
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/61A65BF2C35011EE95366E18C4F9AE02.roa
File: 61A65BF2C35011EE95366E18C4F9AE02.roa (raw, json)
Hash identifier: guwFqD3altsZHbc1dAy4+jYBLpjvPALMbPm6i0aYzrc=
Subject key identifier: DA:79:94:AA:CE:1C:A3:2B:5B:F6:DD:16:B2:22:BB:81:0F:F9:F2:AB
Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial: 35EF
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/61A65BF2C35011EE95366E18C4F9AE02.roa
Signing time: Tue 28 Jul 2026 15:10:45 +0000
ROA not before: Tue 28 Jul 2026 15:10:45 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38228
IP address blocks: 210.246.94.0/24 maxlen: 24
210.246.95.0/24 maxlen: 24
2403:c000:1401::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13807 (0x35ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Validity
Not Before: Jul 28 15:10:45 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a68c675-f172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:67:89:d6:d2:74:d8:3e:2a:d5:2e:bd:fa:
84:0e:63:9b:88:23:5c:9e:9f:05:15:a7:f9:9e:05:
24:ba:5f:d0:92:f4:54:87:1f:c1:a8:57:14:76:9e:
69:f0:66:cf:f8:4b:18:05:72:76:fe:55:b7:77:e2:
6f:f2:0c:07:c8:c3:f4:e7:e6:9f:ad:8c:34:07:8c:
8f:fe:df:c7:65:f1:44:23:b1:69:b6:a6:f8:10:ed:
56:0c:6b:34:e8:08:d8:0e:69:37:0d:18:ce:ec:ba:
54:22:1b:de:90:2b:78:3d:e2:27:60:81:7c:3a:72:
2d:61:ee:80:78:2b:7d:70:5e:05:46:31:31:4a:14:
a0:46:a2:26:9e:e1:f7:2e:7b:69:2c:ad:89:b3:10:
7e:e9:ef:11:28:b5:fb:b9:ec:f2:be:3b:bf:01:b9:
0e:fd:11:e2:05:cc:ca:63:dd:63:b9:70:22:b1:97:
e1:6e:35:99:60:2b:e3:fb:ae:86:6f:3b:66:5e:34:
b1:ce:cd:60:8f:f1:4f:88:32:50:57:1c:c2:7d:0f:
38:06:aa:8d:b6:6b:a3:d6:35:87:96:f2:6c:0c:e2:
a9:97:d2:62:dc:d0:dc:8c:6a:25:06:72:1c:4c:98:
97:34:74:e4:49:2a:73:a3:8b:ca:bd:13:aa:01:9f:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:79:94:AA:CE:1C:A3:2B:5B:F6:DD:16:B2:22:BB:81:0F:F9:F2:AB
X509v3 Authority Key Identifier:
keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/61A65BF2C35011EE95366E18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.246.94.0/23
IPv6:
2403:c000:1401::/48
Signature Algorithm: sha256WithRSAEncryption
29:82:b8:ce:82:7d:e4:68:fe:75:13:2f:f2:52:28:2e:55:e5:
d0:6f:b1:17:17:e9:53:6f:fa:2e:91:ea:e3:f0:1a:73:69:c3:
1f:64:d0:37:49:d6:20:c3:07:26:49:c3:ae:44:ff:55:70:68:
32:2c:11:9f:5b:34:d4:1e:bf:9f:13:51:6b:67:da:aa:c9:61:
7a:86:25:8c:1c:48:03:a3:e3:dc:c8:fa:43:18:80:a7:50:f6:
23:58:ef:0a:99:f8:cd:65:87:7c:22:0a:b8:3e:05:3c:74:23:
cc:ba:26:e4:be:4b:56:c3:52:76:ad:1a:d0:af:a4:8c:34:47:
c3:7c:4d:1e:68:8b:56:34:02:b8:23:13:f3:f3:41:da:05:32:
37:e1:0a:7a:78:96:a2:c0:4e:3e:2c:d3:8a:bd:4e:8e:9a:fb:
df:30:d1:e9:63:06:93:d6:bf:b1:49:f2:d3:ba:01:be:8e:d8:
f6:06:ea:82:b8:cf:df:8f:34:01:74:aa:8b:05:59:66:cd:6e:
2a:2e:bd:ff:93:52:3d:0a:41:dc:dc:93:9a:1f:df:1f:46:60:
6c:21:53:75:78:08:42:67:01:40:c5:e0:73:29:b9:a1:81:d5:
b1:4c:05:6d:12:e3:97:ec:0c:6a:1c:33:44:21:21:07:7c:41:
96:3b:f4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:16 2026 by rpki-client