
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/7B3B0868DBDD11F089B5B5C658641951.roa
File: 7B3B0868DBDD11F089B5B5C658641951.roa (raw, json)
Hash identifier: ewYDV2AeFSraFT8cqNKwnfuovfJu1fvrIxXBNUNfFI4=
Subject key identifier: BE:B1:52:34:C6:97:43:66:F5:E6:FC:93:3F:45:11:1D:5C:06:7A:16
Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Certificate serial: 08BE
Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/7B3B0868DBDD11F089B5B5C658641951.roa
Signing time: Sun 01 Mar 2026 14:50:13 +0000
ROA not before: Thu 18 Dec 2025 06:47:55 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 132335
IP address blocks: 2001:df3:8880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2238 (0x8be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Validity
Not Before: Dec 18 06:47:55 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a45225-3bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:b1:27:0a:02:6f:41:eb:a7:e0:f2:62:d1:
a5:09:c4:4b:5c:74:ae:89:28:3c:e6:83:2e:88:c0:
24:e1:65:eb:33:11:b7:84:fd:f7:d9:f3:a2:3a:da:
17:45:c5:3b:d5:f0:5f:70:3a:6f:4d:3e:e8:d8:4c:
e1:1f:73:4e:3f:b6:ce:de:4e:73:d7:bd:71:1d:94:
fa:4d:eb:42:bb:3a:bd:4e:4a:76:c3:9a:21:c3:20:
bc:db:50:1f:df:92:09:06:31:1e:38:96:d6:0c:93:
c3:f6:81:9d:28:0e:08:3c:de:f3:a9:a3:37:a3:61:
19:43:45:1a:e0:37:d3:f5:62:82:34:c6:7b:a6:01:
f2:2b:41:d1:0c:99:1a:12:68:fa:3d:9e:1b:58:da:
a0:32:bb:60:73:a3:99:b0:51:e8:22:4f:d0:90:2d:
d2:6d:72:93:31:d1:75:ea:c1:b6:e9:f8:3e:47:35:
5a:7b:ae:c0:5d:23:1b:02:d3:1c:13:5e:f4:40:7c:
a1:41:2f:f3:51:e7:46:bd:50:72:f4:1b:ed:00:87:
4d:87:45:77:f1:ee:ab:8f:39:a0:41:18:6e:db:9b:
bf:25:5d:de:62:32:77:d6:0a:9e:9e:12:42:9d:c0:
3d:fb:eb:85:44:85:b1:2f:b6:d4:5d:f3:4e:ad:fe:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B1:52:34:C6:97:43:66:F5:E6:FC:93:3F:45:11:1D:5C:06:7A:16
X509v3 Authority Key Identifier:
keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/7B3B0868DBDD11F089B5B5C658641951.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:8880::/48
Signature Algorithm: sha256WithRSAEncryption
6c:3a:73:73:78:8d:17:92:a2:51:7e:a5:df:8f:3d:0b:d4:7e:
a2:29:48:22:b8:a0:31:31:3e:c6:c4:7b:b4:de:74:13:9f:26:
1d:65:d8:d8:c1:f3:c1:3d:90:c7:94:83:b5:ef:c2:d8:2f:e1:
2d:74:4a:5e:85:a8:be:af:db:0f:a6:38:8c:a6:32:2e:d7:71:
04:41:72:29:a2:c9:e2:3a:d8:5a:50:2e:af:54:dd:bc:ff:cf:
76:a0:fc:84:6b:70:77:53:13:ae:61:d3:b9:82:c4:7e:05:5a:
c2:96:a5:85:9d:5d:bb:52:e8:07:2c:9e:8f:a5:a8:e5:5c:2d:
5d:79:55:f4:ec:be:64:76:82:1f:7b:03:8e:43:d2:bc:a8:79:
e8:4c:65:54:f8:81:3e:dd:7f:10:a7:b5:3a:20:ab:0b:e2:82:
83:56:fa:bd:7d:55:6d:33:44:d3:9d:c3:df:48:8c:43:09:dd:
f1:e2:a4:b6:0b:9d:7d:4d:3f:9f:29:68:a4:6e:4d:cb:5b:ea:
5d:37:d0:42:2b:2e:9d:e6:9d:34:63:5c:2b:54:e1:4c:f5:12:
9d:c2:cf:e3:c6:ee:97:cc:5b:7e:8d:48:aa:74:a5:79:ef:71:
20:34:ea:ed:ec:f1:64:b5:c2:8e:b5:a1:8d:7f:1d:d5:00:9d:
2e:65:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:59 2026 by rpki-client