
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/71A9485224D311F1BAC6A199AA833773.roa
File: 71A9485224D311F1BAC6A199AA833773.roa (raw, json)
Hash identifier: +H9FDoYW8ScETXkwkhN5hLbQFxMvrhXYCD7VJdAaN/U=
Subject key identifier: 7D:BF:5F:86:4C:06:0B:11:D8:D6:AA:E5:19:2B:94:55:CC:9A:40:DA
Certificate issuer: /CN=A91F8949/serialNumber=7D3836CD42A7EFB35AB464A500E2625715D5CEA3
Certificate serial: 60
Authority key identifier: 7D:38:36:CD:42:A7:EF:B3:5A:B4:64:A5:00:E2:62:57:15:D5:CE:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/71A9485224D311F1BAC6A199AA833773.roa
Signing time: Wed 09 Sep 2026 08:58:41 +0000
ROA not before: Wed 09 Sep 2026 08:58:41 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 133139
IP address blocks: 45.126.148.0/22 maxlen: 24
110.34.56.0/21 maxlen: 24
123.108.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.crl
rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8949, serialNumber=7D3836CD42A7EFB35AB464A500E2625715D5CEA3
Validity
Not Before: Sep 9 08:58:41 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa11fc1-7e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:d5:82:95:54:18:4f:64:f4:61:d6:96:14:
d1:0b:06:72:93:cb:05:79:ed:ab:2f:aa:90:a8:29:
da:a0:ea:91:d9:23:10:be:b4:94:09:f1:1e:89:1c:
d0:2c:49:07:e9:55:b5:16:71:79:47:5e:27:06:61:
45:51:60:2d:a1:1a:0c:37:5e:0e:ef:6a:3a:31:b1:
c0:1c:51:d1:cf:d5:fe:38:e1:c7:ab:92:3e:89:62:
11:d7:45:9e:d3:c8:14:72:59:3f:f4:21:e1:cd:77:
6f:b5:41:6f:e9:83:b2:ff:20:aa:76:27:f4:4c:96:
87:c9:cd:8e:00:f5:87:0f:46:ce:57:93:b5:15:52:
52:9f:2c:6d:1c:76:9b:f4:0f:ad:44:a0:19:2e:7d:
cc:8b:f8:63:d8:c9:fb:11:8c:24:b2:d1:20:8d:6a:
1f:26:69:d4:99:47:76:36:b1:ca:68:2c:f2:9b:f3:
8a:8d:18:7b:c3:64:99:95:16:cf:a8:d0:50:64:fb:
d2:d5:35:9a:dc:f9:82:5c:95:6c:04:28:9f:0d:c9:
88:a0:9d:22:ed:ad:3e:d6:03:47:52:35:96:92:fc:
fd:c2:83:d7:5f:c0:c1:22:2d:de:14:20:6c:42:2d:
c9:2e:be:4a:c0:4b:d6:a5:07:4f:40:53:45:50:87:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BF:5F:86:4C:06:0B:11:D8:D6:AA:E5:19:2B:94:55:CC:9A:40:DA
X509v3 Authority Key Identifier:
keyid:7D:38:36:CD:42:A7:EF:B3:5A:B4:64:A5:00:E2:62:57:15:D5:CE:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/71A9485224D311F1BAC6A199AA833773.roa
sbgp-ipAddrBlock: critical
IPv4:
45.126.148.0/22
110.34.56.0/21
123.108.0.0/21
Signature Algorithm: sha256WithRSAEncryption
79:26:99:b6:54:f5:8f:94:b1:cd:7c:09:9d:f6:10:a3:52:60:
f8:0e:38:be:25:05:6d:cb:25:e6:77:c7:d1:c5:4e:ee:c3:e4:
44:eb:6a:03:a0:fd:f9:b0:e2:d8:e3:aa:bb:c0:a2:f8:9a:c4:
8c:e5:29:cc:6b:7f:84:27:f0:0b:f1:6a:e6:a2:e3:63:19:7b:
49:e4:17:19:42:f7:34:22:98:62:da:56:fa:ab:bc:52:34:bf:
f7:ce:b8:dc:92:2f:5f:d0:73:a7:2c:7c:11:e9:52:6d:33:7e:
46:7d:ce:ff:af:9c:7e:c3:51:e4:49:c2:e0:c8:ff:bc:e3:4d:
ef:17:e4:ae:55:48:e8:a1:93:fc:5e:dc:d7:68:3b:b6:cd:80:
41:07:bb:fd:42:27:d4:69:f2:33:6a:2f:8f:16:ca:39:f6:2c:
eb:42:f1:f9:50:f4:46:24:cb:bf:51:ff:1e:2b:df:42:c5:99:
88:05:ca:f5:fc:11:24:9c:38:ab:2c:7e:ce:86:bc:98:c8:ca:
b1:78:96:32:41:fa:fb:d8:46:aa:2d:29:26:a5:ec:b7:00:2b:
a2:dd:8a:30:ec:a9:07:cd:f8:17:08:dc:7f:6a:02:a2:c1:99:
15:c0:cf:73:fa:96:04:3b:7c:c1:6d:b3:09:48:10:80:7b:68:
2d:55:15:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:16:26 2026 by rpki-client