
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/608BD4EA019C11F18EFB8EA7666F56BC.roa
File: 608BD4EA019C11F18EFB8EA7666F56BC.roa (raw, json)
Hash identifier: ECO9MOD3//reRSgefojthsyvnTjQPLzyXslUjMb1MpQ=
Subject key identifier: 05:45:38:D9:1A:26:0B:E5:5C:C9:85:F7:24:7A:C2:70:6F:14:2E:A4
Certificate issuer: /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial: 70
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/608BD4EA019C11F18EFB8EA7666F56BC.roa
Signing time: Sun 01 Mar 2026 17:31:56 +0000
ROA not before: Wed 04 Feb 2026 07:37:37 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 142244
IP address blocks: 203.174.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Validity
Not Before: Feb 4 07:37:37 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4780c-6072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:5f:b8:2f:25:ee:57:16:ee:4f:71:9e:07:
10:21:99:fd:e2:01:65:02:70:12:ff:6b:7b:df:0f:
e2:12:9b:13:89:1d:2a:7a:5d:bc:3c:ea:7f:94:00:
62:b1:8d:50:75:c7:8a:7d:b2:36:9f:08:8a:a0:20:
8d:cb:48:10:e2:1e:b8:28:9b:22:1f:d0:b0:20:ab:
39:70:99:72:76:58:47:61:ac:ca:88:fb:10:db:63:
6e:07:1e:14:76:f1:5c:30:52:9c:e0:24:30:41:b2:
28:cf:8a:c8:14:f3:f7:86:0f:ea:39:22:a7:86:f3:
cb:28:99:0a:ac:c2:43:ad:c4:f0:cc:01:14:43:b8:
4b:93:05:4e:c5:f9:4c:bb:6d:30:3d:62:81:51:66:
7b:40:fe:7d:b1:5b:f2:5b:dd:8f:c1:f5:52:24:18:
58:24:fb:bf:84:54:9a:0d:5a:51:0c:e1:cc:57:33:
9a:98:1b:89:12:53:a0:cb:a3:20:45:29:21:ec:1f:
4c:5b:54:2a:99:c6:59:77:03:78:e8:c3:68:ff:af:
f8:a6:70:e2:76:e5:94:31:6e:10:9f:ea:11:17:40:
9a:c6:f1:f6:96:12:b8:7a:cd:fe:e0:85:86:a6:6c:
df:20:fd:49:d0:e4:c2:60:0e:90:b2:70:58:f9:8a:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:45:38:D9:1A:26:0B:E5:5C:C9:85:F7:24:7A:C2:70:6F:14:2E:A4
X509v3 Authority Key Identifier:
keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/608BD4EA019C11F18EFB8EA7666F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.174.22.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e6:a5:59:14:19:e2:83:5c:5a:57:7f:fe:39:5c:8b:1b:0f:
84:6c:2e:0b:d5:12:7a:7d:7e:35:f8:50:8b:38:ec:6f:ca:87:
95:24:00:96:46:06:5c:95:ed:7f:5a:70:56:11:54:12:21:bb:
29:eb:b5:79:4d:b4:82:b6:7c:a4:43:d0:00:00:2c:67:91:41:
a4:1a:3a:c4:4b:a3:05:e8:39:8c:30:c0:f6:bf:d7:91:dc:3c:
27:2d:79:a3:01:1b:6e:52:c3:b0:b5:da:02:31:36:82:85:7a:
b3:bd:0b:39:f2:7f:91:27:86:5c:d1:88:75:e2:c7:42:32:fc:
12:4b:43:ee:a3:1b:64:eb:ca:47:dc:db:1c:59:bd:1e:ba:82:
3a:f9:cb:b6:04:6b:bb:bf:b3:77:a9:c1:07:e4:1e:f5:de:3c:
c4:2a:b2:f1:37:c7:d5:12:ba:1c:46:5d:0a:25:34:23:d7:20:
d7:50:24:2e:c3:a1:41:8f:cf:44:41:5f:59:f3:0f:1a:ca:3e:
4b:09:54:23:00:7c:f3:29:14:c6:54:75:d5:d2:ea:c4:b5:50:
fb:09:86:59:4e:3a:e2:c4:3f:f3:d7:8c:0b:f3:9f:c6:96:3a:
b8:f6:79:8a:5f:8a:9f:74:09:bb:4d:33:a9:0c:04:aa:b0:61:
ee:fc:e8:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:40:43 2026 by rpki-client