de:fe:5a:3e:5a:77:01:3b:
99:9a:15:b4:ff:66:a4:39:4b:47:ba:c7:26:d0:7c:
09:7f:28:6d:ab:c4:ab:ec:d2:a2:7c:bc:b0:1d:9d:
d9:6b:04:fa:a3:45:4c:e4:67:fd:2f:6d:b2:ec:3b:
37:67:60:ba:18:b0:c1:b9:97:4e:16:27:35:ea:7e:
ad:40:3b:89:c2:d4:d0:1d:72:65:54:8f:4f:ba:06:
2e:d2:3c:a8:ac:8a:59:6e:92:f6:5b:53:57:56:94:
a4:a2:94:96:34:78:b8:35:30:26:e6:eb:d1:dd:56:
1f:63:62:3f:a9:ed:37:c7:43:4a:33:ca:ff:ad:e0:
a3:dc:60:ba:7e:09:aa:69:c6:a6:2a:cf:39:d3:35:
be:21:3d:01:81:ef:39:37:bb:0d:46:6b:4c:34:ae:
fc:7a:78:c1:a2:25:89:6f:68:11:7b:a9:b4:42:31:
6b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:96:DF:EF:78:79:5D:6D:9C:E9:F4:D0:00:FA:FF:F9:66:0A:13:6D
X509v3 Authority Key Identifier:
keyid:1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/447A88023DDC11F0ACD9F475C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.94.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:3c:f5:35:6f:82:d3:6d:e4:cd:36:63:46:05:30:92:81:10:
67:59:bd:a6:f1:8f:75:00:ac:61:06:57:90:2b:81:e6:ab:c6:
59:33:7c:c9:aa:66:b0:7f:ce:3f:44:21:55:f4:cc:af:00:c1:
b0:7a:9e:21:0a:8b:82:9e:43:57:dc:1b:b3:ad:8e:05:33:b1:
6f:c8:9b:40:86:95:cd:8b:31:89:3b:17:8a:bc:b8:e0:65:d4:
1f:72:7c:12:38:4b:09:cd:5b:a8:45:b4:9f:fa:8f:f1:f2:02:
39:91:3a:97:69:fc:ef:84:39:77:44:88:a4:f7:1e:30:10:80:
8b:25:e5:e8:13:1b:7f:d9:b3:ed:e6:b7:52:a4:db:e8:8c:b4:
15:76:5e:83:3b:d8:7d:30:cb:ff:89:df:76:b8:a6:ac:69:9f:
63:a9:cf:31:df:ce:d9:08:3b:69:7c:6b:94:7b:0a:01:bc:be:
77:9f:34:39:d6:bb:17:36:f1:0e:41:6a:8c:19:73:89:e8:b2:
89:01:80:b4:de:57:f3:de:26:6b:bf:43:e1:5f:b4:c5:be:40:
97:54:8b:8e:70:7a:6b:b5:9f:6b:54:fc:30:25:83:2b:dd:40:
e0:8d:b1:86:5b:5a:ff:90:ba:13:dc:ae:14:61:ec:97:be:88:
99:dd:51:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:52 2026 by rpki-client