
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/828E85AE64EA11F19C618AB67247A888.roa
File: 828E85AE64EA11F19C618AB67247A888.roa (raw, json)
Hash identifier: 0G+BNQAS4664E+QcDEpPQYRNa861X/hluz5HGcgezLE=
Subject key identifier: A6:61:15:E8:A2:A5:D2:C4:28:DF:87:99:61:EE:16:B6:62:FE:03:D5
Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Certificate serial: 012B
Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/828E85AE64EA11F19C618AB67247A888.roa
Signing time: Wed 10 Jun 2026 16:36:20 +0000
ROA not before: Wed 10 Jun 2026 16:36:20 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 134886
IP address blocks: 163.61.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Validity
Not Before: Jun 10 16:36:20 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a299284-491f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:97:0c:ca:b6:5a:c6:c6:7f:a8:93:2a:b6:
b3:f8:d8:c9:9d:82:36:92:e3:52:6c:b6:54:6c:af:
a2:c2:67:be:c4:f4:9f:20:93:72:2e:f5:d6:f8:c4:
37:3b:64:0e:6f:66:9f:e3:3b:d0:18:40:c1:b0:f5:
a7:66:d0:8f:22:cf:aa:14:78:81:cb:f3:e1:6e:53:
82:2e:ca:12:1d:87:77:5a:16:91:46:c3:dc:12:0b:
09:ae:fd:60:b4:80:02:6b:5b:fc:5d:a9:9c:49:a6:
ff:21:ac:f5:1a:35:95:0c:f9:33:56:3f:ef:14:dc:
11:90:df:ac:d7:e2:ee:2c:66:38:ef:e9:eb:1b:b5:
d0:9e:ea:64:51:80:92:e6:af:19:6d:4d:fa:dc:1d:
bf:7b:19:1a:79:2d:39:5d:49:2d:55:cb:7a:ed:2a:
17:b3:1f:ed:cc:6e:a4:c6:ba:7e:20:ca:f1:65:aa:
87:38:88:f0:5b:71:c7:c9:fd:80:6b:a7:d8:0a:54:
14:92:e2:6c:24:80:a5:f0:a9:a1:ab:b2:f2:17:bd:
63:b2:5f:d3:21:e0:b7:71:97:da:26:a9:3c:79:9a:
e2:bd:2a:2b:60:56:09:82:fc:3b:ce:06:83:bf:59:
b8:d0:d0:07:e4:e0:16:98:f1:4f:49:88:7f:e4:81:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:61:15:E8:A2:A5:D2:C4:28:DF:87:99:61:EE:16:B6:62:FE:03:D5
X509v3 Authority Key Identifier:
keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/828E85AE64EA11F19C618AB67247A888.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.96.0/24
Signature Algorithm: sha256WithRSAEncryption
12:eb:ac:39:3c:49:2d:11:50:05:6e:13:5a:34:d9:0b:05:1c:
a8:02:13:6f:83:7c:01:6b:e4:1c:60:40:a1:cd:2c:38:e8:d9:
96:d5:34:8d:10:b1:12:a3:d2:1a:90:55:b5:e1:08:4b:77:97:
f1:ec:cb:d7:8f:08:6c:3a:c5:67:34:c8:c7:bd:33:3f:70:36:
17:bc:f1:0d:90:0e:31:51:1b:04:0f:55:f6:2c:0a:af:71:ac:
f1:e4:d7:69:80:72:82:ef:af:2e:24:3b:11:bf:b9:e3:3b:de:
ec:f6:39:1b:d0:1c:31:85:72:bb:0a:c3:d7:80:3b:29:e2:26:
9a:d7:7a:7a:99:8e:8a:17:52:82:88:7b:a1:39:e1:89:31:db:
2c:bc:f0:05:e8:21:a2:c6:d2:e8:e1:25:0c:88:bf:2a:72:9b:
e1:b8:2b:5a:44:c6:6f:97:de:cb:18:2d:1f:cc:6e:c1:e7:15:
99:1e:ad:00:91:b4:04:65:57:77:49:98:bb:1d:1b:ff:2e:4d:
26:ca:90:62:68:63:d0:e0:88:78:d2:ce:98:73:c1:f5:61:20:
0b:0c:3c:02:fb:1f:19:5a:73:ee:5f:4f:83:5c:3d:20:a7:f1:
65:61:76:d5:8d:c9:4b:d9:ac:12:ac:83:13:22:6e:7b:12:60:
65:3c:89:d2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkRFRUIxMTAvBgNVBAUTKDZCNjNBNjBFN0Q3RjUxRDAzODcyOEM2NDI1OTA2MDQ3
MDE2Qzk5MDQwHhcNMjYwNjEwMTYzNjIwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI5OTI4NC00OTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApqmXDMq2WsbGf6iTKraz+NjJnYI2kuNSbLZUbK+iwme+xPSfIJNyLvXW+MQ3
O2QOb2af4zvQGEDBsPWnZtCPIs+qFHiBy/PhblOCLsoSHYd3WhaRRsPcEgsJrv1g
tIACa1v8XamcSab/Iaz1GjWVDPkzVj/vFNwRkN+s1+LuLGY47+nrG7XQnupkUYCS
5q8ZbU363B2/exkaeS05XUktVct67SoXsx/tzG6kxrp+IMrxZaqHOIjwW3HHyf2A
a6fYClQUkuJsJICl8Kmhq7LyF71jsl/TIeC3cZfaJqk8eZrivSorYFYJgvw7zgaD
v1m40NAH5OAWmPFPSYh/5IGsPwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKZhFeii
pdLEKN+HmWHuFrZi/gPVMB8GA1UdIwQYMBaAFGtjpg59f1HQOHKMZCWQYEcBbJkE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREVFQi8xRUU3RkE2MEU1
RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1VkQTRjb3hrSlpCZ1J3RnNt
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21RUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkRFRUIvMUVFN0ZBNjBFNUY0MTFFRkFCRDM5RDdFQzRGOUFFMDIvODI4RTg1QUU2
NEVBMTFGMTlDNjE4QUI2NzI0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoz1gMA0GCSqGSIb3DQEBCwUAA4IBAQAS66w5PEktEVAFbhNaNNkL
BRyoAhNvg3wBa+QcYEChzSw46NmW1TSNELESo9IakFW14QhLd5fx7MvXjwhsOsVn
NMjHvTM/cDYXvPENkA4xURsED1X2LAqvcazx5NdpgHKC768uJDsRv7njO97s9jkb
0BwxhXK7CsPXgDsp4iaa13p6mY6KF1KCiHuhOeGJMdssvPAF6CGixtLo4SUMiL8q
cpvhuCtaRMZvl97LGC0fzG7B5xWZHq0AkbQEZVd3SZi7HRv/Lk0mypBiaGPQ4Ih4
0s6Yc8H1YSALDDwC+x8ZWnPuX0+DXD0gp/FlYXbVjclL2awSrIMTIm57EmBlPInS
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:19:33 2026 by rpki-client