
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/6ACBF170CC4C11ED8B54A36FC4F9AE02.roa
File: 6ACBF170CC4C11ED8B54A36FC4F9AE02.roa (raw, json)
Hash identifier: 509Uw4hnR6dD95p8suHp5mpSSFDb/NkiCjgNz2u/x+U=
Subject key identifier: 86:20:FF:B8:F5:2B:91:33:F9:DA:54:49:5C:F8:54:69:F6:F9:DF:44
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 0FF9
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/6ACBF170CC4C11ED8B54A36FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:47:01 +0000
ROA not before: Wed 14 Jan 2026 18:15:03 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 17117
IP address blocks: 210.57.77.0/24 maxlen: 24
210.57.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4089 (0xff9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Jan 14 18:15:03 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a489a5-e5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:c2:37:2a:52:27:e8:7d:5a:38:7a:3a:80:
60:9d:2e:b1:f7:7d:55:52:b4:11:4a:9e:43:e9:26:
47:87:a7:5e:08:0e:81:50:77:1a:bb:ed:61:46:0e:
9e:bd:97:38:5d:e2:c8:39:8c:e3:7e:87:03:63:a5:
08:09:18:aa:8d:49:8b:71:74:c1:98:8d:3c:6b:99:
ca:22:44:f5:c7:1d:11:f9:ce:8b:c0:c2:af:0f:a8:
31:38:29:db:cc:71:7d:21:9f:d2:38:b1:df:a8:8f:
0a:37:6b:7b:9c:8a:9f:e3:4e:4a:c1:67:dd:43:03:
4f:9b:58:1b:d0:5c:f0:45:44:44:7c:b6:7c:42:b5:
d0:b5:a3:60:0f:6c:48:af:0d:be:72:7f:f7:df:ef:
47:cb:fa:e1:63:e1:84:48:1e:25:06:0a:3a:e4:4c:
05:7d:53:d0:ad:35:1c:ab:e1:1a:13:13:33:b5:d4:
5c:c4:e0:1d:fd:49:a1:43:8c:eb:50:1d:65:cf:98:
b7:c8:ef:49:74:fa:65:34:de:b4:76:74:b6:c6:47:
96:52:f3:e3:df:1c:36:e3:89:10:f7:eb:f0:4e:50:
86:38:5b:6b:c3:96:12:30:cb:67:4e:9d:a2:4b:bd:
f3:cf:d2:63:4e:69:cc:b7:7a:00:86:e2:7e:af:cb:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:20:FF:B8:F5:2B:91:33:F9:DA:54:49:5C:F8:54:69:F6:F9:DF:44
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/6ACBF170CC4C11ED8B54A36FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.57.77.0-210.57.78.255
Signature Algorithm: sha256WithRSAEncryption
85:e3:16:57:44:79:61:25:9d:bc:08:cb:06:b2:c9:21:60:7c:
f9:2d:91:b8:d5:2d:2c:e4:0d:97:6b:78:ef:04:ad:d7:ce:97:
48:22:88:8e:09:2d:64:fb:d3:52:ca:55:02:2c:56:3c:62:92:
45:94:f5:78:37:9d:43:a3:b6:a5:5b:5a:cb:ac:cd:a5:83:e6:
e6:51:74:ea:29:41:7b:92:14:e1:ce:c5:95:5f:d5:8c:a3:ca:
b7:d3:b3:d2:c8:46:2a:cd:50:56:d0:20:fe:1d:51:bc:0c:ed:
27:93:38:da:87:1c:93:63:36:41:6f:d1:b9:8b:71:b4:12:48:
fd:e5:cd:2c:a5:86:45:4a:3e:68:d9:a7:8b:ed:90:ab:15:2b:
fb:a6:cb:fc:99:6d:58:3f:09:2d:fa:41:46:2d:82:a6:b9:4a:
55:1c:d1:79:99:69:16:97:1b:ba:9e:c2:1d:f8:61:2d:80:89:
57:df:f3:65:ec:72:b6:e8:10:50:4e:18:70:b5:94:cb:88:1b:
ab:ac:12:d7:07:fa:63:59:28:b3:c4:d1:6e:a4:e3:5e:74:f1:
6c:c0:86:71:28:ac:90:05:25:97:69:62:b4:df:8b:9d:da:9a:
d6:fb:4e:ef:18:17:4c:d8:8d:15:81:25:b8:2f:e2:f6:d2:01:
42:30:2c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:31 2026 by rpki-client