
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/694EC58664AE11F189DF701D9347A888.roa
File: 694EC58664AE11F189DF701D9347A888.roa (raw, json)
Hash identifier: uf1w2K+QavHMr69P1XIOXrrKK1vFbrU3GZGJb7MtqTI=
Subject key identifier: 07:CE:DB:1F:5A:15:87:C3:E6:2B:CB:13:26:62:73:6F:54:63:65:49
Certificate issuer: /CN=A91A6C1A/serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED
Certificate serial: 08
Authority key identifier: A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/694EC58664AE11F189DF701D9347A888.roa
Signing time: Wed 10 Jun 2026 09:27:28 +0000
ROA not before: Wed 10 Jun 2026 09:27:28 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 10219
IP address blocks: 202.133.76.0/23 maxlen: 24
2402:2720::/32 maxlen: 32
2402:2720::/36 maxlen: 36
2402:2720:1000::/36 maxlen: 36
2402:2720:2000::/36 maxlen: 36
2402:2720:3000::/36 maxlen: 36
2402:2720:4000::/36 maxlen: 36
2402:2720:5000::/36 maxlen: 36
2402:2720:6000::/36 maxlen: 36
2402:2720:7000::/36 maxlen: 36
2402:2720:8000::/36 maxlen: 36
2402:2720:9000::/36 maxlen: 36
2402:2720:a000::/36 maxlen: 36
2402:2720:b000::/36 maxlen: 36
2402:2720:c000::/36 maxlen: 36
2402:2720:d000::/36 maxlen: 36
2402:2720:e000::/36 maxlen: 36
2402:2720:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl
rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6C1A, serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED
Validity
Not Before: Jun 10 09:27:28 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a292e00-e948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:6d:35:db:3d:2d:c9:75:61:c3:26:04:50:
05:73:88:76:c3:cd:cc:69:ab:61:3c:0e:8d:50:67:
b4:61:d2:d6:1c:17:a0:d8:ba:f6:66:78:5e:d7:36:
51:39:8b:c1:74:3b:81:06:55:d5:0d:a6:8a:c2:f8:
e6:2d:9a:5f:56:ec:74:06:67:8f:2c:0a:69:45:ab:
6f:03:25:fd:9a:b3:a2:e5:b0:51:6a:a4:75:74:ad:
ed:ec:db:a2:84:b0:02:05:0c:b1:27:4e:86:b4:8a:
9f:79:51:ee:f2:be:4d:dd:1b:06:1c:c8:58:41:b4:
21:e1:a7:bc:12:9e:7d:1e:b8:0c:48:1d:cf:e8:23:
c2:05:85:29:51:75:49:a8:00:07:b6:f0:50:2d:87:
11:86:ec:a0:a3:b3:30:eb:a7:13:2c:5d:b3:a1:55:
df:77:6b:82:be:a8:10:82:e7:a9:99:19:c6:21:20:
f5:bb:08:1c:e7:60:57:7d:a7:c9:02:3b:68:83:46:
a6:be:84:7e:4c:6d:96:58:e5:fa:e9:5b:65:e1:0a:
ef:9c:a0:f7:58:d7:23:bc:dd:e2:88:e2:d2:35:41:
41:17:f8:53:b8:92:e2:b5:54:3b:1c:91:9f:9c:11:
50:29:35:4c:fd:f5:dc:70:96:9c:0a:1a:91:51:30:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CE:DB:1F:5A:15:87:C3:E6:2B:CB:13:26:62:73:6F:54:63:65:49
X509v3 Authority Key Identifier:
keyid:A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/694EC58664AE11F189DF701D9347A888.roa
sbgp-ipAddrBlock: critical
IPv4:
202.133.76.0/23
IPv6:
2402:2720::/32
Signature Algorithm: sha256WithRSAEncryption
76:01:96:23:d5:95:91:e2:da:94:4f:81:0a:4a:97:e1:1d:ea:
9d:f3:25:71:2d:85:cf:b7:33:44:c9:cf:8a:be:90:5e:dd:39:
7e:e2:a0:48:6b:67:75:de:91:39:d9:4e:e5:2f:de:10:3a:cb:
aa:5a:0b:54:76:0f:74:bc:f0:f2:7f:9a:11:7d:5b:e4:be:1f:
e8:04:07:9f:16:17:28:78:88:09:08:00:de:7c:e2:4a:07:06:
f0:dd:d9:e4:14:0c:12:9d:70:fb:f8:b0:a1:3d:ab:57:90:2b:
1a:39:78:06:50:49:53:4b:b7:6a:41:d5:41:79:e7:e8:14:63:
da:18:1e:de:ae:82:10:f9:37:fa:62:0c:4d:aa:97:af:8a:f5:
19:b7:22:70:7f:c5:0b:b1:b4:88:72:27:b7:e3:9d:f8:48:23:
4b:0e:27:4e:bb:7a:0a:ff:d5:c5:88:a8:22:8c:51:0e:79:76:
b5:4b:40:50:69:e8:23:a3:e3:4f:6f:e5:25:b8:5d:65:d0:50:
4d:9e:77:22:81:80:3e:a6:46:cb:59:28:35:33:88:88:00:90:
02:e5:1c:bc:2e:81:11:2f:74:41:1a:5b:d7:09:6d:9b:c6:96:
41:0f:b0:1c:18:80:4e:fd:e6:37:33:60:31:9c:21:9b:48:82:
92:25:73:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:25:57 2026 by rpki-client