
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/7BF6BA42E91A11EF804C4B57C4F9AE02.roa
File: 7BF6BA42E91A11EF804C4B57C4F9AE02.roa (raw, json)
Hash identifier: x6MtBYBFtjmAIaJuXnzEfbP3mXi8pgUQtgd0R+EsvPA=
Subject key identifier: 70:2F:85:FB:9D:B1:71:AA:CA:92:A6:0E:DD:17:E2:FA:CE:2D:BA:55
Certificate issuer: /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
Certificate serial: E8
Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/7BF6BA42E91A11EF804C4B57C4F9AE02.roa
Signing time: Fri 03 Apr 2026 06:41:13 +0000
ROA not before: Fri 03 Apr 2026 06:41:13 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 153557
IP address blocks: 163.61.14.0/24 maxlen: 24
163.61.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl
rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111FFD, serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
Validity
Not Before: Apr 3 06:41:13 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cf6109-36c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:f3:a1:4e:a5:bd:f4:ee:cb:ec:83:f6:4b:
be:10:4e:96:c4:29:80:68:61:dd:2a:0f:88:ea:df:
81:80:b1:dd:f3:4f:83:de:52:91:39:48:09:0f:7d:
6f:80:70:eb:4d:30:a4:7f:46:76:f8:1d:14:a7:64:
82:f7:6d:8b:f3:5d:a8:17:0d:a5:98:88:9e:1c:9b:
7a:33:4b:5d:fc:21:60:eb:8c:24:48:ca:33:69:6a:
2d:71:a4:67:fb:c2:b0:83:ad:14:c2:5e:34:63:b0:
7a:68:64:86:d2:e5:38:96:cf:96:c9:48:f9:a5:d5:
4a:ab:bc:0b:5f:4a:68:b7:40:16:59:d9:19:82:42:
89:15:de:5b:53:e5:04:1f:a8:6a:5f:8a:9c:ba:85:
b2:f2:37:b1:d6:0c:43:23:81:7f:52:ff:21:75:88:
b7:45:e6:a5:f4:27:62:72:5d:6f:d0:02:62:25:4f:
15:ef:21:33:e5:66:76:7b:19:a7:4a:00:fc:d4:56:
09:7d:38:02:0b:c5:a4:64:81:b6:09:2d:b7:56:4e:
d8:48:b7:04:1a:37:e0:b7:c9:c5:64:a1:29:eb:d3:
79:41:93:13:66:ed:b0:37:bf:94:bb:1f:ef:2a:e8:
35:40:bb:32:0b:82:30:51:4c:07:34:28:65:99:2c:
37:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2F:85:FB:9D:B1:71:AA:CA:92:A6:0E:DD:17:E2:FA:CE:2D:BA:55
X509v3 Authority Key Identifier:
keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/7BF6BA42E91A11EF804C4B57C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.14.0/23
Signature Algorithm: sha256WithRSAEncryption
71:a9:0f:7a:83:5c:fd:01:3a:0c:65:ad:47:50:c8:8d:07:01:
5b:6f:dd:03:61:dd:b6:bd:d3:54:21:e2:72:41:8b:97:e2:c4:
91:6d:39:96:e9:76:c0:9f:5a:61:f7:55:65:1f:47:d3:8b:e4:
c5:4a:93:32:8c:fd:8b:3f:c2:00:79:a1:8e:ac:49:a0:67:c1:
08:0e:14:36:0e:65:de:90:00:f9:0a:a6:7b:77:49:20:c5:ea:
0c:df:a3:3d:76:71:23:ce:7a:89:8b:91:81:2f:38:c2:83:83:
bc:69:6a:d6:a5:d5:f0:21:85:26:fd:63:e0:00:c3:82:a6:75:
1d:98:8b:96:89:62:e3:39:f8:7a:9b:d1:2f:36:d5:12:14:5b:
a4:99:d4:7d:6f:b1:60:ee:81:0b:1f:ef:4e:60:7a:f0:45:88:
a0:c0:24:06:d5:d3:7d:81:78:fd:85:d1:71:cd:38:26:cb:45:
0d:27:a6:45:3a:72:18:40:57:24:95:37:0d:5c:09:c8:8c:12:
6c:1f:ca:b8:3d:05:5f:85:0c:73:f2:7d:15:df:1f:1b:ca:ed:
d6:66:f3:f7:77:32:50:0b:5c:7e:83:68:80:7a:02:5d:b6:6f:
6f:9f:f9:e8:2d:a3:61:56:4b:46:6e:80:d5:ee:80:34:80:eb:
66:94:1f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:00:41 2026 by rpki-client