
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/7CB1102487DD11F0A89FB377C4F9AE02.roa
File: 7CB1102487DD11F0A89FB377C4F9AE02.roa (raw, json)
Hash identifier: 7Tw7MUa2YgJbW9fiP2QoyuCg4X9lbUhL25iL2lzhjcM=
Subject key identifier: EA:32:B4:9F:0F:23:F6:FE:00:1A:B4:3E:CE:CD:F7:F4:D2:F5:83:27
Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369
Certificate serial: 5D
Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/7CB1102487DD11F0A89FB377C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:29:12 +0000
ROA not before: Tue 02 Sep 2025 09:16:20 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 18055
IP address blocks: 192.108.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl
rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369
Validity
Not Before: Sep 2 09:16:20 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3dcb8-f03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:08:8c:62:10:8f:a9:0f:c5:a5:7a:ca:c1:5f:
62:87:72:ea:c2:22:d9:62:9f:b8:00:d9:d2:9b:f7:
47:da:3c:2d:d7:4c:5e:33:72:38:d1:f8:db:02:9b:
b6:8a:3e:5d:de:d4:ce:d0:16:f7:d5:0d:57:75:dc:
0a:77:eb:af:f8:ce:16:77:ee:76:62:b7:0a:c0:5c:
ab:50:bc:fe:0c:52:70:e3:f6:2d:f5:47:5d:35:41:
50:b5:6f:56:6d:7a:c9:09:54:be:6f:b4:1c:ac:3b:
77:ea:05:d0:e3:17:98:23:f4:df:37:56:c4:59:a3:
10:32:bc:43:0d:9a:68:cc:f6:c8:d9:57:33:9f:7d:
ee:36:48:7c:79:a7:d0:09:88:72:62:b3:ff:db:69:
b8:7c:aa:72:1c:e4:2a:99:cf:21:87:2b:41:fa:a0:
6d:d5:22:10:8d:a5:85:7e:72:75:88:a8:73:60:8a:
bc:51:b8:73:08:ee:a6:9c:39:93:be:d5:10:ad:7e:
9d:0c:22:1f:62:3c:05:d2:df:92:73:86:0f:b4:08:
69:83:fb:a0:c0:12:d1:02:6a:96:83:e0:3a:69:bf:
da:28:a5:18:6f:60:e6:16:6d:28:eb:7d:8a:13:38:
54:53:ab:19:98:d2:a7:79:c6:7e:11:b9:3f:b7:33:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:32:B4:9F:0F:23:F6:FE:00:1A:B4:3E:CE:CD:F7:F4:D2:F5:83:27
X509v3 Authority Key Identifier:
keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/7CB1102487DD11F0A89FB377C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.108.99.0/24
Signature Algorithm: sha256WithRSAEncryption
27:6a:0c:d6:c1:63:de:9e:0d:96:78:1e:16:30:0f:86:69:83:
a4:41:34:30:9f:f7:8e:d1:ae:8b:e0:63:90:33:0c:08:d4:fb:
50:41:64:1d:c5:a0:ae:51:3b:51:dd:a1:a7:e7:f4:72:f1:31:
d4:78:04:92:f0:18:c3:a4:88:0e:de:27:91:af:ae:12:9c:e8:
c9:e6:07:10:cc:a3:72:d7:f2:9e:a7:01:97:82:a0:4b:83:60:
d3:53:48:1d:eb:ab:ed:53:cc:91:90:33:cc:88:c8:c9:aa:2d:
94:15:31:c4:05:80:00:61:ed:0c:36:a7:02:12:2e:6f:4d:6f:
c0:c7:02:58:d7:89:5e:4a:c3:31:28:db:a6:5d:ec:de:1e:84:
50:7d:12:7c:2a:c5:f9:cd:d6:93:b5:5c:10:ca:a9:3a:b9:9b:
1e:29:cd:8b:48:d2:a4:60:5d:be:6b:75:a1:4b:61:36:9a:e6:
76:fe:77:21:1b:d1:31:5d:30:55:28:bb:ca:aa:b8:27:0d:11:
15:5c:1a:e8:77:9d:49:1f:73:c3:9e:d4:65:74:6c:0d:42:63:
b5:02:51:48:91:7b:6d:83:d1:27:76:8a:bb:b0:1d:ff:14:64:
0d:47:7b:d7:bf:88:ae:b6:7f:2c:8e:74:c2:56:bd:1f:6a:81:
30:53:a7:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:57 2026 by rpki-client