
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/77B9A22029EA11F19F51207DA0833773.roa
File: 77B9A22029EA11F19F51207DA0833773.roa (raw, json)
Hash identifier: 9jpl4GiJZA6/0LoSTIqmKoTnUrIpsak5Kk339CmquSQ=
Subject key identifier: 29:8C:3C:4D:02:D8:B2:19:C2:74:CE:B9:B8:DB:C4:4D:59:90:16:2C
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 35
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/77B9A22029EA11F19F51207DA0833773.roa
Signing time: Fri 27 Mar 2026 14:37:23 +0000
ROA not before: Fri 27 Mar 2026 14:37:23 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 3491
IP address blocks: 65.72.0.0/16 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 17:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Mar 27 14:37:23 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69c69623-52fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3f:a8:5e:ad:28:ce:26:af:c2:45:cd:07:77:
4d:ed:b8:fb:92:00:32:ff:0d:75:28:bf:45:6e:b9:
b4:8a:22:e6:9c:8d:11:3e:7c:b6:1f:f9:2a:b7:bd:
a0:dd:35:78:7c:66:87:6f:c7:0a:2c:af:eb:89:7c:
ef:66:12:57:de:e7:10:18:83:05:3b:ac:ab:34:5c:
ff:44:de:6d:14:1c:49:a1:f0:ed:09:a0:9e:0a:26:
a7:a0:90:33:b7:bc:e0:53:c7:20:b7:d0:2c:56:46:
12:64:31:e2:c9:a0:48:b6:c5:0f:3c:13:b7:ee:c3:
e7:4c:4a:35:d4:33:9b:d9:46:cd:8f:64:0d:c7:7d:
f5:b2:83:1d:0e:1e:0c:62:dd:3a:71:91:81:63:e9:
d2:90:87:84:fe:d7:4d:ef:e5:52:39:02:a4:7f:69:
f5:3e:46:ea:82:49:11:ec:bb:fc:41:8d:59:32:eb:
c6:b8:ec:98:f3:01:5d:7d:96:81:e5:73:4d:ec:0e:
02:ea:bf:5f:f7:fd:55:10:85:c6:e3:6a:25:ce:ea:
49:d1:85:1a:19:1d:64:5c:7f:97:91:49:b6:ea:90:
e7:b0:8d:0b:48:6f:01:36:51:a3:b1:f4:3c:34:89:
18:2f:e0:ff:eb:b6:0e:50:93:97:f8:65:99:2e:4b:
92:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8C:3C:4D:02:D8:B2:19:C2:74:CE:B9:B8:DB:C4:4D:59:90:16:2C
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/77B9A22029EA11F19F51207DA0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
65.72.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:0a:5c:de:e2:ea:db:9b:e7:f6:9b:e9:60:49:ce:7f:a1:a9:
2f:0e:a4:5a:cf:62:8d:c1:72:60:41:99:16:8e:86:42:3c:45:
70:df:8b:99:8a:3b:e0:84:51:f0:a6:c3:e8:14:9c:c1:3a:f5:
40:23:e9:37:84:23:d8:f4:f8:21:5b:d9:6a:f9:b0:fa:09:3d:
10:47:18:89:aa:b6:13:f1:3b:83:fe:5f:3e:06:7c:96:7b:12:
03:27:6c:cd:ea:7b:57:ad:c9:83:f2:62:f7:17:e4:8c:8d:e2:
54:0e:ed:6f:80:79:ca:c4:29:79:cb:f0:21:0b:ce:08:4f:de:
b0:48:ea:f4:27:88:d7:8e:35:2b:9c:a2:49:f6:03:30:c3:63:
cc:3a:ad:9d:8c:06:89:8f:35:e5:36:f9:5d:de:1a:be:e7:f2:
2e:95:e7:b4:4a:48:ea:a7:22:a2:b2:2b:66:a3:bb:80:fa:d7:
8e:0d:f2:d2:b1:ec:36:0e:1a:f3:c8:f8:6e:00:25:95:d6:76:
a2:ec:39:8b:6f:c2:d3:fb:16:f8:07:49:f6:a9:f3:6c:e1:0e:
4f:55:02:10:5e:9f:af:e0:70:e1:b6:1d:42:29:a1:be:c6:2c:
8f:7f:ae:af:37:84:80:bf:6f:ac:70:4b:2c:8f:09:23:43:37:
3d:56:09:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Mar 28 18:54:18 2026 by rpki-client