
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/7A339E4448F711F1A886AD5191833773.roa
File: 7A339E4448F711F1A886AD5191833773.roa (raw, json)
Hash identifier: AkLBKnBGnGaPJ8LjzqW9BNXxip/jAPg4ZWxCffjH75k=
Subject key identifier: 78:20:F9:D4:A4:C6:C5:3F:A0:A0:9B:53:62:1F:02:85:8F:57:04:AC
Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Certificate serial: 7E
Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/7A339E4448F711F1A886AD5191833773.roa
Signing time: Wed 06 May 2026 03:06:23 +0000
ROA not before: Wed 06 May 2026 03:06:23 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 133139
IP address blocks: 165.84.240.0/24 maxlen: 24
165.84.241.0/24 maxlen: 24
165.84.242.0/24 maxlen: 24
165.84.244.0/24 maxlen: 24
165.84.249.0/24 maxlen: 24
165.84.250.0/23 maxlen: 24
165.84.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Validity
Not Before: May 6 03:06:23 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69fab02f-2e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:58:f7:33:f5:ef:49:0a:0a:25:24:68:d4:
e7:01:e2:9e:dd:d2:89:2a:c0:36:91:68:65:9c:12:
ae:ac:93:34:68:7a:23:8e:87:d1:de:22:fc:a5:a4:
7e:f3:03:9f:65:35:4a:e5:2a:1c:02:47:2b:aa:1f:
64:76:5b:d2:67:8f:11:25:22:a0:86:78:8a:a6:eb:
c2:e8:58:e9:46:98:d0:9a:29:41:08:2e:a6:6d:25:
fc:09:64:b0:22:14:66:ab:3b:62:84:9c:e2:bf:f6:
43:9c:77:e9:83:52:12:f7:1c:84:85:18:25:11:79:
4c:95:a4:d5:11:57:6e:c9:6d:9f:5a:8f:0a:8d:e9:
e8:ab:52:e9:2c:b5:71:77:d7:e9:2c:36:d1:c4:16:
a9:0b:83:88:9d:0f:de:a3:27:79:fe:28:22:fa:4f:
d5:43:d5:fa:a1:92:57:e7:64:d2:75:91:07:39:51:
78:fd:1b:a9:26:5f:86:83:f3:89:34:92:d5:99:02:
cf:70:32:38:87:ea:d1:d2:0b:3f:f3:3d:eb:87:5f:
a3:e9:57:f1:22:6c:d7:72:1f:94:c1:60:c6:7f:a1:
3b:af:f4:03:b6:22:40:cb:24:40:f3:85:72:e8:ff:
58:aa:5b:14:9a:99:47:0e:d1:12:98:70:89:db:99:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:20:F9:D4:A4:C6:C5:3F:A0:A0:9B:53:62:1F:02:85:8F:57:04:AC
X509v3 Authority Key Identifier:
keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/7A339E4448F711F1A886AD5191833773.roa
sbgp-ipAddrBlock: critical
IPv4:
165.84.240.0-165.84.242.255
165.84.244.0/24
165.84.249.0-165.84.251.255
165.84.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5b:7c:70:43:4b:b8:db:61:52:ca:37:9f:46:56:52:47:89:
8c:80:0c:5b:80:63:32:02:e9:ed:4f:06:22:9d:98:9b:97:43:
e7:2f:39:78:02:65:3b:3c:b7:ad:2c:5b:75:f5:91:3b:b1:1c:
92:8a:f8:2e:9b:f6:1c:ea:94:c4:df:a6:34:b3:cb:de:56:67:
c0:6e:7b:52:af:c1:9b:2e:2f:be:fe:79:c6:2a:88:9a:9c:c0:
51:75:dc:ed:aa:f7:21:e2:bc:fa:45:56:37:d1:57:44:dd:99:
d0:4c:31:99:f3:8d:d1:82:35:d6:b3:d4:04:ef:9c:6c:ef:d6:
27:2e:9e:04:b4:c1:7c:13:f8:c0:ea:52:ae:11:9a:1a:98:19:
17:47:0d:16:e9:95:50:f3:b3:97:06:2d:ea:e3:ad:a7:d5:fa:
21:5f:35:ae:47:10:41:98:4d:cb:69:9c:cd:d2:a7:8b:a6:c0:
9d:76:a4:7b:d2:1b:b3:5c:fa:8b:3b:10:19:0d:dc:68:4c:75:
07:41:2b:d3:f1:80:7f:75:e0:80:0a:85:0b:2a:4f:72:93:79:
27:7e:a0:1c:04:88:b9:ba:c2:09:34:a6:1e:54:0f:a0:0f:a8:
50:ef:d6:08:51:25:3b:c6:13:6b:ff:65:0d:f9:8f:5a:82:c3:
77:3f:cd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:48 2026 by rpki-client