
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/61A65BF2C35011EE95366E18C4F9AE02.roa
File: 61A65BF2C35011EE95366E18C4F9AE02.roa (raw, json)
Hash identifier: ledywzn44AtfNdf65irkSbejoe2qe67kQVSrxPSpLj8=
Subject key identifier: A7:68:65:83:DC:6F:76:EB:89:0E:FD:8C:03:04:FB:64:D0:71:7D:21
Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial: 3590
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/61A65BF2C35011EE95366E18C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:08:17 +0000
ROA not before: Wed 30 Jul 2025 14:50:19 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 38228
IP address blocks: 210.246.94.0/24 maxlen: 24
210.246.95.0/24 maxlen: 24
2403:c000:1401::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13712 (0x3590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Validity
Not Before: Jul 30 14:50:19 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48091-456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:f6:fd:4c:3e:d9:4a:2a:7f:e7:1c:f4:55:
a1:bf:84:18:35:fd:94:39:b6:b8:fc:37:cb:cd:41:
fa:79:dd:95:0f:7f:08:34:c8:c7:eb:49:cd:b0:f8:
ae:2c:d9:a5:06:75:d0:a3:f9:27:bb:27:6a:0f:f3:
70:db:f0:cb:bf:30:ae:d5:d7:18:ce:c3:5e:35:1c:
99:4d:c2:90:62:e3:fb:9c:b9:ea:cb:a8:68:d1:68:
4f:d7:60:40:b1:29:e1:9c:06:1b:3b:18:bd:6c:21:
7e:1b:63:99:dd:ba:ff:28:35:e9:e5:e8:a1:cc:35:
53:69:01:ec:16:49:9a:0e:f8:1b:2d:09:08:50:3e:
73:95:d1:b1:a1:97:d4:6a:b0:88:83:88:18:62:96:
46:a5:ee:75:49:11:59:0a:a6:68:73:bd:72:23:7c:
0e:ec:7a:e6:10:31:ca:84:4b:bf:d4:95:8f:2d:19:
38:8b:23:e6:de:8a:fa:a7:be:f1:1d:22:1a:00:df:
51:fb:d2:00:87:d6:44:b0:cd:4e:2c:53:98:72:88:
5a:d3:be:74:3f:5d:84:10:df:31:d7:20:54:13:e6:
7d:6a:a9:78:ed:21:d3:72:19:8d:cf:2d:4c:95:66:
64:0b:ea:25:57:d2:7f:a0:7e:b0:bf:4a:0c:02:ce:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:68:65:83:DC:6F:76:EB:89:0E:FD:8C:03:04:FB:64:D0:71:7D:21
X509v3 Authority Key Identifier:
keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/61A65BF2C35011EE95366E18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.246.94.0/23
IPv6:
2403:c000:1401::/48
Signature Algorithm: sha256WithRSAEncryption
30:ee:dd:cc:57:41:6c:9e:e4:44:89:dd:fb:6b:a3:16:81:88:
66:3a:bb:a5:9c:1d:3f:89:d4:c9:b6:76:bf:be:e1:c3:cc:c6:
38:bc:1b:c7:c2:9e:55:1f:74:b9:ef:5d:0c:69:3e:c7:9d:76:
99:6e:27:3a:f1:a0:52:ed:90:fb:00:08:19:36:01:9a:51:5e:
a7:6d:58:83:dd:d9:e9:f4:5e:cd:7b:70:0a:dc:14:03:d7:8f:
92:5d:0b:67:c9:f3:93:91:8d:73:a7:3e:a9:9a:a3:c3:10:a7:
5b:b5:00:dd:33:0c:e2:44:c2:72:61:07:24:66:7e:29:2d:27:
ea:c2:77:6c:7e:92:f6:41:56:86:6d:6c:9b:72:18:ef:18:e4:
a3:d8:ed:e2:29:4d:3d:b9:13:e4:69:ba:01:a9:84:61:9a:fc:
7d:55:f2:bd:e8:3c:35:75:3f:b2:d3:e9:51:3b:9d:8f:1b:f0:
77:83:9d:d3:e9:dc:fb:df:49:fe:34:28:9b:1e:45:8d:4b:b2:
e9:7c:c3:df:22:2f:f1:93:e3:7c:26:b8:2a:b3:d8:e4:21:09:
84:f5:52:53:2f:2b:ec:8e:3e:fd:b3:37:71:5e:d9:80:20:57:
47:58:82:3f:6e:a9:f7:6c:d1:f2:9f:c0:0b:2c:d5:cb:92:72:
4a:ff:fb:b6
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICNZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM1QjAxMTAvBgNVBAUTKDdBOTYxNzY5NTQ5RTBBQUQwQTlCRjk5MjU2ODNCQUVG
NzMzQTJGMUEwHhcNMjUwNzMwMTQ1MDE5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODA5MS00NTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmE/2/Uw+2Uoqf+cc9FWhv4QYNf2UOba4/DfLzUH6ed2VD38INMjH60nNsPiu
LNmlBnXQo/knuydqD/Nw2/DLvzCu1dcYzsNeNRyZTcKQYuP7nLnqy6ho0WhP12BA
sSnhnAYbOxi9bCF+G2OZ3br/KDXp5eihzDVTaQHsFkmaDvgbLQkIUD5zldGxoZfU
arCIg4gYYpZGpe51SRFZCqZoc71yI3wO7HrmEDHKhEu/1JWPLRk4iyPm3or6p77x
HSIaAN9R+9IAh9ZEsM1OLFOYcoha0750P12EEN8x1yBUE+Z9aql47SHTchmNzy1M
lWZkC+olV9J/oH6wv0oMAs4RDQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKdoZYPc
b3briQ79jAME+2TQcX0hMB8GA1UdIwQYMBaAFHqWF2lUngqtCpv5klaDuu9zOi8a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzVCMC80MEM4RDVBNjFE
ODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNxMEttX21TVm9PNjczTTZM
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VwWVhhVlNlQ3EwS21fbVNWb082NzNNNkx4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUM1QjAvNDBDOEQ1QTYxRDgzMTFFMjgyM0E1RkQ4MDhCMDJDRDIvNjFBNjVCRjJD
MzUwMTFFRTk1MzY2RTE4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQB0vZeMA8EAgACMAkDBwAkA8AAFAEwDQYJKoZIhvcNAQELBQADggEB
ADDu3cxXQWye5ESJ3ftroxaBiGY6u6WcHT+J1Mm2dr++4cPMxji8G8fCnlUfdLnv
XQxpPseddpluJzrxoFLtkPsACBk2AZpRXqdtWIPd2en0Xs17cArcFAPXj5JdC2fJ
85ORjXOnPqmao8MQp1u1AN0zDOJEwnJhByRmfiktJ+rCd2x+kvZBVoZtbJtyGO8Y
5KPY7eIpTT25E+RpugGphGGa/H1V8r3oPDV1P7LT6VE7nY8b8HeDndPp3PvfSf40
KJseRY1Lsul8w98iL/GT43wmuCqz2OQhCYT1UlMvK+yOPv2zN3Fe2YAgV0dYgj9u
qfds0fKfwAss1cuSckr/+7Y=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:51 2026 by rpki-client