
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/061C3362985911EBA5F39B54C4F9AE02.roa
File: 061C3362985911EBA5F39B54C4F9AE02.roa (raw, json)
Hash identifier: DcXxwtYoJk7rZEQlOyE6scqgd0i6m1iXL9fTUlPBgDY=
Subject key identifier: E4:EC:EA:39:C2:50:FE:77:BE:60:9E:A2:61:13:26:F3:8E:95:16:26
Certificate issuer: /CN=A915DB55/serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B
Certificate serial: 06FF
Authority key identifier: 44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/061C3362985911EBA5F39B54C4F9AE02.roa
Signing time: Mon 08 Jun 2026 20:24:23 +0000
ROA not before: Mon 08 Jun 2026 20:24:23 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 139034
IP address blocks: 104.255.36.0/22 maxlen: 22
104.255.36.0/24 maxlen: 24
104.255.37.0/24 maxlen: 24
104.255.38.0/24 maxlen: 24
104.255.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl
rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1791 (0x6ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DB55, serialNumber=4423FBF41AD9F0FC74D3C15558B8D09A164B261B
Validity
Not Before: Jun 8 20:24:23 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2724f7-8cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:e9:f0:d8:fd:23:cb:a6:35:28:4f:c8:91:
1b:48:45:ca:e6:9c:ae:dd:a0:62:19:64:b1:f5:fb:
2e:2d:65:15:37:d0:ec:24:79:22:ae:13:a9:d0:81:
64:ba:a4:36:17:df:13:19:2e:bf:b2:98:d8:64:e4:
04:73:e9:89:b1:8d:06:ce:af:ce:20:1d:16:ed:32:
5f:f0:9d:93:23:f2:07:b0:34:93:c6:c1:a4:0f:cc:
5e:1e:66:66:17:8c:09:e4:95:e1:56:21:0d:df:fe:
aa:e7:5b:75:92:b6:f8:6c:d1:fc:81:93:6a:84:ed:
c3:61:ee:af:0c:b5:0c:98:ae:35:32:3d:fc:f5:d5:
64:2e:7c:88:b2:56:48:7f:c5:76:d8:b2:53:5a:20:
3a:96:14:0e:a5:73:f3:9b:f5:db:b1:38:04:dd:45:
4a:f8:27:6c:f5:db:3d:35:fa:31:7e:9e:9b:67:07:
39:a1:c6:cb:0b:15:24:b7:81:5e:32:99:3a:91:6b:
df:29:2e:50:9e:8e:52:6d:2c:b7:d6:91:5b:5a:95:
4b:8f:66:82:0e:47:e4:b6:13:da:8c:96:f0:a6:2c:
c4:21:46:e0:a8:99:aa:4c:f6:0e:36:db:b5:2f:76:
b7:d0:1f:f1:b0:6c:72:7b:9b:36:67:64:a7:2c:60:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EC:EA:39:C2:50:FE:77:BE:60:9E:A2:61:13:26:F3:8E:95:16:26
X509v3 Authority Key Identifier:
keyid:44:23:FB:F4:1A:D9:F0:FC:74:D3:C1:55:58:B8:D0:9A:16:4B:26:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/RCP79BrZ8Px008FVWLjQmhZLJhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RCP79BrZ8Px008FVWLjQmhZLJhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/20480532985811EB8A41FA20C4F9AE02/061C3362985911EBA5F39B54C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
