
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/348854286B8F11ED9B07DD15C4F9AE02.roa
File: 348854286B8F11ED9B07DD15C4F9AE02.roa (raw, json)
Hash identifier: eNAYougzbuaZdGltWBPETvzcwoF3xnsDkRlib322zSY=
Subject key identifier: 86:29:2D:13:87:88:49:44:B1:4D:B0:A0:1A:DF:F6:0D:0C:6D:46:A6
Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial: 02A0
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/348854286B8F11ED9B07DD15C4F9AE02.roa
Signing time: Thu 26 Mar 2026 22:29:22 +0000
ROA not before: Thu 26 Mar 2026 22:29:22 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 137455
IP address blocks: 185.61.140.0/23 maxlen: 23
185.61.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:53:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Validity
Not Before: Mar 26 22:29:22 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c5b342-7db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:e4:f4:94:10:36:4e:b3:f6:d1:53:ea:bf:
cb:61:46:6f:40:64:c8:80:3a:f7:4b:18:ab:c1:1e:
79:29:85:1a:67:73:a9:9e:d5:0c:49:ff:c5:01:a6:
f0:4e:bc:3d:c3:eb:6a:ad:ac:4e:46:59:8c:e4:12:
cc:fc:66:7c:2a:dd:f8:91:46:43:91:8b:45:d5:34:
d0:c2:1e:5a:49:d2:f4:3a:2c:fd:7f:74:e5:66:bc:
c8:87:42:3b:81:ff:e2:68:09:cb:d2:e4:d4:15:3e:
59:aa:64:41:0e:e6:56:75:fe:99:9c:21:63:c9:8f:
21:24:12:92:a1:c6:e6:56:8c:33:fe:be:13:44:d4:
01:36:f1:b3:35:f7:04:ad:d8:f6:43:cf:b2:05:66:
ff:f4:3f:bf:bb:32:cd:af:b9:e1:3c:20:01:c7:18:
30:98:3a:ac:1c:48:9d:b1:45:ce:3a:bc:08:a4:5c:
e6:aa:10:a3:e4:c5:cb:9a:36:4a:cb:37:6b:c3:95:
e5:fb:1b:46:c8:b0:be:91:5d:c6:6f:cd:b6:3e:66:
6d:bd:b4:2e:71:12:8b:ba:d2:29:03:fc:ea:b1:50:
75:8d:31:e8:0e:27:9d:c3:cf:ac:1b:6f:ac:5b:6f:
8d:3c:1e:2f:b9:79:a7:10:db:fc:b3:2f:5b:4d:77:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:29:2D:13:87:88:49:44:B1:4D:B0:A0:1A:DF:F6:0D:0C:6D:46:A6
X509v3 Authority Key Identifier:
keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/348854286B8F11ED9B07DD15C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
185.61.140.0/22
Signature Algorithm: sha256WithRSAEncryption
78:20:11:6e:25:72:31:b4:86:00:43:05:bd:e3:b9:bc:d9:3e:
32:1c:c7:96:05:19:ef:15:0d:e7:f8:3d:c4:0e:c1:95:7a:23:
46:8a:95:8a:b2:af:15:57:e9:b1:9c:4f:15:a4:67:69:bc:bb:
4d:94:01:d6:58:2b:85:dd:8c:53:99:47:21:55:10:66:2b:34:
aa:ca:5f:90:b4:81:47:e3:ee:a7:27:6e:db:b4:24:ff:66:2d:
ce:6b:76:d2:5a:1f:b2:ba:6c:5d:62:eb:cc:bf:7d:a2:92:59:
3c:34:20:93:e5:42:ff:4a:07:d1:a6:1a:05:7a:0d:37:ea:88:
29:3f:ee:f5:53:04:3f:50:83:25:3a:7b:45:32:30:72:59:83:
6c:49:d7:b0:f6:ab:94:ac:17:52:83:75:27:9c:83:1b:d8:a9:
b9:b6:d7:b9:0c:27:54:67:60:74:bf:d3:28:f9:e2:6d:eb:fc:
f7:64:c5:52:be:c8:f9:34:08:b8:cd:44:55:0d:ee:70:22:1d:
2c:e5:d4:a5:e5:fb:51:81:0a:38:12:84:2c:b5:77:40:a2:2f:
5a:3c:4a:db:d4:88:69:92:dd:cb:50:4f:c5:27:9e:48:1a:d9:
f8:43:7a:f1:34:7d:b5:b8:03:7f:38:12:ac:ea:ec:b0:fd:be:
26:5f:99:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:46:28 2026 by rpki-client