
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/F1EA8F4657E911F1ACD7923C93833773.roa
File: F1EA8F4657E911F1ACD7923C93833773.roa (raw, json)
Hash identifier: bWtw9F8LU24NtnpV5FCzxLT/YLwgD6y8BEgt8uAmOpo=
Subject key identifier: 77:23:70:53:EB:21:EE:E4:77:7F:D2:7E:DB:92:9D:E9:A6:AF:4E:35
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 0427
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/F1EA8F4657E911F1ACD7923C93833773.roa
Signing time: Thu 11 Jun 2026 03:31:13 +0000
ROA not before: Thu 11 Jun 2026 03:31:13 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 149981
IP address blocks: 123.108.74.0/24 maxlen: 24
2407:2440:21::/48 maxlen: 48
2407:2440:26::/48 maxlen: 48
2407:2440:29::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:18:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1063 (0x427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Jun 11 03:31:13 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a2a2c01-0e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:88:fb:a8:28:1e:03:d5:73:a0:b9:c1:28:
bc:e9:28:3f:0c:c1:3d:a2:4c:16:a2:d5:2b:97:d1:
35:16:1c:ce:95:ea:d1:43:72:74:de:c8:f9:70:f9:
50:30:e3:23:12:61:a2:ab:c2:68:02:f6:89:8a:3b:
d6:1e:96:9d:83:fe:4c:8d:22:01:28:fb:56:a2:19:
45:1b:02:cf:ec:0a:2e:cb:7b:cd:e3:f6:a0:f8:11:
3c:a4:8d:b3:c5:b6:74:97:72:11:86:8b:c9:45:ea:
63:dd:23:00:54:b5:e4:8c:e6:e7:dc:9c:55:f1:26:
46:99:71:7f:d8:e1:52:38:9a:3c:f4:ed:0c:a2:e4:
0c:b9:36:3d:91:73:51:0d:b6:20:3f:b7:bb:37:75:
85:55:48:ad:fb:5b:c4:e7:da:a4:8a:d1:c4:59:ee:
e8:7f:da:6e:de:9d:53:90:b5:ea:ac:c2:f5:10:06:
95:d4:99:b0:85:3e:ce:86:c3:2c:78:f8:17:7d:08:
67:9d:39:ca:77:38:0f:1d:54:95:90:ea:6f:59:8a:
cd:52:2c:c5:8c:a0:54:95:20:58:90:bd:56:bb:d2:
c3:85:0d:cf:b2:8a:34:6b:ea:6c:b9:d5:99:dc:27:
96:bc:c2:6b:ae:b4:53:ef:c0:a4:28:04:52:ab:de:
15:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:23:70:53:EB:21:EE:E4:77:7F:D2:7E:DB:92:9D:E9:A6:AF:4E:35
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/F1EA8F4657E911F1ACD7923C93833773.roa
sbgp-ipAddrBlock: critical
IPv4:
123.108.74.0/24
IPv6:
2407:2440:21::/48
2407:2440:26::/48
2407:2440:29::/48
Signature Algorithm: sha256WithRSAEncryption
81:d4:8b:c6:42:e9:53:7b:d4:46:73:f4:95:25:2e:4b:3d:a5:
09:1c:65:87:21:ab:a3:6b:3b:7b:fa:d5:61:91:ec:16:0e:f8:
5d:6e:82:28:97:f8:83:86:32:7f:48:f9:6e:a6:36:31:9d:bd:
35:92:3f:98:a8:c2:51:88:6e:23:d0:b4:61:9a:42:ac:9c:83:
ab:a3:1b:e2:f8:5f:c8:9e:f0:71:6f:46:f3:46:65:32:97:c0:
bc:cb:ce:5b:ff:e2:09:d1:f5:db:17:ab:c6:a2:98:67:0f:c7:
c2:93:b2:bd:93:9f:6c:11:f0:b2:0a:06:63:d3:83:53:cb:ff:
d9:b4:1b:2a:58:b8:ac:a2:38:7b:5b:f4:a7:35:e1:26:04:1e:
74:ed:56:af:4c:0b:fe:d9:fc:5f:75:5a:c1:b1:4d:21:f8:17:
94:0f:ff:5d:21:98:60:23:fa:85:1c:e3:f1:7c:8d:c1:27:97:
45:db:07:2a:c8:b2:6a:64:97:9a:33:61:b4:e8:30:cf:85:9b:
9d:5a:0a:68:44:2d:df:3a:ab:c5:d5:22:ca:f1:43:d1:ac:2e:
1c:21:5b:16:3f:8b:73:c3:9e:39:58:94:0c:3d:91:02:4e:df:
14:69:af:b8:f1:fc:43:a2:af:af:18:5b:15:9b:b4:b5:d0:c5:
31:79:81:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:12 2026 by rpki-client