
$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/756E0BBCEAE711EE88CD8641C4F9AE02.roa
File: 756E0BBCEAE711EE88CD8641C4F9AE02.roa (raw, json)
Hash identifier: F9qzDXb2ETVj14lcNUq30Z9sFnnvqbyTNgRyrEZdsMI=
Subject key identifier: 21:04:A2:7E:28:00:28:0F:0B:85:50:EE:C7:37:EF:AE:15:70:28:20
Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial: 07ED
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/756E0BBCEAE711EE88CD8641C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:09:31 +0000
ROA not before: Sat 28 Jun 2025 22:41:23 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 142045
IP address blocks: 2407:4ac0:1400::/38 maxlen: 40
2407:4ac0:1800::/37 maxlen: 40
2407:4ac0:2000::/35 maxlen: 40
2407:4ac0:2800::/37 maxlen: 40
2407:4ac0:3000::/36 maxlen: 40
2407:4ac0:6000::/35 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029 (0x7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Validity
Not Before: Jun 28 22:41:23 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a480db-d58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:64:b9:a0:99:98:77:41:52:f2:fd:aa:9f:
5e:f6:11:f8:ad:80:90:8d:a0:b5:12:4c:62:54:8a:
3c:32:19:06:93:9b:99:6c:15:76:6b:9e:69:3a:ac:
5d:87:e1:7a:96:59:3c:76:19:84:04:ac:55:de:8c:
e0:3a:48:fc:77:67:41:ea:d7:81:f7:c6:bb:b0:71:
f9:ac:2f:db:ba:3c:4c:51:b9:8d:9d:46:4a:f7:32:
0a:93:18:ec:8c:2b:10:5c:07:e8:4a:35:2b:fe:79:
bc:50:bf:3b:a9:3f:2c:5b:38:9b:13:2e:c3:b8:f3:
f0:29:78:37:3e:e3:dc:82:34:12:f2:f9:ff:95:2a:
31:55:1c:9a:27:57:f0:43:b3:24:70:48:d1:db:f6:
87:62:b4:5b:54:74:41:20:37:54:a0:bb:6d:eb:f6:
dd:52:25:93:d6:a0:08:40:af:d2:a5:91:28:8c:36:
6c:a0:c4:3c:5a:a7:80:20:e2:71:91:38:e0:3a:7c:
cc:40:8e:1b:b0:e0:a0:3c:d4:17:ce:9e:85:72:f5:
7c:5f:9a:57:37:19:9c:e5:85:5f:eb:e2:81:84:d5:
40:be:2b:ed:0c:0f:93:a8:a3:66:c3:f7:7e:78:fc:
5e:b3:54:13:77:e2:57:20:d9:d5:5a:e9:07:3b:0d:
ab:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:04:A2:7E:28:00:28:0F:0B:85:50:EE:C7:37:EF:AE:15:70:28:20
X509v3 Authority Key Identifier:
keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/756E0BBCEAE711EE88CD8641C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:4ac0:1400::-2407:4ac0:3fff:ffff:ffff:ffff:ffff:ffff
2407:4ac0:6000::/35
Signature Algorithm: sha256WithRSAEncryption
99:65:7e:69:ad:c1:4f:a2:4f:58:02:87:31:5d:b3:8e:7b:60:
c3:62:00:51:7b:70:fc:32:8e:33:d2:79:52:f4:41:96:b5:96:
58:c5:d2:ac:52:d4:be:90:03:42:85:aa:92:bf:e5:65:dc:7d:
f2:12:84:2d:e1:6f:b4:e8:26:41:f8:ff:62:e1:53:11:93:45:
6f:9b:29:e1:6f:97:34:17:c2:f9:a2:3f:ff:22:54:2b:af:c9:
6d:94:e8:e1:75:d0:7f:47:8b:e9:25:14:28:cb:ea:fb:26:5b:
dc:53:cb:b5:59:85:ba:73:1b:5d:ad:c6:9f:4f:2f:25:ca:2e:
ce:d1:e8:bc:ff:a8:73:90:ed:57:80:54:7d:01:76:ce:7f:32:
64:99:34:d5:74:1d:12:6a:f6:fa:0a:ab:6a:d7:50:6c:32:43:
5e:9a:7c:d0:66:59:ad:f9:0e:0a:04:9d:2e:ac:13:2f:66:39:
e9:44:51:ab:1f:62:88:a8:18:c5:fb:57:b2:63:19:ac:06:27:
e6:ac:8f:44:a6:44:a2:d6:a0:f2:ed:0f:7f:21:3e:7d:fd:a6:
77:96:c9:c1:ad:14:4c:3a:80:8e:d4:ac:5b:99:83:fc:5c:e5:
95:c5:73:c8:86:0c:a4:7d:28:dc:13:8d:31:0e:1f:c0:d0:5f:
55:6e:06:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:40 2026 by rpki-client