
$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/CDD0BE9EF99111EF945B6751C4F9AE02.roa
File: CDD0BE9EF99111EF945B6751C4F9AE02.roa (raw, json)
Hash identifier: VHgAuutdhbhQEJiMwT9AF6NJJkPzn16sBFyZuNFsiyQ=
Subject key identifier: 33:0E:7F:70:4E:AC:E8:03:67:88:82:6B:C9:91:F3:EE:A8:7D:37:89
Certificate issuer: /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
Certificate serial: C0
Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/CDD0BE9EF99111EF945B6751C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:00:07 +0000
ROA not before: Wed 05 Mar 2025 07:17:13 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 45691
IP address blocks: 163.61.206.0/23 maxlen: 24
2001:df5:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl
rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6
Validity
Not Before: Mar 5 07:17:13 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3e3f7-b690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:03:63:2a:98:8d:16:0c:e7:82:c1:37:91:a3:
74:0e:a7:10:df:c0:60:9d:ef:0a:b1:4a:87:bb:1e:
78:99:eb:26:48:63:2d:a6:98:a6:56:d5:37:9d:3d:
0d:ae:fa:c0:0b:e1:d5:6f:4e:ec:ce:05:71:f8:b0:
81:5c:f5:be:1d:09:9b:8f:78:06:4b:6d:15:55:ef:
d3:d0:45:1b:c3:81:c2:98:eb:32:e1:c7:49:69:7f:
58:87:9c:9f:4a:56:b1:c4:d1:16:d6:6b:f1:a3:a5:
12:61:66:fb:50:9f:16:d8:07:e4:48:53:6e:45:11:
08:d8:46:36:f1:14:d6:db:c3:de:02:c8:aa:fb:76:
d3:46:55:c0:76:4b:28:9e:77:dc:23:51:e7:02:3a:
56:d4:58:47:d1:43:25:b7:5c:64:80:ff:f6:f1:66:
cc:88:bf:2f:19:95:b9:6e:85:10:eb:40:d0:23:8b:
44:6f:8e:4c:4f:78:e2:bf:c0:c2:88:5a:74:1d:c4:
ed:ba:06:c5:3f:8f:16:6e:c2:b6:72:29:f9:2e:be:
a7:95:2c:0b:56:5a:6c:b7:da:2c:c3:03:cd:ff:be:
94:75:24:56:26:63:e5:2f:20:37:30:4d:bf:c6:f3:
d9:c2:52:c8:2b:05:8d:e9:45:f2:15:4b:bb:8d:9c:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0E:7F:70:4E:AC:E8:03:67:88:82:6B:C9:91:F3:EE:A8:7D:37:89
X509v3 Authority Key Identifier:
keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/CDD0BE9EF99111EF945B6751C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.206.0/23
IPv6:
2001:df5:2040::/48
Signature Algorithm: sha256WithRSAEncryption
9e:53:cd:a7:29:f8:75:40:fb:28:2a:bd:d8:ce:cd:66:55:86:
99:bf:2d:4f:5e:8a:af:94:a7:71:04:75:48:6a:7e:8f:7a:d2:
54:e0:76:8d:aa:96:1c:30:3e:a1:5f:68:ae:9e:9b:9a:a9:6d:
0b:9a:00:8d:e1:e5:f7:33:f2:ac:b1:f6:4a:fb:8a:bb:09:98:
5d:ee:43:60:9b:d6:69:08:1a:c0:cf:57:8e:a6:4a:25:c1:e2:
8a:18:37:25:f6:0b:e8:36:f3:60:ce:67:8e:46:bf:85:1a:04:
2a:76:e8:ca:4b:a5:dd:2f:bd:b8:21:4d:c8:b4:82:39:cf:7e:
ea:99:53:90:33:5b:b2:1b:56:9d:2d:70:ab:7c:7e:9d:5b:ce:
66:11:44:e5:78:2c:f9:ee:99:98:20:79:7b:d5:08:59:72:a6:
32:df:67:10:aa:ea:92:02:d9:26:ed:5b:e8:34:23:f9:93:5f:
34:42:5b:92:25:d9:24:54:22:03:4a:7b:57:fc:ab:63:66:11:
b5:a7:28:1b:b3:19:0e:e3:3d:ee:45:3b:99:07:d6:a5:5d:60:
29:00:33:c5:6d:dd:e2:13:a5:53:d2:cb:81:e0:93:34:ea:fe:
78:a1:7c:64:ed:05:91:6f:f4:69:84:ed:9f:20:87:ec:db:9b:
a5:80:87:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:27 2026 by rpki-client