
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/11749BE62DA511F1AB5ACB70A2833773.roa
File: 11749BE62DA511F1AB5ACB70A2833773.roa (raw, json)
Hash identifier: XiFtfljCFKD2LKcSnLJ3irXOuLI/m6SajhgaUNMIkk4=
Subject key identifier: 99:C6:87:03:39:38:4F:E7:77:A3:56:40:60:26:EE:D0:68:A5:AB:4C
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 015D
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/11749BE62DA511F1AB5ACB70A2833773.roa
Signing time: Tue 28 Jul 2026 19:40:57 +0000
ROA not before: Tue 28 Jul 2026 19:40:57 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 57402
IP address blocks: 63.216.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Jul 28 19:40:57 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6905c8-b56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:48:7d:65:9a:5d:3c:f2:84:07:27:d0:dc:
4c:49:5e:f8:b4:f3:61:16:c6:b7:c9:e9:ca:0c:f3:
f4:4d:e7:a4:21:a2:fe:2c:16:10:08:2f:d9:ea:01:
cb:54:ed:fc:0a:76:2a:f5:a9:aa:50:22:94:f6:3a:
a8:0e:d4:d8:04:88:9e:a8:30:cd:4f:89:30:43:94:
2e:ce:6f:70:7a:72:12:24:92:50:55:3f:b1:6e:ed:
a3:ad:5d:8f:ef:a9:88:37:a8:2b:5a:de:a5:61:60:
30:ec:92:3e:99:ee:41:d8:36:ad:91:45:b0:e5:c6:
f5:35:b8:15:b1:89:07:c2:4a:c2:57:e5:2d:22:27:
5f:d6:20:8d:c0:dd:89:4e:a7:ed:57:60:0d:41:d5:
b0:bb:82:f5:66:3a:b7:2c:c1:22:b4:66:ff:d6:cd:
1b:33:c7:85:9b:08:6e:94:59:2c:f2:08:a5:e5:58:
4f:c0:5d:f5:28:23:30:68:02:54:01:ce:c2:5b:31:
1b:63:f1:2a:68:bc:23:2d:64:a4:01:c2:8a:84:1c:
cc:96:0b:a0:d1:53:37:dd:a6:79:c2:4d:8e:78:eb:
d7:08:d5:1c:09:13:db:54:d7:65:0e:e6:38:64:83:
48:3d:7a:0f:fa:b5:79:99:5f:5b:f8:eb:4d:2f:9a:
39:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:87:03:39:38:4F:E7:77:A3:56:40:60:26:EE:D0:68:A5:AB:4C
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/11749BE62DA511F1AB5ACB70A2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
63.216.92.0/22
Signature Algorithm: sha256WithRSAEncryption
44:ea:17:58:ac:2f:16:f5:8f:10:26:db:02:7b:e5:df:1d:8e:
e4:4a:f5:04:95:37:cb:d8:88:88:62:0e:0f:12:0d:a4:28:54:
1f:1b:4e:f3:fd:df:d2:c1:45:8b:7e:ec:10:ef:8c:0f:2a:e0:
17:3a:21:80:49:de:d6:f0:1c:00:d9:dc:fe:be:d5:e8:f3:c2:
95:9b:98:53:75:52:13:f1:eb:80:25:5b:dd:e3:75:70:1a:8b:
b0:51:56:5b:ed:e9:a1:85:b9:19:6a:e2:a2:67:9f:71:9e:c9:
a1:39:0a:87:21:8f:5d:90:44:bb:d0:76:dd:22:f2:fc:7f:80:
b1:a7:46:ba:70:69:9b:cd:7b:8e:26:c0:6c:ee:26:50:df:c3:
65:47:30:00:36:dc:a4:e1:88:0f:9f:1e:95:6e:8b:16:f8:4c:
f0:ff:95:f8:4e:7d:58:c5:bf:c8:9d:63:4c:62:5b:be:17:73:
e1:c0:09:64:3f:7e:af:b6:ef:85:9d:ba:62:5d:b2:a1:64:90:
d5:99:2b:82:8e:b9:77:71:f8:c7:56:13:02:b7:dd:3d:60:64:
87:2c:73:5f:3b:36:8c:cc:b7:fc:91:ce:21:d6:cb:be:de:63:
4a:f5:08:8e:7c:cb:c8:3e:96:57:6c:fd:92:ad:17:b7:5b:a9:
8f:c7:08:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:54:30 2026 by rpki-client