
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/040DC78829EB11F18E7F1692A0833773.roa
File: 040DC78829EB11F18E7F1692A0833773.roa (raw, json)
Hash identifier: y16n6WemYHe3eFI0s7YEgjUsT6r8DekbQjKdUrOjeu4=
Subject key identifier: 5D:3D:20:BE:48:C4:C6:98:73:2A:B7:DB:E7:B7:9D:08:16:0D:EB:79
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 0162
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/040DC78829EB11F18E7F1692A0833773.roa
Signing time: Tue 28 Jul 2026 19:41:07 +0000
ROA not before: Tue 28 Jul 2026 19:41:07 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 7262
IP address blocks: 63.223.203.0/24 maxlen: 24
63.223.204.0/24 maxlen: 24
209.9.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Jul 28 19:41:07 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6905d3-8ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:95:70:24:1c:81:6d:65:e5:50:ff:07:fe:
38:0c:69:f1:e6:77:bb:25:7a:5a:34:cb:1f:7a:e9:
6d:5a:1b:dc:e9:f5:78:de:8a:ce:af:84:2c:5a:e4:
e2:86:7c:79:f9:d6:b3:06:2f:4d:80:52:67:bf:d6:
82:1d:55:d3:04:5b:26:93:20:1f:03:3d:f8:cd:6b:
52:10:66:4c:7d:4c:5b:de:9e:fa:39:bd:92:f6:24:
15:36:90:75:a0:5b:16:99:12:d6:f7:1c:1f:1e:68:
91:8d:32:91:f1:f8:06:f7:4d:ef:e6:ae:06:6a:14:
a7:3e:a0:54:85:1a:f1:e5:d8:d8:df:6f:19:ec:26:
26:7d:0b:cd:21:cc:9e:dc:fd:86:03:37:75:d7:b6:
d3:0a:3e:00:17:28:ea:0c:51:53:7e:78:1a:51:6c:
5d:f6:e5:d2:ea:db:8b:f0:77:32:fa:0f:c8:50:ab:
55:36:73:bd:8a:c0:e9:77:04:96:5e:e3:ca:44:f9:
4b:17:09:80:94:da:55:76:36:01:f8:71:15:0f:46:
92:f5:f4:64:69:9c:ed:a1:e5:61:19:69:43:0f:12:
46:75:77:d3:ce:f0:24:78:94:c2:ad:36:f0:e8:ae:
e2:13:fa:88:87:f5:02:fc:1d:ce:ef:9f:52:f8:d8:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3D:20:BE:48:C4:C6:98:73:2A:B7:DB:E7:B7:9D:08:16:0D:EB:79
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/040DC78829EB11F18E7F1692A0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
63.223.203.0-63.223.204.255
209.9.216.0/23
Signature Algorithm: sha256WithRSAEncryption
25:56:11:e4:d4:b4:ae:e9:78:00:28:ae:37:23:04:c1:a9:41:
44:4f:b3:60:4c:58:7c:aa:6a:90:ec:a9:08:10:5c:7d:e7:fa:
f4:07:02:e3:51:38:c1:d5:a0:49:1e:38:16:b2:5a:7a:e3:37:
7e:a2:e2:93:e5:5b:ec:3d:d5:6c:14:a9:26:e0:c6:20:4c:b8:
6f:b8:52:68:5f:08:4d:d0:43:f5:e4:a3:11:d9:bd:85:39:92:
05:65:1e:da:89:d2:ff:96:43:fb:c9:a2:09:8c:b0:4b:09:5b:
c6:3c:9a:5e:cc:c7:a9:53:09:d6:71:e4:9a:c9:52:8d:7b:0d:
68:ec:85:41:4b:c7:5e:9d:ef:32:30:ac:56:f2:30:97:f1:ab:
13:f6:20:77:67:ec:ed:e9:cc:f8:27:53:60:c6:ef:b0:d6:6e:
a1:b3:62:b3:95:01:ca:5c:41:34:33:28:f4:38:93:93:91:0b:
84:79:a7:c1:05:e9:85:70:a2:ec:af:6b:4d:86:f0:c0:dc:d1:
d3:da:65:fb:2d:1f:d2:9b:e7:32:af:ef:63:3f:51:44:6d:72:
32:2f:4b:4e:46:2a:75:aa:de:26:56:47:89:42:6c:70:bf:5c:
4a:5c:2e:08:ee:a6:3b:99:26:88:9e:e2:5e:54:e5:e3:84:19:
56:e3:d8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:55:34 2026 by rpki-client