
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/8ED301D0782011F0BDB6E683C4F9AE02.roa
File: 8ED301D0782011F0BDB6E683C4F9AE02.roa (raw, json)
Hash identifier: WdYTpOxwaQ+j+4KBzA/L+jmy1fW724k61VLOBUYqe/g=
Subject key identifier: 60:1E:7B:93:18:6B:9F:CC:EF:4B:4B:86:B7:83:9F:17:54:6F:52:00
Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
Certificate serial: 0273
Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/8ED301D0782011F0BDB6E683C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:49:00 +0000
ROA not before: Wed 13 Aug 2025 08:44:55 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 681
IP address blocks: 192.73.21.0/24 maxlen: 24
192.107.171.0/24 maxlen: 24
192.107.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl
rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 627 (0x273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
Validity
Not Before: Aug 13 08:44:55 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a427ac-95f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:14:ad:d6:20:4b:18:e7:c5:79:48:2d:85:
f5:72:98:82:74:d4:5c:49:f7:f1:e5:f2:cb:e7:dc:
f1:ea:a1:33:7e:73:25:13:1b:28:dc:c1:9a:b8:6c:
18:01:24:22:ba:70:63:bc:12:a7:e1:0e:a7:22:5f:
1e:65:09:e2:15:fe:50:c6:5f:17:74:60:64:2a:85:
d6:7e:0a:d6:e4:0f:d2:99:8b:c1:29:44:92:23:2a:
7d:cb:bc:5a:29:f9:ae:0a:f8:76:3a:dc:8d:f4:f7:
82:5a:35:6b:d3:8a:8a:38:85:cf:c9:1e:b2:91:bd:
97:f8:e3:84:17:a6:2b:b8:75:b1:68:cc:5a:f3:17:
23:a4:5e:29:e5:54:96:6d:9c:04:9a:4c:36:c2:67:
06:4d:93:87:7a:2a:97:93:c5:4b:55:02:1a:de:12:
b6:5a:1c:4c:70:30:02:02:c1:7f:e8:6a:80:3a:80:
f6:2a:10:dc:f8:51:47:4d:21:dd:30:d9:34:11:f8:
39:6b:7f:d8:7a:59:eb:6e:fe:06:7b:47:30:0e:fe:
87:8d:53:a9:31:f3:da:e7:72:d9:7e:98:7a:5a:fd:
bf:b6:f7:42:26:81:f9:0a:b9:13:6f:69:b6:71:c6:
00:cc:74:08:88:16:91:31:4c:f6:5b:cd:27:d4:3a:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1E:7B:93:18:6B:9F:CC:EF:4B:4B:86:B7:83:9F:17:54:6F:52:00
X509v3 Authority Key Identifier:
keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/8ED301D0782011F0BDB6E683C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.73.21.0/24
192.107.171.0-192.107.172.255
Signature Algorithm: sha256WithRSAEncryption
84:a9:d8:44:0a:6b:46:13:8f:5d:e2:b1:2f:33:56:4e:1a:d9:
c0:1c:35:c8:d8:6c:1f:95:16:2d:bd:79:9e:b1:be:ab:1c:8c:
76:e6:e1:7b:00:8a:67:8c:64:0d:99:84:5e:ac:a5:95:e8:64:
04:12:58:93:aa:2c:34:e9:d9:fe:e4:f5:b5:85:ce:aa:53:7a:
fe:4a:af:81:7e:1d:78:01:cd:cd:e8:be:ad:9e:93:85:25:60:
9a:61:33:81:e5:b5:99:64:1e:bd:49:56:07:f2:eb:0a:d2:8b:
40:c7:95:39:50:e8:f3:c0:ed:64:09:25:ab:27:54:b9:43:95:
31:c6:85:db:31:2c:14:68:83:71:3e:16:df:3d:4f:cb:c4:7e:
af:63:88:70:96:25:dd:75:e1:4b:d4:32:15:26:d2:40:9c:10:
9e:86:8a:76:67:7f:5a:4c:f0:ab:c5:b2:37:7b:e2:99:90:a2:
69:a8:e0:eb:c2:8a:1f:9c:13:97:11:c6:5e:c1:d1:17:69:92:
d2:e6:88:e0:82:eb:84:b6:f7:51:b0:92:65:1d:4f:75:fc:ee:
93:56:ab:fe:41:45:f9:8e:c6:e7:18:32:bc:26:7c:1c:ea:46:
71:ae:22:a7:b2:69:10:23:9e:c0:ef:d7:91:28:ae:97:35:20:
05:3e:cf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:22 2026 by rpki-client