
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7D4AEECAA69D11ED970A2E1EC4F9AE02.roa
File: 7D4AEECAA69D11ED970A2E1EC4F9AE02.roa (raw, json)
Hash identifier: 8lXFNalp+VAtXH5P3uOSawpn+k9++H+OieLK+bsEIlU=
Subject key identifier: 6D:EE:1E:11:81:4F:1A:05:49:18:A5:3C:31:E2:8D:41:03:3E:DE:0E
Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Certificate serial: 074C
Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7D4AEECAA69D11ED970A2E1EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:09:21 +0000
ROA not before: Wed 08 Oct 2025 22:24:19 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 134359
IP address blocks: 131.203.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:45:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1868 (0x74c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Validity
Not Before: Oct 8 22:24:19 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a480d1-8872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:44:26:eb:ad:dd:68:aa:95:46:f0:40:ae:
26:cf:63:35:3e:e3:4b:18:53:e7:4a:c2:9a:51:c2:
ae:81:ce:81:bb:57:0b:e6:77:4b:28:ff:08:d7:30:
f5:fe:9a:1a:c4:d7:ec:7d:1b:e1:51:21:ff:d4:1c:
7b:37:02:e9:d3:89:75:39:6c:3e:fa:f4:19:37:bb:
b0:72:1a:e8:05:87:90:d7:4a:6c:e5:57:3e:c1:65:
c7:5e:6b:fa:c6:d2:3a:c4:86:51:6a:70:c7:00:e3:
31:55:39:5e:6e:21:e6:d2:ef:09:bc:50:ec:96:9e:
33:56:58:e5:ee:e5:6a:b3:0f:63:93:28:29:6c:a9:
e5:09:b0:92:72:08:c5:e1:6d:2e:b9:96:c7:93:4c:
af:f2:7a:20:24:9a:b8:f7:db:ea:82:e2:59:48:2d:
5a:fd:5c:b7:d3:27:59:f5:e0:2b:24:1d:09:77:a6:
3d:0c:46:b6:2f:93:1e:2a:3a:b1:80:6f:0a:87:cb:
c0:6d:e8:eb:14:d3:0b:b3:bc:52:83:5f:97:90:84:
64:19:0a:df:a6:5a:f1:ce:93:18:f7:aa:5a:35:ed:
f1:64:44:34:ec:3a:76:dc:c5:96:e4:64:d6:5f:bf:
77:f3:3b:83:3b:bf:3d:ef:e1:06:99:ac:3f:34:2d:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EE:1E:11:81:4F:1A:05:49:18:A5:3C:31:E2:8D:41:03:3E:DE:0E
X509v3 Authority Key Identifier:
keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7D4AEECAA69D11ED970A2E1EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
131.203.131.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e0:4d:49:ac:26:25:4c:f8:45:da:78:54:69:7e:14:be:c3:
e8:0d:73:0b:7e:c3:80:2d:47:18:a2:0c:78:3d:95:e9:37:82:
6c:2d:b2:f4:f2:93:36:ac:05:67:f6:86:2d:af:c4:32:61:3e:
4c:69:a2:28:24:17:a1:7a:c2:7a:88:1d:81:29:e0:2b:2f:88:
e6:25:2d:d1:3b:3c:d6:2d:81:b1:44:0c:04:b7:10:cb:62:38:
b3:7e:b1:11:43:bd:16:70:e1:36:f8:1b:e1:92:43:7d:93:77:
01:f3:31:d1:88:22:49:83:c6:06:77:1e:2e:12:7d:d9:e2:db:
05:3c:81:70:24:10:47:25:25:03:67:ea:4c:8a:a9:2a:3d:63:
74:a4:56:65:55:f7:ab:81:1e:9f:a0:7e:de:3d:08:17:a6:ac:
4b:36:dc:89:68:e1:26:13:70:98:a4:ca:9b:93:60:83:1a:14:
a6:af:1c:ec:4e:5b:2d:e9:06:14:57:ce:58:d5:c4:c2:5d:92:
7a:d9:57:c7:31:e3:d4:45:63:d2:34:8e:fe:ff:6b:fd:91:98:
e4:f0:50:86:61:97:39:67:76:ff:31:bb:b0:8e:50:f0:f0:81:
8c:70:93:5d:ec:07:1e:f7:3f:e7:06:71:99:ca:64:53:38:e1:
ba:53:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:27 2026 by rpki-client