
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/6E16949065A011EFA4AA8E6BC4F9AE02.roa
File: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (raw, json)
Hash identifier: 1A3H69lIehBD2AfdLSl5FiHzZaNJ6PDNBZ1XdUVIfpc=
Subject key identifier: 3F:00:43:0B:44:D0:10:8D:2E:1D:B3:D7:50:F1:FE:D2:F5:14:1A:2B
Certificate issuer: /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357
Certificate serial: 0144
Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/6E16949065A011EFA4AA8E6BC4F9AE02.roa
Signing time: Fri 01 May 2026 05:39:00 +0000
ROA not before: Fri 01 May 2026 05:39:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132158
IP address blocks: 114.30.64.0/21 maxlen: 21
2400:8c80::/32 maxlen: 32
2400:8c80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl
rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357
Validity
Not Before: May 1 05:39:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f43c74-3511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:73:4f:ce:1d:34:b2:81:14:8f:a0:63:c5:73:
96:4b:83:db:11:fe:71:9c:05:e1:5b:75:77:de:ea:
67:ac:b4:4a:22:ba:0b:ef:8e:bd:2c:ba:5c:93:af:
1b:a9:c6:4f:8c:a6:3e:b6:60:79:96:51:4c:42:69:
05:44:56:fe:12:3d:3e:c8:6f:68:fc:e3:eb:94:43:
16:91:2d:14:69:f3:e6:87:27:8e:8c:20:f1:5f:91:
12:4d:7e:15:e7:08:8b:56:11:06:48:09:08:88:1a:
c5:48:b3:dc:2d:36:76:34:3e:df:2b:5c:eb:a0:9a:
57:c4:ff:27:58:62:0a:7e:ab:4e:ac:da:62:5d:bb:
3c:85:42:37:37:e8:9d:d7:fa:9b:5d:d7:bb:e8:e1:
75:65:28:3a:a6:d2:d0:f6:85:9d:1a:45:43:10:93:
44:75:b5:3b:aa:be:1f:5a:0b:be:67:42:61:ba:ed:
f3:34:9a:db:65:96:72:2a:61:e5:47:41:06:62:d3:
13:29:08:82:4e:5f:74:30:05:89:44:55:28:f8:41:
2e:bd:8a:fb:49:da:b3:a0:0a:46:90:e2:8f:dc:ac:
16:85:fb:ed:ba:9b:4d:c6:34:fc:be:58:00:97:92:
9a:31:b9:c9:ce:92:db:55:a7:35:35:56:15:64:08:
e2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:00:43:0B:44:D0:10:8D:2E:1D:B3:D7:50:F1:FE:D2:F5:14:1A:2B
X509v3 Authority Key Identifier:
keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/6E16949065A011EFA4AA8E6BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
114.30.64.0/21
IPv6:
2400:8c80::/32
Signature Algorithm: sha256WithRSAEncryption
96:b4:8f:92:22:4c:04:04:66:b6:d1:ad:e9:a4:92:86:23:88:
2c:a5:e7:68:66:55:7d:a8:0f:ec:a3:0c:cf:db:31:c5:ff:d5:
fa:1c:09:49:51:cc:e7:44:9d:cf:ce:cc:2d:3d:44:84:1f:e1:
60:9c:5e:00:b6:27:82:b9:1f:b1:91:8a:1d:aa:ff:f7:69:c1:
c5:36:f8:3c:2e:d7:1b:80:f6:75:ff:1b:35:b3:3b:be:9e:f1:
46:9c:e7:f9:46:8d:38:5a:fb:8e:cc:ee:6b:22:e6:66:01:f6:
f2:30:55:e2:eb:43:51:18:b3:01:87:80:4c:9a:12:33:fd:0f:
e5:80:be:9b:6f:f0:ec:95:f1:d3:73:f6:c2:99:ff:a1:cf:39:
8b:f9:12:1f:8b:23:f7:e7:1e:63:c2:15:f9:63:f0:59:1f:a5:
3d:a1:19:bc:bd:ae:57:3a:fc:45:fb:a6:98:64:06:d4:09:14:
f8:6f:5c:ca:e1:75:4f:8d:b2:75:0c:84:a8:2f:fb:96:18:e6:
6b:61:5e:e1:ff:71:23:25:f7:4d:8b:dd:d7:62:26:b4:e1:87:
32:9f:17:83:b0:d5:37:f4:a2:b5:9c:a8:79:51:60:86:aa:0c:
1c:f7:a7:85:c8:11:7d:bb:e2:fe:74:c1:fe:aa:4b:82:a7:ce:
f3:bb:18:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:38:41 2026 by rpki-client