
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/7843AE0229EA11F19F51207DA0833773.roa
File: 7843AE0229EA11F19F51207DA0833773.roa (raw, json)
Hash identifier: s0N7ocsVPT+wkbxRYsrIVJaKpSpOfD4ZijZOHIsz34o=
Subject key identifier: 6C:26:B0:45:CC:06:43:71:C3:F1:98:71:4F:D6:00:4F:BD:5B:65:35
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 36
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/7843AE0229EA11F19F51207DA0833773.roa
Signing time: Fri 27 Mar 2026 14:37:24 +0000
ROA not before: Fri 27 Mar 2026 14:37:24 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 6279
IP address blocks: 65.72.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 17:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Mar 27 14:37:24 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69c69624-9596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:d9:b7:91:07:4b:86:80:b2:fa:e5:6f:92:
e7:44:64:f2:2e:dd:15:d4:f9:c6:ca:45:93:da:76:
ce:58:84:08:5d:81:e0:dd:b4:45:f6:92:43:e3:83:
81:32:9b:30:bd:bf:e1:85:ab:d8:9e:54:f1:80:6c:
f5:d7:c8:e2:e6:c7:fc:09:43:08:0e:c1:00:31:cc:
1f:1c:8d:66:7b:2f:9f:11:0c:10:45:a2:a2:a5:a3:
90:d8:46:d2:f0:66:cc:fc:b8:e8:4c:29:f8:1c:7a:
9d:a9:4a:a7:c5:a4:09:d2:38:a8:77:c3:45:8f:5d:
d7:a2:0c:70:fc:ec:a3:1f:27:d6:78:94:51:de:d9:
84:4e:26:06:1a:bb:26:fa:68:0b:35:00:d6:87:1f:
24:05:44:f3:2d:b0:55:65:71:6b:5b:2e:7c:ca:e4:
8d:cf:a9:bd:23:63:6a:59:cb:e5:ea:fb:c8:98:9e:
be:fe:58:f7:99:e9:84:96:ce:30:e8:2a:7d:8e:67:
4c:e5:34:0c:b5:99:40:7a:ac:d7:8e:1f:0b:7e:00:
f8:40:ee:34:ad:fe:ee:61:ab:55:28:7e:18:da:c3:
b8:57:e1:5b:42:62:74:ce:f1:4a:3d:f9:0f:13:9d:
e4:87:28:5e:f5:eb:31:d2:46:4a:93:7b:62:f4:38:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:26:B0:45:CC:06:43:71:C3:F1:98:71:4F:D6:00:4F:BD:5B:65:35
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/7843AE0229EA11F19F51207DA0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
65.72.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:fa:fc:c3:45:97:6f:ce:9a:dc:a0:04:2c:5b:ef:33:35:dd:
53:02:cf:81:28:b7:18:03:6c:80:e3:c5:6c:62:bd:24:64:e5:
96:8f:fb:3c:1e:9a:e1:55:3e:58:fd:11:ae:81:15:46:3c:d1:
e9:10:12:33:f0:9b:e0:c4:8d:41:20:b5:20:86:bc:c3:14:cf:
ce:e3:0f:01:3c:2d:3e:73:7d:55:78:e1:fc:8d:83:03:35:91:
f6:46:fa:ac:85:2d:80:38:2e:29:44:80:24:ca:3a:94:3a:94:
a6:0f:79:60:e9:eb:92:14:4a:47:37:84:3d:bc:f0:9a:94:1c:
3f:7a:b7:e6:65:5d:28:7c:2f:99:15:59:1a:9d:2c:c3:be:58:
d2:29:25:34:ef:40:73:ad:3b:52:4b:12:b7:e2:e2:46:80:af:
c0:8f:0f:64:79:b0:2d:a8:cc:9d:63:be:5d:d1:cf:91:67:65:
35:88:10:6f:71:37:a2:22:bc:f9:b7:87:0e:c2:7e:d8:f4:68:
5c:42:5d:f9:d3:25:ca:47:17:27:b8:ae:6c:c4:b3:4f:86:9f:
64:83:ad:c1:0e:67:13:ac:b0:8e:bf:cf:52:01:11:e1:4e:86:
65:79:a5:9a:84:e0:4c:91:ce:4b:10:40:13:3b:b2:7e:96:42:
ee:77:ad:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Mar 28 18:54:18 2026 by rpki-client