
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/8CC07FC0047211F0A6541526C4F9AE02.roa
File: 8CC07FC0047211F0A6541526C4F9AE02.roa (raw, json)
Hash identifier: VXXRhTLok9KmSWKm9VOdzclE8xHVvdHguqGzdC82who=
Subject key identifier: D7:41:3D:3B:7A:DE:4D:42:69:10:CE:07:04:EA:0B:F1:AB:ED:47:74
Certificate issuer: /CN=A91A4287/serialNumber=2A45A41D60E2F104D3DD39C86F14BC5900883F4B
Certificate serial: B3
Authority key identifier: 2A:45:A4:1D:60:E2:F1:04:D3:DD:39:C8:6F:14:BC:59:00:88:3F:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/8CC07FC0047211F0A6541526C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:06:08 +0000
ROA not before: Wed 19 Mar 2025 03:30:48 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 153644
IP address blocks: 163.61.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl
rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4287, serialNumber=2A45A41D60E2F104D3DD39C86F14BC5900883F4B
Validity
Not Before: Mar 19 03:30:48 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3f370-c868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:84:7c:0a:60:f1:df:df:86:94:7d:43:1e:7e:
be:c9:46:06:c7:a0:58:27:20:7f:94:d9:49:fd:31:
ac:78:a4:be:b4:fa:d2:f9:96:40:14:9a:2c:1b:79:
4a:a7:e9:f1:09:e3:55:78:5a:7b:59:31:da:21:08:
8c:42:8e:3f:85:ba:0f:73:53:ec:aa:05:9d:5e:00:
de:29:33:81:ee:64:67:23:cb:29:4f:6a:a6:2c:45:
86:53:e8:a0:ef:a1:38:19:be:e0:00:1c:ac:7b:d1:
d6:28:20:df:9e:36:92:58:52:0b:ef:f8:c8:a1:6d:
a1:12:27:a7:41:95:90:04:51:ae:18:55:86:f6:74:
67:1b:11:1e:93:c1:3d:09:df:ff:8f:e5:ff:dd:db:
a7:72:89:25:ff:8a:d4:29:3f:eb:b6:40:d3:23:fc:
b1:e4:e4:ea:3a:63:b7:61:29:11:47:6a:3d:99:cb:
56:9c:41:26:2f:0b:d7:ca:67:dc:26:af:b6:30:7a:
59:99:b1:13:82:81:04:83:ec:75:80:3a:1a:e5:b6:
96:a2:e8:84:68:18:cd:00:df:ff:ae:e3:a2:23:05:
ec:c0:83:49:64:70:cd:a7:d4:af:35:80:8b:cd:91:
ab:c0:f4:37:2e:0b:b2:65:45:2b:6f:8c:7c:83:cc:
75:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:41:3D:3B:7A:DE:4D:42:69:10:CE:07:04:EA:0B:F1:AB:ED:47:74
X509v3 Authority Key Identifier:
keyid:2A:45:A4:1D:60:E2:F1:04:D3:DD:39:C8:6F:14:BC:59:00:88:3F:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/8CC07FC0047211F0A6541526C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:3a:5f:41:37:94:d8:96:08:6e:56:65:08:ab:7c:60:9c:37:
53:b0:3a:fd:17:b4:e3:54:e0:9a:90:07:df:7a:2d:47:c2:93:
ff:50:09:fb:ce:26:ce:37:75:56:cf:ef:18:23:03:36:e6:97:
96:59:8e:d5:d8:31:95:b4:41:b8:6f:70:cb:04:63:12:00:99:
3e:a9:66:22:b3:7d:2b:fb:9e:9e:9c:7d:b4:5b:9e:93:39:8b:
fd:d6:c6:7c:b0:d0:62:82:eb:af:51:03:92:95:97:89:36:3b:
04:b6:39:43:e2:f1:d5:53:05:6e:27:d5:02:65:99:f4:d9:3d:
4c:41:4c:05:f3:75:7e:76:1c:de:74:26:2e:de:90:71:4e:be:
6b:2c:7c:04:c1:c2:d5:ea:3e:80:f2:6d:90:8a:d1:14:77:0d:
58:ba:45:db:c4:66:c1:16:60:5e:4e:37:7f:28:be:76:ff:4d:
42:20:49:e7:a2:4f:9b:1a:43:b5:97:5b:ff:56:98:bf:1f:b5:
4f:6a:41:79:e3:72:5f:b4:e2:6c:03:ae:4c:5a:c7:3d:a3:2a:
e6:dc:f4:e1:3e:62:32:f0:5e:d4:16:63:99:e9:9a:31:0f:dc:
a9:98:c0:cb:44:b8:d0:ca:99:e1:ab:26:05:99:30:25:e2:c3:
08:ef:f3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:59 2026 by rpki-client