
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/B643C13464D111F1AEDC7C0F6A47A888.roa
File: B643C13464D111F1AEDC7C0F6A47A888.roa (raw, json)
Hash identifier: 5hrXD8FvQIBDK27nv5xrgLxOE5V57p0m29HMAxji75I=
Subject key identifier: A9:39:36:64:C1:B0:49:8D:91:1C:B7:7E:1F:5A:50:09:01:49:76:AB
Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Certificate serial: 2278
Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/B643C13464D111F1AEDC7C0F6A47A888.roa
Signing time: Wed 10 Jun 2026 13:38:49 +0000
ROA not before: Wed 10 Jun 2026 13:38:49 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 46606
IP address blocks: 112.109.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8824 (0x2278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Validity
Not Before: Jun 10 13:38:49 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a2968e9-db5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:81:ec:09:9f:ef:d3:fd:07:99:2d:9f:27:
34:ac:61:43:e0:59:ea:fe:20:2b:23:6f:06:e2:a1:
e1:9b:f2:93:f8:ee:f9:ec:83:f3:31:00:0b:51:40:
e3:ad:46:5d:35:a1:f6:e1:3e:2a:bf:c3:94:44:4d:
74:23:14:43:60:59:6a:6e:9e:72:8d:42:e1:99:66:
55:3b:66:a6:86:c8:b9:19:f8:4e:6f:3e:58:65:f9:
10:b2:5f:6e:6b:28:75:73:20:ef:51:f8:c5:7a:f0:
f5:45:ff:9d:b9:2d:18:08:fe:0b:f2:6c:5b:61:44:
1a:20:d5:e2:3d:0e:10:ac:fd:53:80:10:bc:68:b1:
52:42:78:b4:57:a1:07:11:78:7d:57:3c:62:38:cf:
2f:f2:d8:56:6b:22:70:8d:9e:c3:93:f7:7a:19:e0:
66:9b:8a:61:65:0f:90:c0:ce:2b:77:10:3a:d8:f8:
5a:92:10:02:e1:42:5c:be:08:e4:20:20:db:32:5e:
1d:6f:85:b4:29:09:4a:19:95:05:c0:be:e1:4d:ea:
93:ae:1c:36:90:40:52:bd:26:c3:cd:03:7d:cb:ff:
64:44:63:17:b7:8e:0b:ea:f5:9a:d1:d7:b1:87:c3:
9a:a1:98:65:bf:05:83:ef:b9:af:34:64:49:a4:f2:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:39:36:64:C1:B0:49:8D:91:1C:B7:7E:1F:5A:50:09:01:49:76:AB
X509v3 Authority Key Identifier:
keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/B643C13464D111F1AEDC7C0F6A47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
112.109.84.0/24
Signature Algorithm: sha256WithRSAEncryption
80:63:7c:b7:99:ea:08:b7:09:43:1a:fb:17:de:ff:1a:19:29:
ff:da:bb:90:b0:60:47:18:50:61:52:62:0b:37:50:31:49:b3:
5a:0a:ee:d4:41:bf:10:57:c8:2f:b4:65:5b:03:16:f1:9e:17:
b5:71:1c:ae:7a:83:fb:ac:78:e8:af:b8:19:4f:23:6b:61:bd:
b7:80:79:73:d2:1e:4f:b0:79:e1:b1:5e:76:49:96:1f:73:17:
61:de:8a:c1:a2:0b:3d:2d:f0:83:ca:fa:ce:94:4e:53:11:62:
a3:53:93:b6:e3:3d:b8:fe:79:25:5b:21:51:af:68:f3:dd:d2:
65:9d:4d:19:d9:57:74:d3:b9:c9:ef:a9:dc:3e:15:f9:21:d4:
6f:d8:09:3f:9b:09:0d:e7:f6:ce:2e:19:12:71:c3:ec:41:a6:
3e:83:eb:72:d9:08:d5:49:54:03:75:7c:a6:35:da:ee:af:0b:
4f:b9:3a:55:3d:3a:3e:75:e3:b6:9c:32:3e:34:2c:cc:fb:8f:
0c:79:39:eb:8a:d0:05:b6:2b:7d:ba:02:c5:ae:6f:b4:7c:ac:
59:50:da:73:4a:52:15:57:f4:cd:86:5c:2b:dd:77:91:8b:5a:
ca:89:c9:14:d8:31:2d:ab:c5:19:38:ee:3b:c7:54:09:45:f1:
50:05:58:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:56 2026 by rpki-client