
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/771BED3C29EA11F19F51207DA0833773.roa
File: 771BED3C29EA11F19F51207DA0833773.roa (raw, json)
Hash identifier: w/jJyAGgr3Tj7qFO+qb/DsPtYZW/iNhj8gsbe5eWoj0=
Subject key identifier: A9:ED:73:79:B6:08:BF:97:22:BB:B6:5C:7A:55:7B:D4:46:91:2D:43
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 34
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/771BED3C29EA11F19F51207DA0833773.roa
Signing time: Fri 27 Mar 2026 14:37:22 +0000
ROA not before: Fri 27 Mar 2026 14:37:22 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 31713
IP address blocks: 65.72.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 17:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Mar 27 14:37:22 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69c69622-5eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:19:a6:d1:50:61:a2:6f:c4:61:7b:95:fb:
e8:83:3e:1f:a7:98:10:ff:22:47:04:ea:99:42:44:
e0:69:01:99:04:0a:44:7f:41:43:ac:df:95:b5:d0:
17:fb:d6:68:3c:6e:87:17:ca:33:50:ca:cf:6c:a8:
3d:01:0b:68:1a:e9:5e:5f:31:02:03:e1:04:97:80:
df:52:be:88:c3:69:3e:b9:b1:da:44:1a:3c:6a:85:
52:93:47:2c:56:69:26:be:7d:51:08:58:82:20:b8:
98:f4:fd:a4:8d:b9:11:68:63:0e:76:9c:f0:97:e6:
a6:ab:2b:85:9a:2f:67:c6:c7:da:37:77:4a:f0:f1:
6a:c0:66:2a:67:c2:55:b3:62:55:19:90:ea:e5:4d:
b3:54:3e:67:db:fd:9f:1b:51:ab:19:bd:d4:30:de:
06:14:f9:c7:56:9f:a8:22:1d:99:cd:d8:7b:ff:95:
a2:ec:5e:c3:a0:49:9b:8e:a9:83:65:7d:c4:49:9f:
9b:1f:e0:95:3b:f7:6c:31:15:2e:6c:81:4b:e1:f5:
3f:54:c6:26:7e:1d:78:d4:fc:1b:5b:f3:3f:a6:9f:
51:d9:6d:04:a3:ca:bb:5a:85:de:b8:58:3b:54:fc:
3e:c7:cc:37:49:97:07:bf:31:1b:ef:1d:16:be:46:
90:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:ED:73:79:B6:08:BF:97:22:BB:B6:5C:7A:55:7B:D4:46:91:2D:43
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/771BED3C29EA11F19F51207DA0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
65.72.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:79:a6:c5:ad:68:e1:e2:1c:8b:f5:b1:b4:79:a7:3c:95:1b:
3a:c2:1f:52:93:d1:3b:7b:03:41:89:2f:9d:29:f5:25:99:80:
5c:ee:bc:e5:c0:eb:43:f2:39:95:9d:4e:c3:05:3f:c1:c3:2b:
bb:23:f9:e2:5b:4f:ec:2f:a8:39:bb:f9:f4:00:15:97:bf:36:
54:c3:62:20:1b:6c:b4:77:ac:55:f2:4f:e6:29:6d:6b:41:bc:
5c:58:80:ae:0e:99:54:7d:8f:6c:2a:5e:8c:d4:d8:8a:77:8e:
04:72:04:a9:2e:16:46:49:74:52:7b:c7:b0:5f:29:e4:7f:b5:
7a:d8:70:86:64:13:cf:2e:67:08:9a:4c:a8:45:d3:06:a8:97:
ee:13:9d:d8:54:42:85:93:07:55:ae:33:b4:be:09:b2:64:15:
a0:af:d6:52:b1:fa:bf:ee:0c:d9:d1:c9:42:b5:11:d5:6e:16:
79:c3:1c:16:fa:7f:c1:f3:d6:fd:e6:ee:38:5a:c7:38:5e:8f:
3a:05:81:1f:c4:6d:4d:76:8c:0f:13:94:ad:b5:c9:3c:78:73:
83:ff:66:9a:3e:51:f5:d9:93:6f:77:c8:04:6b:9d:a5:26:6d:
cd:cb:b6:b2:84:d1:63:1e:f9:ac:20:ec:7d:1c:77:07:d6:ca:
e3:65:f7:7b
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MDRBOTExMC8GA1UEBRMoM0Q3QjE1QkQ3N0Q5Qjk3NEUzNzM1OERBNzU0REZFQTky
OTFFNjgzQTAeFw0yNjAzMjcxNDM3MjJaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YzY5NjIyLTVlYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUuxmm0VBhom/EYXuV++iDPh+nmBD/IkcE6plCROBpAZkECkR/QUOs35W10Bf7
1mg8bocXyjNQys9sqD0BC2ga6V5fMQID4QSXgN9SvojDaT65sdpEGjxqhVKTRyxW
aSa+fVEIWIIguJj0/aSNuRFoYw52nPCX5qarK4WaL2fGx9o3d0rw8WrAZipnwlWz
YlUZkOrlTbNUPmfb/Z8bUasZvdQw3gYU+cdWn6giHZnN2Hv/laLsXsOgSZuOqYNl
fcRJn5sf4JU792wxFS5sgUvh9T9UxiZ+HXjU/Btb8z+mn1HZbQSjyrtahd64WDtU
/D7HzDdJlwe/MRvvHRa+RpDlAgMBAAGjggJfMIICWzAdBgNVHQ4EFgQUqe1zebYI
v5ciu7ZcelV71EaRLUMwHwYDVR0jBBgwFoAUPXsVvXfZuXTjc1jadU3+qSkeaDow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNEE5L0ZEMzcyRTRBMjk0
NTExRjFBN0FBM0VCRDg0RUU1MjhFL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFE
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUFhzVnZYZlp1WFRqYzFqYWRVMy1xU2tlYURvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDRBOS9GRDM3MkU0QTI5NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS83NzFCRUQzQzI5
RUExMUYxOUY1MTIwN0RBMDgzMzc3My5yb2EwHgYIKwYBBQUHAQcBAf8EDzANMAsE
AgABMAUDAwBBSDANBgkqhkiG9w0BAQsFAAOCAQEAs3mmxa1o4eIci/WxtHmnPJUb
OsIfUpPRO3sDQYkvnSn1JZmAXO685cDrQ/I5lZ1OwwU/wcMruyP54ltP7C+oObv5
9AAVl782VMNiIBtstHesVfJP5ilta0G8XFiArg6ZVH2PbCpejNTYineOBHIEqS4W
Rkl0UnvHsF8p5H+1ethwhmQTzy5nCJpMqEXTBqiX7hOd2FRChZMHVa4ztL4JsmQV
oK/WUrH6v+4M2dHJQrUR1W4WecMcFvp/wfPW/ebuOFrHOF6POgWBH8RtTXaMDxOU
rbXJPHhzg/9mmj5R9dmTb3fIBGudpSZtzcu2soTRYx75rCDsfRx3B9bK42X3ew==
-----END CERTIFICATE-----
Generated at Sat Mar 28 18:58:53 2026 by rpki-client