
$ rpki-client -vvf rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa
File: F7078BC4B73511EF8537DE81C4F9AE02.roa (raw, json)
Hash identifier: dcnfcfiViSeBV+zFTXFLZ3LN0enm0ZKeSScFAnyxpAk=
Subject key identifier: 24:D1:68:A6:9A:79:FC:EE:A3:85:9B:88:02:7C:D6:D1:C7:EE:0A:50
Certificate issuer: /CN=A91394E7/serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
Certificate serial: 010B
Authority key identifier: 89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa
Signing time: Fri 03 Apr 2026 06:39:42 +0000
ROA not before: Fri 03 Apr 2026 06:39:42 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 23921
IP address blocks: 202.38.157.0/24 maxlen: 24
203.31.183.0/24 maxlen: 24
203.92.27.0/24 maxlen: 24
203.190.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl
rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91394E7, serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
Validity
Not Before: Apr 3 06:39:42 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69cf60ae-6744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:43:53:0c:a0:9d:3b:7c:97:0c:b5:53:aa:
6e:c6:8b:0a:51:86:d2:b9:d8:88:bd:f4:ef:fa:78:
69:06:bd:bb:30:8f:ea:71:1e:9f:d9:35:de:54:51:
35:7e:f8:40:18:26:c6:c3:3b:9d:f6:a7:8f:02:23:
10:45:61:08:2c:38:79:db:93:6b:52:26:64:fe:53:
f5:6c:cb:23:7e:49:e8:28:8a:d1:f4:c3:02:7a:c0:
d8:6c:a8:a8:cc:67:ee:31:ea:e0:92:d1:56:b3:70:
5d:ff:fd:7f:d0:c6:ab:13:c2:fd:53:ca:67:57:21:
41:2c:a6:fe:d0:ca:b3:13:89:42:27:60:45:6b:5d:
9d:92:1d:b8:9f:25:74:78:67:ae:06:e0:59:49:dd:
1f:3a:81:c4:8d:f8:60:8b:8d:3d:3c:48:cf:3b:3a:
01:15:4c:1d:b0:90:36:a1:52:a3:cc:7e:1c:06:aa:
09:8e:b7:71:f2:0e:a2:12:70:3b:9c:4a:f6:24:89:
ad:8f:0f:94:55:4d:66:3c:65:c1:02:14:b4:19:a4:
30:72:4b:35:f8:bd:9f:59:c6:cd:22:4b:24:62:14:
d1:1e:0a:f4:b0:5b:63:94:a0:6a:94:df:b8:8d:05:
02:6d:f0:46:eb:de:55:3e:22:e6:23:0e:9f:d1:dc:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D1:68:A6:9A:79:FC:EE:A3:85:9B:88:02:7C:D6:D1:C7:EE:0A:50
X509v3 Authority Key Identifier:
keyid:89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.38.157.0/24
203.31.183.0/24
203.92.27.0/24
203.190.25.0/24
Signature Algorithm: sha256WithRSAEncryption
41:50:6a:59:ab:e7:bd:68:d7:e3:09:03:5f:01:b2:0b:30:67:
73:d7:3d:07:c4:b0:9f:c0:13:8f:8e:75:2a:7f:50:58:89:95:
ad:26:22:0d:9e:00:50:66:23:eb:45:07:48:5a:c4:e0:99:f6:
c1:8d:55:6b:1d:3e:6f:c8:9a:f1:57:13:d0:d0:6c:42:fa:3b:
7b:4a:a0:b5:85:be:24:76:9f:8e:a8:0e:27:52:4a:9d:69:f0:
40:a5:55:eb:03:4d:7b:31:f6:dc:56:ab:e1:6e:ea:91:f1:e6:
7f:b5:49:b7:7e:c2:d3:4d:55:13:e2:4d:7b:5b:d1:91:d1:4f:
c5:dd:3f:1e:a8:7b:98:14:18:60:8f:ce:ca:4c:d9:50:ee:19:
37:fd:71:71:e4:b0:6f:db:69:fb:7f:56:1c:5f:8a:b4:12:7d:
65:7d:4f:fe:2f:af:b9:f7:4b:95:01:96:31:b9:2b:ad:14:9b:
a2:09:d1:a0:a5:aa:c6:95:8e:18:d2:d5:42:44:05:12:c7:26:
dc:18:ec:88:2a:b1:1b:ed:a5:f9:18:5c:57:fe:bc:75:4e:84:
d5:07:b3:5c:2a:5a:f0:63:74:d0:8d:1c:e6:3b:c0:40:51:c9:
c5:0f:c6:9a:e2:cf:82:0e:d4:8e:e5:bf:06:5b:9a:67:7f:5d:
7c:43:60:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:15:10 2026 by rpki-client