
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/77490C9A792F11EEBF849942C4F9AE02.roa
File: 77490C9A792F11EEBF849942C4F9AE02.roa (raw, json)
Hash identifier: MpcjQVs1Jc1cjgEQDQ1xjrNe8yr/lbGI3mI0RqgvaQ8=
Subject key identifier: 41:E0:BC:CA:66:0B:60:F9:C9:05:B6:3D:3E:1A:A8:51:F2:8A:29:63
Certificate issuer: /CN=A911F316/serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
Certificate serial: 0270
Authority key identifier: D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/77490C9A792F11EEBF849942C4F9AE02.roa
Signing time: Tue 03 Mar 2026 02:35:50 +0000
ROA not before: Tue 03 Mar 2026 02:35:50 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 132292
IP address blocks: 203.7.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl
rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F316, serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
Validity
Not Before: Mar 3 02:35:50 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a64905-59ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:31:fc:f9:4d:32:47:cb:1c:98:68:d7:2e:
66:8e:55:9d:2f:a6:10:cb:24:0b:cb:a4:d5:83:8a:
ba:08:b4:47:67:86:21:d2:ee:f8:7e:f7:0e:75:46:
19:5b:d2:63:4b:ac:ae:14:9c:34:47:37:fb:1d:93:
cb:b2:87:2e:2a:21:fb:e2:ea:ba:92:60:23:f7:4f:
6c:02:74:d3:87:be:55:5b:64:65:9b:8b:8e:d1:bf:
94:e1:18:04:bd:a0:1e:0e:fd:4d:1d:e5:37:ac:cf:
38:2e:03:66:34:ab:45:d2:bb:53:5a:56:0b:37:6b:
1b:77:bd:5b:0e:0c:33:c5:fe:32:df:50:1a:ef:7e:
7d:7b:78:fe:4e:ac:7f:fa:92:90:b6:4d:bd:d1:7a:
d0:90:58:2b:d7:cd:b7:77:49:db:5e:a7:88:f8:fe:
ee:36:8f:f4:6f:87:60:8a:99:82:e7:68:3c:9e:45:
ae:ee:20:8a:1d:14:45:64:00:a1:57:7e:94:89:9c:
56:62:f6:df:78:6d:31:31:1a:03:63:a4:a5:ba:bc:
99:a2:db:43:5d:7b:c0:0a:b8:23:24:56:2c:11:7f:
b8:2e:87:6b:37:88:90:93:c9:fa:fe:2d:02:6d:e8:
ab:58:cb:a9:d2:27:93:e4:22:a6:b7:16:15:af:32:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E0:BC:CA:66:0B:60:F9:C9:05:B6:3D:3E:1A:A8:51:F2:8A:29:63
X509v3 Authority Key Identifier:
keyid:D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/77490C9A792F11EEBF849942C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.7.140.0/22
Signature Algorithm: sha256WithRSAEncryption
48:b6:65:49:b8:71:09:eb:20:cb:5d:f7:f5:1a:8c:b9:ad:7d:
78:76:18:db:7d:42:77:4b:a9:89:bd:61:56:b6:00:36:50:ab:
5a:5f:6f:d1:6c:43:41:2b:97:52:2b:65:1b:fa:6c:05:3e:b6:
0c:a5:8c:38:29:74:90:3b:d7:b9:3c:b6:7b:51:ba:fa:5d:7e:
ff:f5:e2:b7:df:f9:a0:ad:de:c1:21:af:8e:d7:5c:d3:3d:2c:
6c:87:94:57:8f:11:74:07:d6:15:b5:f0:8c:c5:33:b4:0a:0f:
46:ea:2b:e5:08:b2:e2:62:6e:76:7b:b6:24:13:7d:c6:4c:71:
e7:2d:65:af:f4:b5:e9:4a:2a:3d:9e:0d:c0:2e:87:09:c2:27:
4f:cc:6f:49:e0:f3:bd:d6:c4:97:10:b2:30:07:ed:32:87:87:
cb:04:98:08:27:b7:f8:41:17:a4:22:fe:5d:4a:8e:e9:c2:3b:
b3:07:13:97:4c:55:72:0c:9e:15:17:ad:21:5f:9d:18:64:1e:
5d:36:71:12:f6:fa:1c:f6:53:78:0e:0f:4e:07:bf:c4:a5:34:
99:6e:0a:3e:b9:7c:c4:bb:18:c9:fc:12:52:06:e8:6b:79:31:
f3:92:91:a9:5c:43:da:c7:32:b7:bf:12:94:62:c4:72:93:18:
71:db:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:25:21 2026 by rpki-client