
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/7B3B0868DBDD11F089B5B5C658641951.roa
File: 7B3B0868DBDD11F089B5B5C658641951.roa (raw, json)
Hash identifier: DCiubbftabSxu91ah+p7CZ1dSt4rSpuPeVIKNRHm1PY=
Subject key identifier: 9A:2A:C3:ED:F8:C0:B8:E8:F8:08:2C:3D:CE:5B:DD:F7:A2:4C:E8:76
Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Certificate serial: 08EB
Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/7B3B0868DBDD11F089B5B5C658641951.roa
Signing time: Mon 04 May 2026 20:25:49 +0000
ROA not before: Mon 04 May 2026 20:25:49 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 132335
IP address blocks: 2001:df3:8880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2283 (0x8eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Validity
Not Before: May 4 20:25:49 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f900cd-075d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:4d:22:dd:bd:7d:ea:d2:0b:23:4b:53:61:
aa:01:07:c7:c0:b0:8a:08:0a:9d:5f:2f:17:f9:31:
27:bc:ee:3c:9a:e3:1a:40:55:f8:e4:a5:a6:9d:8d:
c7:a0:5a:ae:03:a4:b0:d0:f2:dc:1c:98:e3:30:9a:
d6:0a:3b:4f:32:16:b4:33:ad:25:7e:4b:41:25:99:
ee:a0:45:a2:68:78:e3:c6:78:d5:8d:0b:24:ac:b2:
db:72:8d:99:99:d8:3f:64:b7:cc:08:83:80:55:6f:
b6:4e:5a:53:08:b9:b1:07:67:77:87:03:ce:0f:2e:
cf:fd:47:98:ec:96:87:cf:15:a7:8c:48:dc:8a:f3:
1b:fb:0a:25:0b:88:96:dc:16:11:28:ff:6d:04:e2:
8b:4c:20:03:7e:cb:88:e0:bb:08:fb:a1:9e:87:d5:
8a:ea:83:66:ec:f5:36:29:b6:c4:70:f0:57:0c:9b:
1f:9d:58:27:5b:3d:44:bf:25:58:d0:9a:84:1c:2c:
f2:8e:9e:2d:ba:12:07:74:08:a6:5b:35:a5:d5:22:
b4:e5:86:76:50:f7:ed:43:5a:e0:5c:df:8b:07:eb:
0c:83:a5:9a:cc:17:b7:90:6c:4e:88:cb:93:ea:7f:
7d:08:18:04:bb:2c:72:d9:75:34:cb:61:82:ef:72:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2A:C3:ED:F8:C0:B8:E8:F8:08:2C:3D:CE:5B:DD:F7:A2:4C:E8:76
X509v3 Authority Key Identifier:
keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/7B3B0868DBDD11F089B5B5C658641951.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:8880::/48
Signature Algorithm: sha256WithRSAEncryption
bb:85:b1:d2:f8:35:30:24:2b:f8:b3:99:24:8f:87:8e:4a:3d:
8c:e7:f6:35:dd:21:49:35:21:1b:5c:12:85:71:ac:d7:05:55:
fd:ee:5d:67:14:35:6a:44:06:58:cf:28:76:d7:91:e6:a5:af:
7e:9c:5f:1c:d4:58:6d:0a:b3:62:fc:5d:6d:90:20:dc:91:6d:
4b:13:3f:c6:fc:cf:8f:e5:38:56:a8:16:51:f9:8e:6c:d2:e5:
73:2d:d3:a6:8f:b7:08:63:c8:7f:53:72:ec:fc:91:6a:a3:f7:
32:85:62:2d:ea:74:0d:14:9c:2c:cc:d7:dd:a8:2f:71:d6:b3:
be:a8:5c:64:9c:f9:56:f3:28:c2:77:19:f2:b9:4c:0d:9d:a5:
75:ab:91:db:49:3b:1a:25:ab:75:08:f9:3a:5d:75:51:fd:bb:
de:fb:bf:6c:92:b7:ff:8d:10:5a:11:32:d3:86:44:90:75:ec:
50:3b:f1:e4:e8:13:15:31:50:7a:ac:93:c0:05:e1:a3:30:3b:
c2:dc:86:7a:3d:c0:cf:14:1f:61:25:b8:c5:88:77:a8:61:06:
b4:b2:a7:8c:8a:e4:72:61:7b:c7:02:90:5d:0c:78:fa:80:9c:
72:99:c2:e5:60:5f:ae:69:01:6e:9a:29:e4:74:31:72:57:d7:
d8:c0:c0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:19:19 2026 by rpki-client