
$ rpki-client -vvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/78E949B8BA2B11F091659A18C4F9AE02.roa
File: 78E949B8BA2B11F091659A18C4F9AE02.roa (raw, json)
Hash identifier: VOBPRXqiWHsxxicImatBXQPFpdPNhWUthBewKk/mSYs=
Subject key identifier: 14:55:25:16:26:90:A4:9F:CE:D5:E3:EB:6F:5F:BE:E8:0B:0C:F0:03
Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Certificate serial: 0CA4
Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/78E949B8BA2B11F091659A18C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:25:27 +0000
ROA not before: Wed 05 Nov 2025 09:40:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150697
IP address blocks: 45.117.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Validity
Not Before: Nov 5 09:40:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48496-9c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:0a:c7:2f:fe:49:91:b0:93:f4:9b:b6:03:
6c:af:e1:59:d3:92:21:9e:17:2f:e3:9f:27:a7:4a:
83:b7:b3:ef:73:c6:ce:64:57:24:67:00:a6:f3:96:
07:27:4a:65:74:6b:96:47:9f:d7:34:7a:53:c8:eb:
c5:f0:d7:1b:16:56:e7:32:a8:0b:09:4e:00:ed:0d:
b6:4d:17:f6:f5:64:97:5a:9b:56:40:1b:58:df:45:
87:f6:0e:4a:7f:c4:53:bd:19:bf:f2:e7:b3:be:b2:
61:95:14:5f:d6:90:ff:c3:5d:82:0e:99:1b:b0:4f:
6e:72:42:64:37:8b:c8:51:23:e1:fc:ab:92:ee:9e:
1a:3d:12:b3:99:4b:9f:d2:d8:6a:cc:b4:81:7b:f3:
be:90:34:18:59:00:25:5b:ff:1a:5b:78:a1:0a:2e:
9a:a1:dd:c5:86:86:33:af:e4:48:56:09:a0:8f:73:
b6:a8:cd:6d:3b:cd:2f:2c:f0:34:75:e0:aa:97:b4:
e7:38:1c:71:4d:4b:bc:2b:48:08:95:f8:d7:5b:d9:
65:c0:6d:0e:ea:ff:5f:04:81:b7:41:a3:57:e9:6d:
63:b8:d8:0e:c2:f8:e6:9a:52:96:71:1b:8c:e6:d3:
be:09:f5:86:f8:ff:49:89:23:2c:3c:74:cc:c2:23:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:55:25:16:26:90:A4:9F:CE:D5:E3:EB:6F:5F:BE:E8:0B:0C:F0:03
X509v3 Authority Key Identifier:
keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/78E949B8BA2B11F091659A18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.117.104.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1d:e5:b7:e7:38:ac:fa:77:95:7e:4d:d2:0d:1a:0f:7d:32:
ee:ed:4b:57:28:65:0d:6c:5e:0b:50:7a:c1:cf:56:0a:c1:4a:
dc:93:07:7b:25:51:e1:8d:d8:9c:95:ad:d7:4b:f3:01:93:df:
c6:28:92:e7:8f:f4:e9:ce:e5:e2:b2:b3:1f:52:49:a2:68:b8:
97:cf:85:c9:9e:7d:25:90:5f:fe:6d:36:2c:8a:d9:7f:29:d2:
e8:3f:af:1d:0c:92:5f:57:77:70:3d:5c:bd:26:91:5b:e1:8b:
ec:33:93:c1:90:ac:3e:f3:32:26:b5:e3:db:31:01:ce:f6:13:
c5:24:e9:1c:a7:4b:75:0b:b4:d7:2a:09:47:d6:50:a1:a7:33:
8d:32:b6:ca:0c:6e:fb:c3:e3:1a:6f:99:83:ef:7a:7b:a9:1a:
ed:78:e0:f7:fb:ae:1b:3e:77:57:9d:23:bd:b6:b4:a7:7d:69:
f9:63:6a:6a:45:26:e0:e5:a0:21:6e:d3:52:60:69:67:e4:6d:
ae:0f:24:ad:fd:53:45:40:bc:bb:f1:cf:98:0a:51:c0:72:02:
94:ec:98:8a:7f:c5:b1:2b:fe:5c:a8:af:6a:1b:0d:7c:78:dd:
9d:aa:50:96:f7:e1:83:64:8c:ee:b1:36:ff:bf:68:e1:1a:da:
af:d5:62:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:41 2026 by rpki-client