
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/04241E3222F011F0B021396DC4F9AE02.roa
File: 04241E3222F011F0B021396DC4F9AE02.roa (raw, json)
Hash identifier: pZ8heGX8vu4h/FA/NC03PV3GwdLiz3to6+22+csdrJE=
Subject key identifier: 01:AF:37:AE:9A:F2:BF:A1:1A:06:D9:B2:2C:BA:6E:2D:8C:C5:71:08
Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Certificate serial: 0101
Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/04241E3222F011F0B021396DC4F9AE02.roa
Signing time: Thu 09 Apr 2026 06:40:59 +0000
ROA not before: Thu 09 Apr 2026 06:40:59 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 134886
IP address blocks: 163.61.96.0/24 maxlen: 24
163.61.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Validity
Not Before: Apr 9 06:40:59 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69d749fb-4725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3e:8c:ac:14:f4:6e:77:4b:7e:89:0d:70:0b:
39:13:73:ee:e6:a3:48:84:fb:72:44:d2:8a:98:5e:
87:55:d4:bf:89:f6:1b:51:18:d8:b0:1f:ea:dc:d3:
f4:47:a3:8b:ac:dc:85:d8:2f:72:1c:75:f6:ec:24:
1c:28:fd:0b:3d:f0:ea:31:cc:35:83:3b:0d:b2:76:
a4:a3:4a:24:1c:80:f7:d4:b4:25:da:74:51:10:35:
35:0a:42:be:bd:2a:cf:92:d1:d2:90:44:6d:79:1a:
b8:03:ad:81:de:f3:b8:fc:f6:13:15:92:1a:28:a7:
fa:58:9f:60:54:3e:33:34:91:ff:af:2f:a7:46:90:
09:a6:7f:39:c6:6a:c0:2b:bc:4a:b0:1b:8d:15:dc:
57:37:f0:26:9e:ac:65:78:d7:f5:06:20:d5:a7:b1:
04:f9:25:8f:80:1a:e8:b3:35:41:91:d9:a4:b6:26:
c4:7c:ce:7b:eb:c7:32:dc:66:70:4d:01:c1:ad:b7:
97:87:cc:4b:81:44:72:63:1c:7e:6e:c1:bd:5f:1d:
d9:54:89:6b:2f:de:af:09:5a:ab:d2:db:2f:a1:b8:
95:69:9e:e8:6e:6e:4a:4f:d6:c7:f4:1a:36:1a:af:
aa:e6:00:35:26:69:6e:db:a0:85:0a:ba:67:58:01:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AF:37:AE:9A:F2:BF:A1:1A:06:D9:B2:2C:BA:6E:2D:8C:C5:71:08
X509v3 Authority Key Identifier:
keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/04241E3222F011F0B021396DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.96.0/23
Signature Algorithm: sha256WithRSAEncryption
23:31:cd:4d:36:b9:a4:6a:69:17:0d:25:02:32:f7:17:cb:d5:
81:47:e1:c9:c5:41:e4:2e:a4:ca:b2:29:c6:78:78:60:1a:4f:
9a:a4:9f:fb:a7:2f:92:3b:f7:9a:4b:63:56:e3:04:46:b3:6b:
cd:fe:1b:00:40:45:ea:d1:08:61:25:0a:ef:0a:ed:f9:a7:7b:
40:bf:bd:49:8e:59:bf:ac:7f:12:a9:20:4e:22:5a:f3:a9:e9:
ad:00:05:5a:16:6b:4c:22:4f:cf:e2:37:c6:b6:3c:99:c7:fa:
eb:89:aa:05:44:90:4e:1d:70:1f:56:3f:b9:35:4b:81:3a:af:
2c:59:7d:ee:2d:c8:74:7b:61:8f:cf:27:06:a5:ef:d9:10:fe:
17:d3:8d:6f:97:84:7b:06:ee:96:4e:29:81:d1:6a:db:4b:54:
8a:c8:50:c9:69:2d:8b:20:7f:91:46:05:51:15:1a:e2:71:91:
99:e7:32:0b:b7:e7:8b:db:36:40:2a:a1:2a:f2:9e:64:cc:51:
43:53:9a:20:40:2f:69:1f:90:d3:7a:a4:0d:e5:64:d3:aa:9e:
96:f7:9c:d6:97:59:74:91:dd:06:3e:22:20:6d:6b:c7:d7:06:
90:e3:e2:fd:60:f3:f0:0d:0d:cd:d4:ef:f5:b5:31:64:35:66:
49:e0:41:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:43 2026 by rpki-client