
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/87758D3C2DAF11F1B56D9FADA5833773.roa
File: 87758D3C2DAF11F1B56D9FADA5833773.roa (raw, json)
Hash identifier: bB7QmV7mgJV6zy0vXkgVW0mvcXAYiTfS8G40XLA5T0I=
Subject key identifier: 4E:12:BA:F1:63:B8:03:FE:C4:7B:52:EC:E5:4D:8D:1B:9F:5D:39:BB
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 0143
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/87758D3C2DAF11F1B56D9FADA5833773.roa
Signing time: Tue 28 Jul 2026 19:39:55 +0000
ROA not before: Tue 28 Jul 2026 19:39:55 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135391
IP address blocks: 206.161.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Jul 28 19:39:55 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a69058a-03ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:b2:ff:a2:57:02:3b:a0:14:f7:18:6d:96:
e1:9c:2b:ac:f8:ad:b9:16:8c:a7:8e:82:37:df:44:
ce:76:ce:d2:2c:70:1b:60:0b:e5:57:d2:3e:7a:57:
b2:ec:48:c9:c7:1b:37:c0:6c:9c:38:60:63:7b:1b:
02:5e:f3:a3:32:b5:ad:0d:3a:f1:1d:64:90:2d:98:
74:1c:af:18:6f:f3:8d:3d:1a:b9:7c:ca:62:18:45:
7b:e2:48:cf:de:90:c5:0c:70:62:b4:92:bc:bb:f6:
48:6e:7f:f0:6a:15:cf:2a:5c:0d:4d:d5:89:13:d0:
d4:05:90:42:c1:ad:a0:45:ba:28:70:92:46:93:33:
9c:52:96:84:ff:18:16:8c:d5:c3:a4:12:ff:80:04:
cd:0c:d9:d4:bf:17:eb:4a:a4:30:f0:dc:67:cd:39:
37:fb:5e:9f:c0:a8:95:6f:1c:72:e7:9d:62:3c:59:
5d:7a:57:b0:ef:24:eb:0e:1b:a2:f8:43:32:c7:4b:
9f:41:49:af:3f:35:a9:ff:29:9e:7c:a4:1d:5d:a3:
06:6b:df:7c:92:4f:87:72:67:1e:2c:64:ed:4e:cb:
36:ea:93:bf:db:65:4b:27:a4:76:99:1c:61:49:89:
03:12:ef:a7:e1:75:bd:ba:dc:0e:0b:2d:e5:b8:83:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:12:BA:F1:63:B8:03:FE:C4:7B:52:EC:E5:4D:8D:1B:9F:5D:39:BB
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/87758D3C2DAF11F1B56D9FADA5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
206.161.232.0/24
Signature Algorithm: sha256WithRSAEncryption
29:30:fa:78:76:21:8f:a5:a4:b7:53:c1:b0:ca:71:be:8b:d8:
0b:c5:61:00:e4:3d:de:78:65:7c:3b:6a:5f:2b:a3:5b:6a:b6:
22:96:fa:fb:d5:20:bd:85:ae:8f:03:ca:19:e1:1d:2d:c5:a2:
ed:58:3c:97:ef:8a:b2:9d:20:ed:91:7c:99:2d:94:c1:c2:61:
6e:35:7c:8c:1e:bc:4d:68:d6:d4:db:ba:21:ff:ee:41:4c:27:
72:82:ed:c4:66:9e:08:72:c0:bc:9e:05:4a:0f:99:c1:27:31:
8e:ab:58:3f:9f:61:44:c7:e7:01:65:3d:2e:6c:39:4e:3f:19:
1c:51:1f:f2:72:37:b5:cb:4f:b3:bd:60:09:f8:f5:9c:ac:d9:
f6:0b:5f:7a:1d:0e:0d:e1:fc:07:88:28:05:76:6e:d3:58:2d:
12:c4:00:a0:14:6f:98:43:3b:6d:27:c1:ca:36:02:b2:3c:4b:
91:c1:94:e8:95:f2:0f:bd:43:8a:ba:cf:b6:82:88:42:6a:3d:
c3:b1:ec:01:d2:26:52:65:3d:f2:7e:11:0f:69:16:08:0b:a7:
9c:a2:97:18:dc:01:0a:9c:5a:0e:26:f5:94:8c:ed:76:c7:a2:
57:02:c3:6a:2c:f8:0e:cb:2a:c4:61:cc:3d:b4:0f:78:53:11:
20:2f:2a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:17 2026 by rpki-client