
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/61A59876012A11EFB75C350FC4F9AE02.roa
File: 61A59876012A11EFB75C350FC4F9AE02.roa (raw, json)
Hash identifier: xILVq3Pl1ryIoRueMpMu286AyVmWUfGzcv0mFdI+Wv0=
Subject key identifier: 45:9C:9A:94:F7:1D:36:23:37:B4:D4:45:44:C9:72:2B:63:58:E8:27
Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78
Certificate serial: 01D4
Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/61A59876012A11EFB75C350FC4F9AE02.roa
Signing time: Thu 27 Aug 2026 03:54:22 +0000
ROA not before: Thu 27 Aug 2026 03:54:22 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 16509
IP address blocks: 117.74.104.0/24 maxlen: 24
117.74.105.0/24 maxlen: 24
117.74.106.0/24 maxlen: 24
117.74.107.0/24 maxlen: 24
117.74.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl
rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78
Validity
Not Before: Aug 27 03:54:22 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8fb4ee-2601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:45:d7:7d:fb:6c:40:8e:13:4c:ff:05:23:
8c:e2:cc:ab:68:bc:4f:d2:f6:36:4e:52:fb:07:94:
88:72:f1:58:81:d6:10:0d:56:ca:ab:6a:48:c1:e3:
8c:0d:42:c8:ca:59:23:cb:c4:e6:5e:f0:74:e6:60:
e5:d8:b1:10:bc:6b:6b:ca:8e:05:d0:6a:83:05:6e:
c8:af:78:a6:29:a1:7c:a7:9d:b0:a4:18:30:18:69:
96:e0:67:c0:9a:8f:b5:60:e6:2d:c7:c2:ee:0e:47:
30:15:2e:64:a7:4f:fc:ca:39:e7:66:e1:d7:60:6e:
71:73:12:64:82:88:39:08:0d:0b:e1:06:9e:cf:9b:
fd:01:10:be:eb:ac:a1:7d:91:6f:8e:a6:1f:ec:bd:
87:73:b0:51:86:8e:c2:c9:41:df:1d:9b:36:c6:6c:
ce:f1:8a:66:94:bd:59:7e:91:f9:3b:b6:4f:4b:92:
65:54:42:89:c8:4b:26:bc:62:4c:03:d7:a6:e7:18:
0e:79:c7:8b:36:02:d0:94:75:26:17:2b:34:07:33:
3c:4c:05:37:17:ef:09:0b:24:ef:49:2e:22:5f:08:
2f:eb:af:b4:d1:b9:b6:9c:17:dc:a4:dc:f5:6c:50:
bf:c8:4f:10:26:77:f4:d2:27:cf:7a:c2:42:0b:8f:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9C:9A:94:F7:1D:36:23:37:B4:D4:45:44:C9:72:2B:63:58:E8:27
X509v3 Authority Key Identifier:
keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/61A59876012A11EFB75C350FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
117.74.104.0-117.74.108.255
Signature Algorithm: sha256WithRSAEncryption
60:a8:a5:66:a8:f1:cb:d1:29:72:c5:ec:4d:6f:b4:3b:29:90:
0e:cd:7d:43:a8:3d:6b:39:59:26:11:73:d1:d8:67:d3:ff:b1:
69:f6:a0:a3:6f:6a:ac:46:03:29:f7:5c:02:fe:6b:2b:4d:e1:
e0:cc:c1:92:7c:29:bb:de:85:70:0b:6e:e8:fb:c9:65:2a:ac:
83:50:f6:5f:e7:da:9b:bd:7e:d2:a0:1a:ea:76:c8:46:55:d2:
a8:19:16:ef:a7:8e:b9:22:4d:ce:af:1c:ae:79:a1:eb:0f:ca:
1c:50:aa:d9:4b:62:94:59:c5:4e:62:ce:42:65:47:9b:a2:b3:
8f:c9:1c:4d:1b:73:b9:37:f7:61:41:f2:b8:a4:87:31:a1:67:
ad:cd:02:c5:22:a8:eb:ee:63:0b:8f:75:31:57:75:a0:4b:a6:
88:54:47:9b:5a:fe:96:c3:33:94:09:7c:fd:89:d0:6b:88:01:
d9:75:cd:b8:95:8d:1c:06:0f:87:af:d4:db:30:54:cb:d7:b3:
ae:be:59:f4:d9:71:61:34:13:fc:dc:a0:75:c9:31:e0:56:9d:
75:9f:17:1b:b7:ae:b7:47:53:c0:6d:d3:58:ee:60:60:d5:14:
5c:cd:a9:84:27:4b:57:3b:7f:8b:bf:a4:90:46:49:8e:86:c5:
83:62:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:30:34 2026 by rpki-client