
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/7BD12E3A480811EE8C512B0DC4F9AE02.roa
File: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (raw, json)
Hash identifier: HBSapd8EnRXWCh7KQah04ZzDJueHHz91PfvdNwADOIQ=
Subject key identifier: 98:2B:3B:B2:6C:F6:89:68:20:73:28:1D:22:36:E3:06:D7:A4:FB:7E
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 109E
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/7BD12E3A480811EE8C512B0DC4F9AE02.roa
Signing time: Mon 20 Apr 2026 18:21:51 +0000
ROA not before: Mon 20 Apr 2026 18:21:51 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 4237
IP address blocks: 203.12.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4254 (0x109e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Validity
Not Before: Apr 20 18:21:51 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69e66ebf-b2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:b7:1d:62:2c:de:c2:c3:a7:2e:a9:34:54:
42:cb:ef:43:7e:95:f9:c4:c5:b7:e8:1d:bf:fc:60:
a8:b3:7a:ba:fa:1e:df:b6:2d:4f:10:7f:b4:84:d3:
32:ec:a1:e6:a0:2a:59:86:9f:60:e1:71:5e:58:6d:
8b:cf:31:e6:ca:fc:ba:c5:8d:76:ee:e9:bd:8b:58:
44:cd:aa:f3:99:2a:77:91:2e:59:31:36:86:c3:4f:
f9:c3:b1:da:8a:c5:81:82:df:fe:73:ea:66:c9:5b:
1e:6c:dd:c9:b2:f4:37:ab:8d:dd:f8:47:8e:f4:c7:
18:13:a0:17:65:95:5f:95:88:70:55:10:fd:6a:6f:
76:b7:4e:d2:ac:f4:a9:ad:ed:9f:a8:23:09:58:9c:
9f:da:13:79:04:b1:75:f8:22:fb:81:4c:f1:b4:39:
fa:e1:ed:05:15:84:40:8d:4f:19:b6:95:b9:60:c6:
d0:cf:2b:16:92:e1:33:c2:c5:0c:64:35:ee:d8:dc:
87:af:d7:e8:49:60:90:18:d3:47:1b:7c:e1:f4:b9:
3a:08:ca:59:46:12:e2:94:6e:d9:06:98:32:03:b5:
e6:0b:3e:cf:46:32:e3:4f:4c:31:cb:8a:4a:14:76:
5a:8d:f4:84:c4:3b:74:c6:02:b8:1e:66:7f:32:b7:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2B:3B:B2:6C:F6:89:68:20:73:28:1D:22:36:E3:06:D7:A4:FB:7E
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/7BD12E3A480811EE8C512B0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.12.77.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:5d:7a:0b:a1:60:37:41:82:de:0d:e3:c3:fc:e7:7e:40:95:
77:d7:e8:7c:a4:87:0f:c6:6b:32:6e:9a:86:19:5a:7e:ff:af:
b0:71:10:06:52:f3:8e:04:5f:92:f9:74:31:2c:fc:04:d7:06:
93:09:85:ee:5a:31:da:db:57:cb:40:d9:26:64:6e:f8:6c:32:
41:c1:f9:c5:dc:3f:88:85:5e:45:e4:5f:24:01:16:7b:29:a1:
ef:a4:9c:f3:89:76:dc:f3:90:2f:a9:ee:b5:67:aa:b3:a5:47:
49:14:89:d1:0c:a4:02:e8:1e:b5:31:8d:10:ae:a0:30:b5:95:
f0:13:e8:30:ff:dc:fc:d9:4b:1f:81:b1:25:9e:ef:dc:1f:d7:
eb:de:5d:0f:9a:f7:b7:ab:15:d4:bd:f6:b3:a3:bb:99:53:fc:
5d:f5:ce:1a:e6:bf:d1:4e:97:a1:1a:cf:7b:c1:ca:6c:f3:e0:
3f:a5:13:e1:27:ef:07:ff:b8:01:55:74:46:5d:2c:4f:72:58:
b8:fd:06:27:eb:0d:eb:c0:bf:12:70:51:b5:98:db:b5:17:cb:
b8:c7:d4:d9:74:6f:37:b6:2e:79:21:22:cc:45:03:8c:33:59:
1c:d1:b7:bb:14:a1:9f:c9:bd:92:17:fa:97:6b:c2:eb:96:2a:
5b:33:f9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:45:59 2026 by rpki-client