
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/7A8B7F78AB7211F1A5F72F244011F970.roa
File: 7A8B7F78AB7211F1A5F72F244011F970.roa (raw, json)
Hash identifier: CuH0XNKafF/9BTVwY8dM+Xd/rd/WtV5cKIRzyQS3nLA=
Subject key identifier: BF:C5:13:3A:98:2C:88:40:FF:3F:AC:88:52:C5:35:94:08:7C:C9:D1
Certificate issuer: /CN=A913F772/serialNumber=AA43CDD8F343C1B5DDE5916A72DF7688CAAE7A81
Certificate serial: 1F
Authority key identifier: AA:43:CD:D8:F3:43:C1:B5:DD:E5:91:6A:72:DF:76:88:CA:AE:7A:81
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/7A8B7F78AB7211F1A5F72F244011F970.roa
Signing time: Tue 08 Sep 2026 10:46:00 +0000
ROA not before: Tue 08 Sep 2026 10:46:00 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4755
IP address blocks: 165.101.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.crl
rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F772, serialNumber=AA43CDD8F343C1B5DDE5916A72DF7688CAAE7A81
Validity
Not Before: Sep 8 10:46:00 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9fe767-d14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:de:ee:0d:3e:74:64:67:81:43:1f:f3:d2:
1b:cf:13:a9:fd:05:89:c2:20:a9:af:44:e0:0b:f7:
7b:c8:3b:0f:40:bc:a6:f0:71:00:cb:6e:b3:da:19:
1d:8a:12:96:32:39:e6:9d:f2:0f:bb:4b:2e:47:ea:
71:b2:78:04:b5:b3:9c:d2:09:ea:f1:32:37:58:b8:
e7:e2:c7:13:b5:64:5b:f4:ae:8e:5c:60:c4:f4:ef:
e6:08:ed:c1:77:11:63:85:62:04:53:cb:a0:88:c0:
98:5c:6a:d4:eb:9f:01:59:62:51:f1:38:d6:14:3b:
22:a6:15:67:76:ed:c6:06:4e:f0:71:f6:99:9f:ee:
f7:b6:e9:07:ef:2e:7e:ed:ab:e3:69:75:80:99:72:
99:17:38:15:27:ab:b6:96:36:61:68:1f:78:7a:66:
06:27:e6:2a:a9:37:9d:60:3e:c1:d5:61:65:0a:2a:
75:95:44:18:72:a0:69:5f:2f:4e:6e:02:8b:ac:7a:
33:37:01:a1:0e:77:5c:51:6b:09:be:45:59:87:88:
b9:ce:12:62:45:a6:78:a4:82:76:a1:0f:88:c2:2f:
b4:dd:6e:ff:44:ee:09:05:cc:7f:db:6a:97:cc:e8:
ef:08:53:e7:d9:a0:c0:4e:a3:5f:69:df:af:51:78:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C5:13:3A:98:2C:88:40:FF:3F:AC:88:52:C5:35:94:08:7C:C9:D1
X509v3 Authority Key Identifier:
keyid:AA:43:CD:D8:F3:43:C1:B5:DD:E5:91:6A:72:DF:76:88:CA:AE:7A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/7A8B7F78AB7211F1A5F72F244011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.146.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d4:85:17:0b:0d:31:b4:e4:16:d8:38:e5:c6:1c:64:a8:61:
af:cb:a3:2f:3b:01:5f:8d:ba:5a:fb:be:20:50:d3:03:44:c5:
7e:e8:ac:32:2d:fc:13:35:99:19:4f:72:60:4d:6e:ed:8e:de:
5b:8b:db:d2:55:23:f8:9c:86:4f:4c:c0:91:c6:8c:b5:f0:b8:
ed:6f:f2:59:81:fc:87:76:47:e6:94:fe:fc:7d:b7:bf:a3:ca:
f7:ec:24:62:99:04:f2:9f:d9:8a:21:21:df:ec:f9:fd:9e:11:
f0:5d:3a:85:1d:15:40:9e:02:2e:1f:1b:ce:52:23:95:ee:98:
e8:7c:90:92:bb:66:7a:ff:33:74:8e:6f:9f:81:3f:16:e1:15:
58:70:f6:ad:1b:75:c4:5d:1f:cf:23:ad:a2:e9:e5:35:92:f2:
fd:02:75:aa:0f:2c:34:3c:f3:07:18:ae:a7:19:20:08:95:52:
07:0d:5d:7b:0f:6d:3a:6c:c2:91:16:3b:da:d0:fd:f6:3f:4b:
3a:43:2c:1c:6c:5e:65:38:b3:4f:0b:db:18:66:7e:87:49:bc:
0c:52:e4:36:27:c5:9f:d8:fc:8e:8d:3a:b9:83:bf:f7:d5:64:
f1:d6:ab:f7:ff:01:23:fd:cc:f7:1e:d5:b0:6b:d1:24:59:c0:
24:5b:43:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:21:45 2026 by rpki-client