104.255.36.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:06:cf:ae:3b:c0:8f:e3:f5:c2:93:0d:ae:61:6a:c4:b4:1c:
82:d7:15:69:83:44:75:e1:73:2b:86:5c:92:10:b3:a3:fa:fb:
ad:6e:e0:15:72:ed:26:74:8a:36:60:06:19:c5:33:4a:24:56:
1b:0f:8c:d5:35:75:33:09:ab:3a:1a:e5:2f:a5:df:a7:5e:13:
d9:09:d5:c8:03:3e:98:84:ef:6f:5a:1f:39:d3:98:87:00:8d:
9d:b6:3b:3e:7e:f9:45:4c:36:f6:ce:8e:8c:db:3c:cb:41:85:
9d:13:4f:ee:a8:4a:ad:d9:5f:7c:f6:cc:b1:e3:79:7a:a3:6b:
91:de:13:b6:7e:d0:77:91:e5:a1:5c:f4:63:22:54:db:ff:07:
bf:97:8f:c1:3c:3e:37:58:8d:e6:37:41:39:c7:f2:84:20:f4:
f2:7f:d2:c7:9c:d6:a3:47:70:b6:2f:5c:0e:c5:ec:d3:88:54:
1c:8a:dc:23:82:c0:e9:91:c9:15:b2:f9:bd:f5:b2:ac:ec:22:
25:4d:8b:92:ae:e4:e7:a5:0a:9d:b1:84:f0:ad:0b:d4:4b:31:
a3:9d:8c:dd:92:3b:f6:70:92:08:0c:10:5f:0b:18:24:62:a9:
5c:9a:32:c9:ad:5c:2a:97:34:aa:c2:4d:b0:0f:b2:3c:07:8d:
01:f7:c3:e6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NURCNTUxMTAvBgNVBAUTKDQ0MjNGQkY0MUFEOUYwRkM3NEQzQzE1NTU4QjhEMDlB
MTY0QjI2MUIwHhcNMjYwNjA4MjAyNDIzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI3MjRmNy04Y2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3hjp8Nj9I8umNShPyJEbSEXK5pyu3aBiGWSx9fsuLWUVN9DsJHkirhOp0IFk
uqQ2F98TGS6/spjYZOQEc+mJsY0Gzq/OIB0W7TJf8J2TI/IHsDSTxsGkD8xeHmZm
F4wJ5JXhViEN3/6q51t1krb4bNH8gZNqhO3DYe6vDLUMmK41Mj389dVkLnyIslZI
f8V22LJTWiA6lhQOpXPzm/XbsTgE3UVK+Cds9ds9Nfoxfp6bZwc5ocbLCxUkt4Fe
Mpk6kWvfKS5Qno5SbSy31pFbWpVLj2aCDkfkthPajJbwpizEIUbgqJmqTPYONtu1
L3a30B/xsGxye5s2Z2SnLGA12wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOTs6jnC
UP53vmCeomETJvOOlRYmMB8GA1UdIwQYMBaAFEQj+/Qa2fD8dNPBVVi40JoWSyYb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI1NS8yMDQ4MDUzMjk4
NTgxMUVCOEE0MUZBMjBDNEY5QUUwMi9SQ1A3OUJyWjhQeDAwOEZWV0xqUW1oWkxK
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1JDUDc5QnJaOFB4MDA4RlZXTGpRbWhaTEpocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NURCNTUvMjA0ODA1MzI5ODU4MTFFQjhBNDFGQTIwQzRGOUFFMDIvMDYxQzMzNjI5
ODU5MTFFQkE1RjM5QjU0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCaP8kMA0GCSqGSIb3DQEBCwUAA4IBAQDWBs+uO8CP4/XCkw2uYWrE
tByC1xVpg0R14XMrhlySELOj+vutbuAVcu0mdIo2YAYZxTNKJFYbD4zVNXUzCas6
GuUvpd+nXhPZCdXIAz6YhO9vWh8505iHAI2dtjs+fvlFTDb2zo6M2zzLQYWdE0/u
qEqt2V989syx43l6o2uR3hO2ftB3keWhXPRjIlTb/we/l4/BPD43WI3mN0E5x/KE
IPTyf9LHnNajR3C2L1wOxezTiFQcitwjgsDpkckVsvm99bKs7CIlTYuSruTnpQqd
sYTwrQvUSzGjnYzdkjv2cJIIDBBfCxgkYqlcmjLJrVwqlzSqwk2wD7I8B40B98Pm
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:37:20 2026 by rpki-client