
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/769A6D0C29EA11F19F51207DA0833773.roa
File: 769A6D0C29EA11F19F51207DA0833773.roa (raw, json)
Hash identifier: IiKFwXdYswDt2vzHwotjHu8ALe+p+uMWjil/k9IBQIg=
Subject key identifier: 01:3A:36:0E:54:12:1B:20:A1:4B:35:51:5D:D1:6E:22:68:D2:C2:7D
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 33
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/769A6D0C29EA11F19F51207DA0833773.roa
Signing time: Fri 27 Mar 2026 14:37:21 +0000
ROA not before: Fri 27 Mar 2026 14:37:21 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 198148
IP address blocks: 65.72.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 17:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Mar 27 14:37:21 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69c69621-a72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:df:44:0a:6f:1a:61:e6:c4:e2:e7:27:f9:
eb:4e:de:42:38:8f:df:22:36:84:a4:6f:7a:0c:a3:
85:00:77:01:11:fa:9a:d5:ed:82:d4:03:ab:65:1b:
0a:62:e8:79:2f:57:0d:96:6d:54:3e:43:6f:e6:d0:
cc:11:1e:e3:b1:a7:16:6f:5e:97:bf:f1:66:c7:86:
af:76:4e:e3:c1:6a:aa:ff:70:68:16:7b:90:19:fb:
f3:b4:9f:d3:50:68:8f:b4:9d:b0:c6:2d:c2:be:6d:
c4:0c:18:be:64:f9:84:36:87:60:aa:f7:a5:33:ee:
f5:8f:48:ad:fa:43:cc:4a:02:d4:bc:2d:da:67:0d:
9a:f1:d4:df:d6:61:d5:c7:52:91:6b:6b:c2:63:68:
a0:6d:c6:9a:5a:73:f9:ab:4b:40:41:47:63:e2:7c:
fb:c4:48:a8:aa:71:fc:16:90:2d:96:64:82:3f:a6:
3f:d9:79:6e:84:ff:6b:1c:14:84:35:c6:b4:a7:56:
2f:d8:8b:5b:75:23:d1:51:a1:7d:f0:a2:f8:71:b9:
d3:2b:e2:2f:bc:54:95:19:88:c2:1d:8f:84:50:46:
03:d7:f1:ad:f0:cd:3d:c5:f0:d1:86:d6:d3:b0:bd:
6c:5f:07:1f:6e:96:e4:83:ef:fe:c7:df:a2:bc:98:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3A:36:0E:54:12:1B:20:A1:4B:35:51:5D:D1:6E:22:68:D2:C2:7D
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/769A6D0C29EA11F19F51207DA0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
65.72.64.0/20
Signature Algorithm: sha256WithRSAEncryption
31:67:07:b2:02:d1:79:48:bc:09:37:32:ce:57:81:8b:95:63:
98:3d:3b:46:16:11:92:1f:da:1e:e8:84:45:14:1a:24:8c:23:
51:91:0e:18:95:e2:ad:05:22:6a:7d:0f:7e:08:71:1d:d2:c0:
a4:58:4d:e6:db:9b:42:76:c7:89:e0:4c:3d:e4:db:6d:8e:bd:
82:4a:61:52:8f:f4:41:6f:1b:d2:5a:07:ef:98:87:58:41:d0:
a4:1d:86:ba:62:53:d5:f1:c6:8e:99:2e:a5:6f:42:c0:3b:8f:
dd:71:1b:53:cd:3a:8b:ba:cb:b0:7a:66:c4:d7:f7:f9:39:d7:
17:39:c5:29:b7:9c:33:33:91:91:22:ed:14:f3:b7:ea:53:5a:
d9:7d:dd:75:56:95:fc:39:63:5a:ff:00:f7:ce:43:23:a9:fc:
a3:41:e4:33:1e:0a:52:05:2a:d3:2c:38:10:65:4e:b9:96:2a:
93:31:56:92:f8:9f:5f:33:3e:00:af:9e:53:ba:7e:3d:c3:84:
fd:3c:1b:69:15:65:3e:0b:a7:8b:fc:69:e8:5a:7f:0b:c8:59:
6d:89:cd:9b:3b:eb:04:0c:84:a1:62:07:41:69:c4:1f:a8:c8:
a8:fc:8d:47:11:09:38:6b:60:04:d3:9a:d3:38:5f:6d:d4:f4:
04:f6:86:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 28 18:53:57 2026 by rpki-client