
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/60E63D04171011EFA738EE2BC4F9AE02.roa
File: 60E63D04171011EFA738EE2BC4F9AE02.roa (raw, json)
Hash identifier: PwNdQbwzIO51fbFwPUeRhowg22x37ijQvIVjMZMULv8=
Subject key identifier: 71:0C:29:0F:0D:DC:B7:9D:96:43:FF:3A:ED:A6:21:4B:7D:F5:32:48
Certificate issuer: /CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9
Certificate serial: 018E
Authority key identifier: B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/60E63D04171011EFA738EE2BC4F9AE02.roa
Signing time: Tue 09 Jun 2026 03:05:08 +0000
ROA not before: Tue 09 Jun 2026 03:05:08 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 38495
IP address blocks: 166.65.180.0/22 maxlen: 22
166.65.180.0/23 maxlen: 23
166.65.182.0/23 maxlen: 23
166.65.184.0/21 maxlen: 21
166.65.184.0/22 maxlen: 22
166.65.188.0/22 maxlen: 22
166.65.192.0/21 maxlen: 21
166.65.192.0/22 maxlen: 22
166.65.196.0/22 maxlen: 22
166.65.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl
rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E22E3, serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9
Validity
Not Before: Jun 9 03:05:08 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a2782e4-efb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:c6:ab:26:f5:40:ea:8b:4a:1f:34:9d:74:
cd:fb:84:45:75:de:1b:19:24:87:db:ad:6d:c3:96:
98:b5:16:8f:ec:26:5f:6c:f7:69:a3:93:20:8f:85:
34:8f:f3:4c:cb:3f:d5:58:14:d7:bc:d6:89:6d:45:
3f:b2:6f:95:09:35:0f:31:8a:97:48:3f:3b:b1:e4:
11:0b:e2:39:0d:fe:27:dc:59:76:89:ec:33:b7:44:
a1:d5:06:3f:18:67:ee:10:f9:a9:35:c7:78:47:95:
64:7d:29:41:be:c5:df:2f:84:c7:5f:fd:58:57:c9:
e0:1c:19:d8:aa:f5:61:f7:06:9c:75:06:4b:e0:0d:
38:af:16:3b:03:34:f3:e1:b6:b9:59:b0:a4:36:53:
25:88:62:f8:82:65:e4:6f:eb:a3:37:0f:56:9c:10:
96:09:50:ed:01:45:2b:00:dc:47:13:28:a7:a4:45:
bb:29:0c:d0:52:ff:41:72:1a:aa:3a:45:1a:15:70:
f8:a7:ca:a1:49:bf:61:bc:c7:b0:d6:ee:3b:5d:0b:
9b:86:7f:4b:65:e2:f3:83:b9:1f:58:46:da:36:47:
4a:fc:e5:dd:a9:1a:9c:dd:32:b6:fb:95:f2:fc:4a:
af:70:af:2b:14:ec:32:29:c0:db:fd:c0:a8:dd:7f:
e8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0C:29:0F:0D:DC:B7:9D:96:43:FF:3A:ED:A6:21:4B:7D:F5:32:48
X509v3 Authority Key Identifier:
keyid:B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/60E63D04171011EFA738EE2BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
166.65.180.0-166.65.199.255
166.65.208.0/20
Signature Algorithm: sha256WithRSAEncryption
08:71:14:c9:5a:25:97:c1:36:9d:08:0c:c2:f8:e4:86:c2:8e:
69:17:37:2a:e4:38:56:f2:eb:d6:58:4c:2b:a6:19:71:2a:89:
3b:ae:9d:40:4a:02:f2:bd:58:d3:e7:89:ec:3d:4c:ab:09:0f:
0c:25:ac:96:66:4b:57:8f:f8:87:6f:9c:c9:9b:1b:87:a4:26:
0d:88:3b:f3:07:d5:2b:48:a3:5a:8f:82:fe:e3:b1:d3:a4:c4:
8f:20:f0:19:dc:10:5c:20:50:cb:06:e1:2d:38:29:6f:8e:a1:
7d:cd:81:58:0e:89:bb:d9:ad:df:cc:69:28:85:43:31:a3:13:
56:05:36:b3:35:7c:b2:ec:4f:42:db:e5:4a:94:d8:54:2c:03:
9e:25:48:2b:3f:22:ce:d1:34:86:8c:38:96:40:6f:16:54:43:
57:42:c8:44:34:c3:51:81:34:0a:12:4d:a1:cc:3b:b8:d4:48:
c8:af:22:fe:90:d7:18:6d:72:2c:70:aa:ae:da:61:8e:03:b2:
80:92:0b:75:cc:6e:1b:01:4d:fc:da:33:e4:48:03:12:f8:6f:
18:42:ca:a6:14:bb:0f:a5:c7:e1:3f:53:dc:e6:97:e3:e7:66:
98:3f:00:6d:a5:f3:ad:ab:e2:43:04:a8:7b:5d:e7:75:68:5b:
b3:57:8d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:30:51 2026 by rpki-client