
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/D61299F2D8C011EFB41E1319C4F9AE02.roa
File: D61299F2D8C011EFB41E1319C4F9AE02.roa (raw, json)
Hash identifier: MvjrpA8nu40LGxQXWjdD9p0iLPf7ToQSF7FdXEo94I8=
Subject key identifier: 3D:61:A8:F7:BB:6D:76:05:FA:22:50:3D:9D:A8:A7:BE:25:F6:CB:88
Certificate issuer: /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB
Certificate serial: 01D4
Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/D61299F2D8C011EFB41E1319C4F9AE02.roa
Signing time: Wed 06 May 2026 01:11:40 +0000
ROA not before: Wed 06 May 2026 01:11:39 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 140577
IP address blocks: 168.100.128.0/19 maxlen: 19
168.100.128.0/20 maxlen: 20
168.100.128.0/21 maxlen: 21
168.100.136.0/21 maxlen: 24
168.100.144.0/20 maxlen: 20
168.100.146.0/23 maxlen: 23
168.100.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl
rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA5A2, serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB
Validity
Not Before: May 6 01:11:39 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69fa954b-80b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:7d:43:cb:ea:e5:99:de:79:1a:38:47:95:
5d:23:1f:1e:82:80:85:c5:15:97:1a:09:41:ab:2b:
8c:6a:d4:3f:e5:b7:a4:c9:d8:d0:cf:7b:07:9a:b8:
ed:af:9e:95:ec:c1:ed:a3:6b:c8:76:0d:69:ac:d3:
86:c3:38:97:95:78:7b:85:a6:1b:7a:d2:2c:4d:b7:
d1:c0:69:ce:94:35:4c:dc:7a:d3:69:4b:8a:d7:aa:
4f:80:01:23:c7:ae:fc:58:8f:9e:a6:38:40:cb:62:
5e:6d:c8:81:a7:23:7d:83:29:54:1d:0e:78:79:d3:
5f:45:51:75:20:e6:dd:60:05:0f:fd:8a:17:de:b4:
33:21:1f:df:93:a8:7c:c6:9c:55:2d:39:7e:37:5b:
e6:96:f7:3a:e4:5b:a6:b0:dd:04:f2:7b:0a:0b:12:
b4:7c:f3:27:f5:60:a8:bc:61:5c:18:1b:2a:fe:6f:
a3:89:a3:67:80:50:63:34:4b:ec:44:05:94:74:0a:
f8:aa:a6:56:da:88:5c:43:a2:e2:4d:da:bd:a5:cf:
ff:03:17:5f:f5:ea:b1:f4:f7:49:4f:e5:3b:25:c7:
76:d8:aa:22:02:b1:a1:b7:f2:30:14:44:53:12:cc:
e6:ef:fe:c0:5e:6f:85:d8:37:31:a8:4f:19:fb:0b:
75:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:61:A8:F7:BB:6D:76:05:FA:22:50:3D:9D:A8:A7:BE:25:F6:CB:88
X509v3 Authority Key Identifier:
keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/D61299F2D8C011EFB41E1319C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
168.100.128.0/19
Signature Algorithm: sha256WithRSAEncryption
56:71:9f:29:e4:a1:4a:7f:b5:a6:93:2d:12:4c:d8:65:8c:fb:
af:9c:8a:bd:ed:a8:05:cd:90:a7:d5:db:ac:8c:70:45:1e:75:
20:1e:b2:c0:17:54:3a:a3:13:7f:98:ef:83:b7:bc:43:ea:4c:
26:8b:b7:1f:33:5e:06:28:b0:24:ff:40:71:12:01:c6:02:15:
80:04:96:f3:1e:b1:7c:9d:3d:7c:d2:e2:fc:86:e4:44:52:b0:
ff:94:84:6b:37:8a:56:76:c4:79:62:07:07:3a:7f:ec:c5:89:
d0:74:cf:04:35:f2:e7:09:af:d9:57:d4:7b:42:6b:c5:71:4f:
4d:33:d3:b7:d1:14:81:b6:6d:76:fe:d1:9a:84:ec:99:16:d3:
8d:6f:ac:7b:c8:a8:b2:b7:df:54:21:bc:af:5b:f6:f9:02:ce:
65:9b:da:94:c9:f1:a8:f6:b1:9a:b7:3d:78:0f:eb:14:f2:77:
12:6b:2d:ff:33:c0:98:6a:bc:be:88:d7:d4:fc:fe:f0:65:38:
01:02:25:93:6c:90:43:d5:cd:22:d7:81:a1:62:69:05:1b:e3:
6b:b1:b1:da:15:0c:50:ae:98:6d:be:eb:88:73:aa:e0:d8:f1:
af:ea:47:82:24:37:ed:0a:f3:b2:c3:6a:2e:f7:10:b1:3d:e0:
f0:ef:96:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:43 2026 by rpki-client