
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/7D2E766CE5AF11EE9A0A642FC4F9AE02.roa
File: 7D2E766CE5AF11EE9A0A642FC4F9AE02.roa (raw, json)
Hash identifier: kbTV9f4IWgZK9S4apMSRBWK1zjlS8Xrya9owJXlI6Ns=
Subject key identifier: 53:F7:81:3E:FE:D1:E5:7E:53:75:6A:C4:A2:A0:BF:B3:CB:85:18:EA
Certificate issuer: /CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F
Certificate serial: 017A
Authority key identifier: 73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/7D2E766CE5AF11EE9A0A642FC4F9AE02.roa
Signing time: Thu 05 Mar 2026 04:38:45 +0000
ROA not before: Thu 05 Mar 2026 04:38:45 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 152594
IP address blocks: 2001:df3:8240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl
rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65AC, serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F
Validity
Not Before: Mar 5 04:38:45 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a908d5-4b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:c6:42:f4:9a:49:4e:44:8c:30:bb:c9:b2:
4d:7b:5c:0a:29:f1:35:db:fa:d1:8d:f3:da:08:26:
92:4b:e8:85:2b:ef:fa:84:f4:f5:45:5b:c9:30:0b:
11:b0:e6:01:3a:a9:84:fc:3f:58:86:31:1b:12:a0:
f2:83:d7:95:d8:ed:e2:d7:d6:bd:9c:3e:3e:4f:f1:
64:39:a2:0b:0c:ec:b3:0e:32:46:f7:77:19:88:ec:
60:a5:71:61:79:61:91:9b:9d:79:93:85:96:cc:bc:
87:15:b5:3c:09:fe:7b:19:4d:00:43:fd:57:12:55:
e9:d1:66:0d:df:f0:b5:88:67:48:7e:55:60:62:27:
a5:ab:98:d0:76:da:ac:ab:8a:80:4b:31:ac:59:26:
5c:af:e8:3c:2d:af:f7:ce:72:2f:57:df:2a:50:8a:
83:69:d8:0e:31:0a:83:df:01:96:70:80:b1:df:13:
33:c0:27:5f:bc:78:26:79:88:e5:4b:50:eb:75:d1:
31:76:7d:ae:3f:f4:f9:33:1a:2a:93:78:83:6a:42:
dd:95:55:d7:67:85:b4:00:f6:16:d9:87:14:07:18:
42:22:c3:37:ac:17:9e:fc:00:58:37:57:70:74:7d:
c7:3c:6d:78:bc:2c:39:9c:20:b0:5d:7e:cd:97:ad:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F7:81:3E:FE:D1:E5:7E:53:75:6A:C4:A2:A0:BF:B3:CB:85:18:EA
X509v3 Authority Key Identifier:
keyid:73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/7D2E766CE5AF11EE9A0A642FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:8240::/48
Signature Algorithm: sha256WithRSAEncryption
2c:32:b0:dc:a1:fc:4e:3e:0a:d5:2b:dc:71:8f:40:41:3d:31:
14:95:c7:47:6a:20:10:bf:8f:f1:78:72:e8:ce:05:70:ab:74:
5b:03:5c:68:00:be:17:b0:b3:58:92:60:bf:75:02:04:5f:14:
41:d3:24:49:f2:ef:60:92:f5:3c:da:f5:aa:8a:04:92:bf:21:
d4:fa:e4:bf:06:fe:e3:25:0f:1e:f5:7e:af:08:f5:e9:1b:3b:
29:b4:33:24:42:5b:b4:b0:08:e6:19:89:b7:5d:79:bb:30:10:
5a:e4:37:6a:3f:77:2b:51:27:b5:6a:ed:1e:f1:64:c2:93:ba:
a4:c2:d8:37:36:6c:0a:d0:3d:ba:e0:88:d8:a2:b6:b5:14:51:
6f:1f:4f:6a:d6:80:65:13:33:84:0a:cd:5c:04:26:41:3e:17:
84:67:6b:a1:80:51:1d:26:f9:bf:a8:ba:d6:6e:3b:ee:27:b1:
fc:8b:61:9a:69:8c:bb:5a:37:c1:9c:0e:28:8c:41:6a:c5:5c:
fc:ec:10:fa:cc:9d:7a:11:a1:b4:c0:5c:18:74:7d:8b:f7:af:
01:88:2c:ed:94:d1:59:33:63:a1:cb:fe:82:25:9f:bd:05:5d:
b3:04:6e:61:04:e2:8d:e1:9f:aa:46:4a:02:45:b2:a1:65:85:
fb:fb:70:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:09:57 2026 by rpki-client