
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/6B1B75BC756311EFB6C7E64CC4F9AE02.roa
File: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (raw, json)
Hash identifier: YGypA5eRBTB64lMWhwkvlQKY6m3dv/e//aqFPMqrgyM=
Subject key identifier: 08:14:5E:C3:A1:C3:26:84:74:62:BE:AE:16:54:39:FA:9E:C3:7E:96
Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Certificate serial: 1131
Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/6B1B75BC756311EFB6C7E64CC4F9AE02.roa
Signing time: Thu 11 Jun 2026 08:12:49 +0000
ROA not before: Thu 11 Jun 2026 08:12:49 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 132203
IP address blocks: 161.120.160.0/19 maxlen: 19
161.120.160.0/20 maxlen: 20
161.120.176.0/20 maxlen: 20
161.120.192.0/19 maxlen: 19
161.120.224.0/19 maxlen: 19
162.14.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4401 (0x1131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Validity
Not Before: Jun 11 08:12:49 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2a6e01-376b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:86:45:6e:9f:94:8e:74:6b:50:8c:6e:98:08:
ec:58:d9:bd:47:69:4e:04:95:42:1c:57:62:85:c9:
e7:b1:8f:7b:31:d1:f3:60:8d:70:5a:23:3f:8a:c0:
f5:93:9a:39:6e:5f:89:33:b5:c1:7f:80:98:84:e9:
7b:d4:29:9c:d5:e3:8a:f2:9c:d0:11:fc:f8:3d:dd:
bf:65:85:ea:97:ad:e7:4f:a3:97:8e:bd:95:a7:d3:
67:81:ff:65:8c:09:1d:67:7d:24:19:9a:0b:ae:1a:
bd:27:14:3c:e9:be:81:f9:c7:f5:b2:e7:45:86:34:
49:88:2d:9b:71:f3:76:4c:79:ba:03:54:9b:01:cb:
df:fa:86:43:27:e1:f8:5e:ce:6f:d4:6c:cf:57:8e:
f8:32:d7:3b:cb:b7:d8:9c:3e:20:9c:18:05:08:55:
1f:fa:29:9d:6c:6c:03:c9:69:a1:81:ff:1b:30:89:
a2:c3:ca:6c:81:37:5b:a7:6f:c3:b0:1e:74:00:3e:
79:35:dd:22:dc:e9:9f:b1:bf:ec:96:41:6a:68:cc:
c9:30:f4:f9:e5:70:23:94:4e:af:84:f3:fd:bc:a5:
a7:75:2a:ed:c6:44:3e:c7:d1:b9:8f:b0:7f:c8:a1:
7f:1f:a1:07:f6:85:84:0b:cc:17:18:1b:00:0b:64:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:14:5E:C3:A1:C3:26:84:74:62:BE:AE:16:54:39:FA:9E:C3:7E:96
X509v3 Authority Key Identifier:
keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/6B1B75BC756311EFB6C7E64CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.120.160.0-161.120.255.255
162.14.60.0/22
Signature Algorithm: sha256WithRSAEncryption
80:a9:3f:8a:05:b1:64:0a:86:71:08:d7:22:00:df:39:ee:c3:
38:92:34:a2:24:84:c5:8e:81:77:37:ee:2e:24:7e:40:3a:bc:
1d:5e:33:86:b3:90:64:35:33:f1:f3:2b:9d:9a:5e:d9:2f:82:
7d:41:3a:e7:b7:2f:a3:4f:29:bc:b7:70:2f:3a:a9:ad:d0:ce:
90:64:73:a1:17:63:99:8e:0d:f9:81:32:cf:aa:8e:65:61:1a:
10:2b:63:c2:d0:2e:a7:a3:ce:a8:1d:63:4c:83:89:15:ac:58:
3a:23:ac:0b:bc:0a:aa:08:d5:5f:c5:56:9f:52:47:cb:3f:c2:
ab:03:db:b8:c5:84:4f:fc:c0:1b:e4:e9:0f:b7:7a:7b:aa:2f:
6b:53:75:d3:86:22:33:d9:d9:f2:71:38:33:0e:19:4f:1f:e1:
67:ed:88:d9:e7:66:db:cf:03:cd:f1:82:e2:5f:1f:af:2f:f9:
7a:19:ad:99:0b:4b:dc:2b:ed:4c:d9:6d:27:a3:f8:30:5e:fd:
7b:9e:95:89:14:16:ba:5c:d5:b0:2e:11:fe:67:06:c4:d1:c9:
1a:81:eb:c8:f5:68:4b:5e:5b:cb:49:38:fe:6f:91:c2:32:27:
99:8e:b3:d8:fb:b2:34:6e:09:e8:19:ce:c0:cc:6b:80:49:d4:
32:6c:94:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:35:37 2026 by rpki-client