
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/8B10B888061111F18D858310203D8C67.roa
File: 8B10B888061111F18D858310203D8C67.roa (raw, json)
Hash identifier: qh+VyOJbj+ug4XtQyEZqsUr8GU3LhsaDi56G0+/mtA8=
Subject key identifier: 0E:92:F1:06:5A:9C:C9:55:C8:26:08:F5:BD:90:3B:C4:A3:A7:CA:3C
Certificate issuer: /CN=A91A3AD9/serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Certificate serial: 38
Authority key identifier: A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/8B10B888061111F18D858310203D8C67.roa
Signing time: Sun 12 Apr 2026 02:10:22 +0000
ROA not before: Sun 12 Apr 2026 02:10:22 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 149440
IP address blocks: 202.61.72.0/24 maxlen: 24
202.61.73.0/24 maxlen: 24
202.61.74.0/24 maxlen: 24
202.61.75.0/24 maxlen: 24
223.165.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3AD9, serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Validity
Not Before: Apr 12 02:10:22 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69daff0e-3d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:29:14:ab:74:aa:ff:ef:96:6f:17:6e:a4:
37:bd:27:7f:5d:32:2c:fa:da:27:54:cb:60:23:76:
70:b1:e3:f2:32:17:ea:45:24:58:a6:47:14:96:73:
b7:01:4e:05:39:83:df:3b:2c:7d:e0:16:69:6d:03:
d3:fe:2f:00:60:ec:74:d1:e9:06:97:d8:ef:b8:a3:
7f:7a:70:fa:0b:11:5c:69:e8:e9:a5:40:de:78:82:
29:5f:95:02:99:a5:09:ba:be:6d:e8:f9:20:d7:b6:
1f:02:6e:bf:98:dc:2c:01:a8:87:7a:15:58:67:96:
3c:5c:59:aa:37:8c:22:bf:63:13:0b:1e:b1:f4:71:
34:d2:71:e4:36:d7:40:69:3b:9d:11:56:e3:0c:f2:
4b:a9:b3:66:ed:5f:7d:d0:86:8f:00:fc:72:82:0c:
b0:53:52:38:a4:06:7a:50:b0:07:c1:73:0c:23:ae:
83:73:2b:d2:ba:a5:ba:69:29:4d:f9:f3:10:d1:25:
3a:c6:12:0c:5d:82:f9:1d:f0:91:b5:3f:7d:25:9d:
9d:6f:d5:50:dc:62:a5:99:3c:59:70:9d:6c:c1:fc:
ec:b9:71:0a:e5:8f:8e:fb:50:bb:7a:61:a1:07:3b:
dd:ff:37:ea:4c:29:36:fc:e1:70:98:ae:01:23:67:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:92:F1:06:5A:9C:C9:55:C8:26:08:F5:BD:90:3B:C4:A3:A7:CA:3C
X509v3 Authority Key Identifier:
keyid:A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/8B10B888061111F18D858310203D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
202.61.72.0/22
223.165.6.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4b:31:2f:46:7b:0a:33:a5:39:59:b0:27:eb:ce:45:d4:44:
1b:05:0d:40:c9:48:08:3c:e3:48:9c:68:a1:53:92:53:74:65:
c5:0a:2c:c0:74:ca:ff:ef:a1:e2:2a:5b:f2:5e:84:8f:60:a2:
ff:19:7c:ce:8f:d8:9b:a3:65:44:b4:f5:14:fb:d2:a0:30:95:
6e:96:8d:2f:99:72:55:62:ac:ab:5b:6b:3f:eb:a9:24:da:2a:
c7:bc:e1:30:f2:ee:48:c4:82:fb:7f:67:69:73:da:16:d2:d0:
ff:ff:17:b4:3e:7c:24:a3:85:65:3d:94:66:03:b1:dc:93:18:
d3:0e:32:f4:db:59:20:39:18:08:57:c9:7e:10:35:b4:ea:db:
09:9e:52:dc:46:ac:b4:c7:07:17:9c:7d:93:6e:2d:68:22:9b:
f2:f0:a2:04:e5:18:78:75:2e:1e:bc:aa:0b:bb:c8:55:a6:54:
08:b2:27:1a:05:20:63:91:67:ed:9a:4d:b3:c2:51:4a:52:a3:
58:9b:8f:9c:ca:e9:d0:51:c4:b1:79:4f:89:8e:e2:bb:c2:86:
0d:93:4c:be:57:7b:16:07:2d:30:8e:78:ac:0d:d6:ac:7c:ff:
2d:f2:bc:72:0b:0b:e3:da:e5:32:f2:ac:68:be:9f:34:ac:e7:
e4:d8:90:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:06:10 2026 by rpki-client