
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/8B417B6064AA11F19AE9C6D58F47A888.roa
File: 8B417B6064AA11F19AE9C6D58F47A888.roa (raw, json)
Hash identifier: p4PsoFtVmoyNxlXYNhF8Qpg25SbCbP43gXrqt/3vkfE=
Subject key identifier: 1C:9A:3F:9D:B3:4C:41:F8:6B:34:10:C1:E4:81:3E:0A:26:E3:64:0F
Certificate issuer: /CN=A91A6C1A/serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED
Certificate serial: 04
Authority key identifier: A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/8B417B6064AA11F19AE9C6D58F47A888.roa
Signing time: Wed 10 Jun 2026 09:01:40 +0000
ROA not before: Wed 10 Jun 2026 09:01:40 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 154194
IP address blocks: 202.133.76.0/23 maxlen: 24
2402:2720::/32 maxlen: 32
2402:2720::/36 maxlen: 36
2402:2720:1000::/36 maxlen: 36
2402:2720:2000::/36 maxlen: 36
2402:2720:3000::/36 maxlen: 36
2402:2720:4000::/36 maxlen: 36
2402:2720:5000::/36 maxlen: 36
2402:2720:6000::/36 maxlen: 36
2402:2720:7000::/36 maxlen: 36
2402:2720:8000::/36 maxlen: 36
2402:2720:9000::/36 maxlen: 36
2402:2720:a000::/36 maxlen: 36
2402:2720:b000::/36 maxlen: 36
2402:2720:c000::/36 maxlen: 36
2402:2720:d000::/36 maxlen: 36
2402:2720:e000::/36 maxlen: 36
2402:2720:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl
rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6C1A, serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED
Validity
Not Before: Jun 10 09:01:40 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a2927f4-a997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4e:a9:45:2a:bb:b7:5f:d6:41:7c:26:63:f7:
78:4d:5a:8f:6d:14:0a:5a:57:28:e1:8d:84:c1:b2:
58:57:c0:36:e1:b8:a9:e3:23:ff:c5:dd:ff:bb:d3:
22:c7:a9:02:a9:dd:25:c6:ff:bd:ff:f2:78:98:cd:
e8:41:18:3e:11:ca:3e:94:bb:c3:6e:6c:8a:5d:7c:
21:9c:ba:ec:73:45:fc:18:56:9b:60:10:14:b5:0b:
a4:3a:3a:d5:c9:4a:b3:03:09:8c:67:22:6b:ec:8f:
09:73:fe:35:4f:b3:6c:de:82:fa:2d:39:4d:f5:36:
29:3b:a6:47:96:b2:c5:bf:b7:7a:6b:c0:eb:a4:3c:
6e:d8:bb:9c:f9:9d:a7:5e:6d:57:3f:8b:2c:01:9f:
bd:c2:a4:8d:ef:1a:b2:73:f4:92:58:38:2e:cf:c0:
83:6e:7d:0a:56:ee:ec:02:f1:fe:b3:b3:20:6a:64:
9d:12:f5:84:db:7d:1a:2a:25:a5:90:57:c8:92:d5:
20:e4:32:3f:56:bd:c1:b2:23:2c:65:67:e4:07:60:
bd:55:1b:fb:27:4f:a9:3d:ab:6e:40:9a:4c:b5:99:
17:d9:cb:ca:72:a3:47:e5:c5:87:7f:83:ea:93:8a:
4e:d1:7d:cf:2c:29:8b:b8:0d:4e:17:30:cb:9c:52:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9A:3F:9D:B3:4C:41:F8:6B:34:10:C1:E4:81:3E:0A:26:E3:64:0F
X509v3 Authority Key Identifier:
keyid:A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/8B417B6064AA11F19AE9C6D58F47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
202.133.76.0/23
IPv6:
2402:2720::/32
Signature Algorithm: sha256WithRSAEncryption
79:78:db:de:23:09:68:97:b0:95:f4:28:d7:93:fe:b7:f1:36:
8d:91:b5:6b:83:1f:ed:1f:0c:de:05:30:e1:27:e7:b3:4e:57:
6e:21:e2:48:65:5c:eb:65:dc:9f:35:49:f0:38:b0:5d:23:1a:
f2:14:26:b0:22:a0:ab:67:c0:f6:6b:89:ea:c6:e9:1c:b2:cc:
7a:7a:d3:11:dc:c9:9f:c2:33:65:d0:33:59:5e:c8:6f:e5:93:
0e:52:37:63:66:a6:0d:8f:a4:3a:8d:74:7d:19:71:c0:e7:02:
f4:a3:ae:5b:f7:27:b4:92:8d:25:5d:79:5a:4f:f6:3e:0b:0a:
6b:20:c1:6d:22:8d:b0:8b:4c:f1:04:d7:24:9a:82:91:66:8e:
48:5e:ff:6a:e4:73:21:14:1f:16:c5:54:70:11:21:2f:12:02:
f5:8f:12:d2:a8:20:13:e7:eb:37:99:36:46:6d:ed:98:79:90:
9f:5d:69:7a:ea:9b:9f:5d:7f:af:4b:51:66:5b:07:da:b8:b8:
27:7b:14:e4:f7:20:88:5b:c5:16:23:30:4a:01:4d:d1:5e:96:
bb:d3:f6:b1:74:0e:b6:3b:ea:be:72:d5:11:e9:9e:b6:43:ed:
98:d6:ef:df:d9:a5:4d:00:1a:be:9d:1d:ba:28:15:16:ac:56:
19:4d:03:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:27:17 2026 by rpki-client