
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/0A2186867CD111F0B302D85AC4F9AE02.roa
File: 0A2186867CD111F0B302D85AC4F9AE02.roa (raw, json)
Hash identifier: FDNHfubjzMxWcLvfZxc/xH+9MKx//lbzqWgPRsigR6o=
Subject key identifier: 8D:4F:56:9D:85:26:30:DF:D5:4E:A8:3A:AA:F7:15:4F:DC:C7:DC:B2
Certificate issuer: /CN=A91D8806/serialNumber=F926E8AEA464B3A58906C09BAC46DE31D7409F64
Certificate serial: 67
Authority key identifier: F9:26:E8:AE:A4:64:B3:A5:89:06:C0:9B:AC:46:DE:31:D7:40:9F:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SborqRks6WJBsCbrEbeMddAn2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/0A2186867CD111F0B302D85AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:29:06 +0000
ROA not before: Fri 27 Feb 2026 08:25:35 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 153603
IP address blocks: 163.61.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.crl
rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SborqRks6WJBsCbrEbeMddAn2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:19:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8806, serialNumber=F926E8AEA464B3A58906C09BAC46DE31D7409F64
Validity
Not Before: Feb 27 08:25:35 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a3f8d2-2c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:8b:9a:ad:61:1e:b7:f2:10:d0:86:8d:4f:
44:e9:d9:9d:d2:9f:23:b6:ff:29:63:92:f1:ab:9d:
84:16:ee:f1:87:a2:26:5f:1a:8f:c1:d2:00:86:71:
a2:ea:58:11:31:b1:1d:4f:f2:46:4c:19:6b:7e:fe:
70:89:b2:be:53:84:55:61:20:fc:e6:b2:dd:16:bf:
db:42:5c:af:2b:13:b1:0c:78:82:e4:b4:d5:b3:6c:
b1:00:85:e3:57:ca:4f:9c:af:1d:e7:27:f1:33:a8:
6f:cf:3d:d1:95:14:4a:a7:45:92:0e:70:28:e5:7e:
06:54:6e:93:d5:8e:83:15:d3:80:d3:92:5c:b6:df:
78:53:66:b6:57:5e:6c:25:15:3d:25:bf:a3:c2:31:
17:ad:b0:7b:da:23:21:d9:37:37:de:17:a8:1c:27:
24:86:80:0d:bf:ae:a1:c7:9e:92:73:f0:a6:f2:6e:
67:56:0e:29:a4:d8:2b:be:49:0e:72:e0:24:1b:ce:
26:4c:51:a7:a6:f6:1c:6a:af:18:27:55:83:a8:8d:
74:90:77:4b:fb:d9:0f:a4:eb:db:d6:8d:15:54:42:
11:4e:02:71:29:0a:66:06:ed:28:54:ab:3a:57:ba:
74:04:0f:fa:c0:56:c3:78:45:df:f2:e4:34:24:2b:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4F:56:9D:85:26:30:DF:D5:4E:A8:3A:AA:F7:15:4F:DC:C7:DC:B2
X509v3 Authority Key Identifier:
keyid:F9:26:E8:AE:A4:64:B3:A5:89:06:C0:9B:AC:46:DE:31:D7:40:9F:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SborqRks6WJBsCbrEbeMddAn2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/0A2186867CD111F0B302D85AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.140.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:43:85:7e:24:53:91:4d:2e:74:56:01:16:4d:56:25:c1:b1:
72:c4:cd:94:b2:f1:a3:79:89:45:7a:8f:0b:66:12:59:be:19:
aa:2e:db:5a:93:34:59:ed:77:8e:58:d2:b1:f1:61:5f:85:d0:
09:a9:53:33:44:73:be:49:25:5f:99:f4:30:a3:74:c8:3f:26:
e0:46:25:f1:09:18:91:ec:6c:a6:df:b4:4d:de:98:3c:fb:0b:
b7:8e:fd:50:97:0f:25:c2:6a:b7:9c:06:6a:3e:56:07:60:a6:
5f:f6:3e:ab:7e:b3:27:9f:69:77:42:d0:23:59:09:73:84:bd:
e7:9b:8d:19:85:2d:a3:6e:71:d1:1c:ed:86:89:09:ea:b0:14:
1f:d0:a2:cb:ba:c0:21:13:48:40:2e:1d:ae:5f:a9:40:65:e1:
89:a6:66:51:0c:77:4f:60:13:b1:b1:69:f1:19:27:e5:35:24:
1a:6e:85:51:4c:bf:92:12:7e:21:2e:7a:8a:48:03:a6:43:6f:
49:c9:6b:dd:15:c8:db:e4:63:7e:27:b7:86:f6:a2:24:0b:e3:
9f:a8:b1:f4:9f:3d:1d:aa:61:55:74:15:14:35:db:b5:61:90:
86:49:ca:2a:08:fb:eb:e3:60:f1:23:ea:dc:75:fa:39:5e:45:
31:26:91:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:18 2026 by rpki-client