
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/B7AC544A86F111F19E006003A7EE528E.roa
File: B7AC544A86F111F19E006003A7EE528E.roa (raw, json)
Hash identifier: CD98/zBc1iRMlYgaHXvEmJhl0TajGVGfTmWFNs6GIac=
Subject key identifier: 13:BB:D0:01:54:C1:1E:E4:18:E0:47:60:3B:C6:62:97:9B:F8:84:F4
Certificate issuer: /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial: 09C2
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/B7AC544A86F111F19E006003A7EE528E.roa
Signing time: Thu 23 Jul 2026 23:53:35 +0000
ROA not before: Thu 23 Jul 2026 23:53:35 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 55707
IP address blocks: 101.2.168.0/22 maxlen: 24
103.7.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 01:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2498 (0x9c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Validity
Not Before: Jul 23 23:53:35 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a62a97f-6197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:3e:7a:e6:d6:d2:12:f7:dd:50:b9:fd:fa:
bc:d3:59:0a:78:e4:bc:37:1d:48:ad:8f:af:4c:50:
93:3f:42:fd:e8:15:e6:4c:9a:0a:9f:81:f7:f6:c2:
7e:0e:b1:4f:27:bb:b9:2f:64:3f:7d:21:cd:da:45:
e5:7a:04:57:47:c0:b2:6e:a5:40:94:da:77:2f:ef:
c5:15:29:1a:0f:20:16:51:35:7d:c2:90:a9:04:5b:
78:c6:ac:11:9d:96:2e:ea:d8:6b:bf:23:e6:96:2c:
1c:1d:bd:86:ae:c6:0a:b2:71:81:a7:09:c8:ad:40:
3d:cd:3f:76:e8:9c:01:55:b9:0b:4b:2c:25:af:b9:
ee:a0:55:71:a9:01:5e:92:1f:58:31:1a:70:8a:06:
8a:18:e6:56:99:f1:02:09:2c:5f:48:de:54:02:d7:
ce:75:23:2d:f3:52:d3:37:45:68:c6:3d:70:c7:ee:
d1:55:28:db:20:36:fe:fb:73:b2:ba:1f:a7:28:f4:
49:d3:69:81:05:03:0e:d1:85:f0:4c:9d:d3:61:1a:
1c:04:c2:26:ad:25:f4:02:05:2f:33:88:72:de:12:
f0:a6:22:97:7c:6c:a5:ca:f5:0d:19:f9:e6:ef:c5:
df:67:be:d4:db:da:be:2c:a1:6f:ff:e1:fe:88:73:
f1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BB:D0:01:54:C1:1E:E4:18:E0:47:60:3B:C6:62:97:9B:F8:84:F4
X509v3 Authority Key Identifier:
keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/B7AC544A86F111F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
101.2.168.0/22
103.7.72.0/22
Signature Algorithm: sha256WithRSAEncryption
66:77:3c:ac:11:b2:56:38:1f:29:a6:ce:f7:cb:8b:9c:c4:6a:
9d:f9:19:20:1a:7a:56:91:06:80:e8:81:5e:f5:36:ac:1d:ef:
c1:af:fd:ae:0c:84:ba:4e:17:f3:6c:3c:eb:74:0d:e1:d9:ed:
96:c6:ec:a2:33:08:87:bf:49:6a:b0:49:8b:37:8b:cd:0a:31:
8a:16:32:43:f8:55:70:05:2c:4f:0c:78:3c:a8:60:5f:83:17:
31:3c:0a:47:7a:18:58:94:fb:b3:ba:78:05:b5:e9:40:ae:91:
5a:b7:1a:43:84:e9:34:e8:5d:e1:b2:d7:93:26:45:52:e3:8e:
1c:2c:a5:5c:65:f6:33:6e:af:85:22:ac:7d:cd:3e:2f:d0:52:
04:a8:95:fd:23:c5:bc:6b:82:21:74:0b:07:bd:5e:30:bf:62:
aa:d2:7c:83:05:ac:7f:54:0e:ed:d1:a4:43:77:2c:f1:09:1a:
c7:67:76:43:af:b1:bd:78:16:a9:b6:b2:75:85:c9:d1:99:df:
98:e6:91:0d:6d:31:36:8f:1e:09:dc:fe:a1:8c:4e:ef:ac:4b:
aa:b9:43:3e:f3:a8:96:d7:91:f3:21:d2:31:c7:92:55:8a:f0:
72:70:d4:b6:9d:72:89:3a:e1:13:99:23:79:3e:86:5a:44:4a:
5b:7a:0b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:11 2026 by rpki-client