
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/640C18A214AD11EEAA685687C4F9AE02.roa
File: 640C18A214AD11EEAA685687C4F9AE02.roa (raw, json)
Hash identifier: pCka02VxJIV+WttfZAmOjkT4DnDYrY/FXrYiBj08AC4=
Subject key identifier: 9E:83:4A:78:03:92:4F:97:44:AD:F0:7A:15:47:94:E6:1C:F6:5A:28
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 0FF1
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/640C18A214AD11EEAA685687C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:46:54 +0000
ROA not before: Wed 14 Jan 2026 18:14:55 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 1221
IP address blocks: 61.47.88.0/21 maxlen: 24
116.92.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4081 (0xff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Jan 14 18:14:55 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a4899e-71bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bf:e5:d9:b2:69:d8:9f:8e:51:39:f4:d7:53:
85:86:86:19:76:51:ff:7a:d4:e2:cd:e1:fa:fd:d1:
f8:f3:19:55:60:d8:78:99:2b:49:72:5a:56:a4:92:
45:24:a5:2d:30:38:83:ad:65:6a:ad:ae:68:d7:18:
1e:08:fb:8c:3a:62:1a:c7:1f:ce:23:a1:eb:8b:65:
ab:83:64:61:9f:50:94:dd:f4:da:4c:cb:1a:c3:99:
f1:26:29:99:92:9a:27:29:28:ac:69:ce:0d:d6:ad:
07:aa:5a:e8:fb:f1:40:28:86:3e:da:df:d1:ae:f7:
d0:aa:f7:05:d0:70:0d:5b:9b:a9:e8:7e:fa:4d:9f:
39:1a:ac:94:bc:9c:62:3a:83:ff:dc:61:66:64:ac:
3d:90:90:47:da:c6:19:47:39:d7:53:6d:4f:13:92:
71:9d:b4:09:c1:18:81:ca:d6:f0:e8:ce:c7:42:36:
8c:6f:4d:ac:60:af:d0:a0:a8:1b:8a:7f:ab:3d:c3:
b1:bc:27:01:98:35:51:8e:03:30:7f:be:a2:3a:81:
f1:fc:74:bc:3c:12:90:35:bc:35:51:e7:8f:9a:aa:
60:46:d7:92:f1:46:e2:19:d1:03:15:f2:3f:bd:96:
aa:0d:c1:70:88:f0:fa:9d:77:c2:9f:16:7c:ec:3f:
f8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:83:4A:78:03:92:4F:97:44:AD:F0:7A:15:47:94:E6:1C:F6:5A:28
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/640C18A214AD11EEAA685687C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.47.88.0/21
116.92.64.0/21
Signature Algorithm: sha256WithRSAEncryption
99:19:c4:46:43:36:13:43:40:62:4f:06:20:8e:9d:ff:54:57:
55:e5:d0:bf:12:ac:86:d6:37:fc:cc:a2:fe:02:2f:e0:db:13:
98:1c:47:74:1d:d2:ed:7f:cc:60:69:4d:19:95:21:3c:1d:1b:
59:85:07:23:22:ef:a5:c2:eb:ea:81:aa:b1:12:bf:16:6e:3f:
06:ac:72:3f:31:65:31:0e:0a:f5:e8:4a:42:3d:9f:8c:f7:2b:
45:4d:0d:b8:46:6f:58:8a:c7:9e:2c:ad:5e:93:e6:77:59:50:
62:15:02:d0:2b:d9:ea:72:51:f0:de:62:8f:02:93:b0:74:8e:
c7:d2:11:61:9c:bf:fc:41:f3:6e:49:3d:21:21:48:f6:63:7a:
30:89:0b:94:d7:15:9b:c7:78:1d:b3:f0:ae:1a:9d:8a:63:d0:
12:45:39:8e:3c:b2:13:83:f3:e3:ec:04:91:5b:8a:b4:33:57:
fc:0c:ae:02:bb:38:ed:b5:6c:07:8f:ee:b1:d6:43:9c:58:47:
17:ec:84:26:2e:84:12:22:74:ae:8c:fd:ae:ed:40:c7:c4:91:
24:96:e1:c8:d4:05:fa:da:a9:d7:da:7d:e4:d0:f4:20:25:46:
83:4d:6a:ff:af:af:29:be:0e:ed:9e:30:b1:f8:af:9b:9b:47:
05:b4:65:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:54 2026 by rpki-client