
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/F84FF96A493911ED805EB686C4F9AE02.roa
File: F84FF96A493911ED805EB686C4F9AE02.roa (raw, json)
Hash identifier: VB4shFZW5YO/9CNmWmiUMkFcJba9e5If6VsVJJNONi0=
Subject key identifier: 86:80:D6:5D:40:1D:D8:DD:2A:D2:7B:4E:EA:5E:67:9B:60:57:36:60
Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
Certificate serial: 032A
Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/F84FF96A493911ED805EB686C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:28:06 +0000
ROA not before: Sat 31 Jan 2026 01:21:22 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 32787
IP address blocks: 140.168.240.0/24 maxlen: 24
140.168.241.0/24 maxlen: 24
140.168.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl
rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810 (0x32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
Validity
Not Before: Jan 31 01:21:22 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a48535-408d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:d9:09:6f:34:c7:b2:c1:69:83:17:b4:c8:
30:60:03:58:19:d7:e5:be:64:c7:57:fc:51:be:99:
1d:bd:9a:c7:10:36:04:d9:99:db:fc:e7:0b:8f:ac:
92:ab:5c:53:0f:d4:75:4e:f3:83:75:7b:cc:39:ee:
5c:5d:07:9a:4b:dd:ba:f8:67:bf:31:31:aa:d3:83:
ad:51:bb:03:0f:f3:1d:ac:6e:9d:68:c0:11:5c:f3:
cd:03:e9:6b:8f:75:90:ff:84:99:2a:a8:91:6f:c5:
31:43:c2:c3:a4:d5:69:5e:ec:41:ef:78:be:e8:7e:
f7:db:d5:c1:94:26:91:48:8c:26:c3:75:ce:8a:24:
d1:26:76:1a:40:ec:f6:de:17:9a:4d:05:97:7f:aa:
d6:04:43:34:92:28:39:a0:5a:98:24:f8:94:5f:2b:
e3:96:b0:95:e4:77:b9:5a:82:b5:ef:5e:04:8d:95:
49:33:e8:1f:b9:ca:7a:2d:91:02:82:9b:17:e0:67:
f8:fe:0b:05:85:2b:98:2f:46:5f:f0:91:d6:36:f2:
d1:a1:cd:16:25:ba:45:50:c1:a9:c4:c9:46:30:ca:
43:e2:44:fb:52:de:5c:f3:36:84:a6:87:78:9a:2c:
94:4d:51:16:7b:6b:34:49:65:08:33:41:39:18:83:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:80:D6:5D:40:1D:D8:DD:2A:D2:7B:4E:EA:5E:67:9B:60:57:36:60
X509v3 Authority Key Identifier:
keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/F84FF96A493911ED805EB686C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
140.168.240.0/23
140.168.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:74:3f:e3:b0:ff:c8:2e:b9:2a:ab:40:09:c8:32:cc:21:06:
9b:81:e0:e6:80:7e:cb:99:b6:b8:73:a5:1a:7e:f2:78:28:1a:
47:d7:a1:1f:50:5a:30:b4:bf:ec:79:4c:c9:07:21:e5:a4:e6:
49:f9:cd:0a:2d:b1:75:27:e8:8d:1e:0a:7b:bb:98:c2:0b:18:
00:a9:e4:90:35:d6:26:0c:11:a5:ec:e4:f6:ff:dc:5d:e3:28:
09:57:9c:2a:84:4b:e4:ce:96:a7:15:10:ed:8d:00:62:78:28:
61:d6:e6:73:83:0f:ea:73:37:2a:f3:8c:3a:32:ec:78:dd:9b:
c6:21:ca:68:70:3b:a4:f5:d4:ba:2e:00:41:1d:1f:31:0e:14:
5e:31:f2:18:c4:c2:56:08:ca:a9:4b:67:68:04:5b:12:44:07:
07:52:b0:36:b7:ce:fe:c7:29:a6:99:9c:3e:3d:e8:09:3e:5c:
ba:90:d1:33:54:ec:28:58:9c:68:4a:87:db:c9:9f:6e:8b:83:
31:71:36:26:9c:8d:dc:0c:34:54:82:c6:31:2d:3d:15:91:ac:
29:26:ef:07:a3:16:fe:51:f7:3d:ca:32:90:a1:d4:14:31:a2:
c4:da:10:ee:a6:f5:00:78:85:a0:fd:b1:91:bb:3b:e8:80:4f:
5e:35:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:30 2026 by rpki-client