
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/78D4FFEEEAB411EB95BFB566C4F9AE02.roa
File: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (raw, json)
Hash identifier: gt3P0RVKJ10NTC1xiuJFkqSt6F4bpiZoTwj1bRd97ls=
Subject key identifier: E4:80:53:DD:7F:B6:55:6F:3D:EA:A5:BB:32:99:18:71:B4:68:D4:E0
Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial: 060F
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/78D4FFEEEAB411EB95BFB566C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:00:02 +0000
ROA not before: Wed 30 Apr 2025 19:29:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23959
IP address blocks: 85.113.70.0/24 maxlen: 24
91.199.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1551 (0x60f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Validity
Not Before: Apr 30 19:29:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a44662-4851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:22:8e:12:26:a8:cd:85:5f:f9:37:d3:4e:
c3:f2:c3:e1:72:2b:e2:14:82:91:c4:eb:54:61:9b:
99:e8:c8:05:cd:57:62:2e:87:1b:71:fd:63:7e:16:
67:70:19:b0:3f:9f:ed:be:d6:0a:84:22:18:be:97:
e8:74:73:79:ce:da:2a:ac:6c:80:cf:bb:88:04:2c:
ff:b8:31:d5:44:84:4e:63:48:ac:74:9c:45:2b:aa:
71:f0:a9:d0:61:7e:7d:9d:75:83:a1:2e:70:fc:f2:
d8:22:58:dc:25:b3:fe:ec:6f:39:6b:e3:c4:10:51:
21:26:af:47:27:0c:03:13:59:ff:3c:bb:84:89:24:
84:77:48:44:43:bf:f5:be:46:91:1a:64:60:f2:88:
9d:1e:d6:9c:08:04:04:81:53:bf:a6:f4:85:1a:88:
92:b5:6a:9e:70:8e:3d:9a:44:db:15:4d:92:19:0f:
0b:fa:2e:78:89:bb:44:09:e9:6c:08:24:49:61:d6:
56:09:0d:69:30:a9:61:04:96:39:34:03:43:02:d2:
bf:70:07:2c:84:29:99:36:47:cb:b0:67:db:ed:01:
a1:34:0a:c4:42:14:8b:2d:a7:f5:ba:61:bd:bd:3d:
77:dd:56:9a:73:0a:03:e3:c4:80:97:1c:d4:7f:1e:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:80:53:DD:7F:B6:55:6F:3D:EA:A5:BB:32:99:18:71:B4:68:D4:E0
X509v3 Authority Key Identifier:
keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/78D4FFEEEAB411EB95BFB566C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
85.113.70.0/24
91.199.209.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:b7:c0:20:5f:ed:57:e3:53:27:e2:53:c7:ff:26:9b:f6:19:
88:a3:7f:9c:69:49:cb:77:88:88:b9:8b:d9:5a:09:e6:77:a2:
99:ca:98:2a:24:c3:37:91:05:92:d4:42:cc:67:09:ea:75:6e:
ce:8f:5d:0e:53:8b:2d:1a:4a:20:84:b1:52:21:86:2a:7e:fa:
9b:f1:05:2f:53:bb:4f:45:11:70:c2:b2:75:90:e2:ef:5a:3c:
67:11:54:15:e9:8b:91:b7:0f:2e:b0:68:bb:41:2c:17:58:e4:
c1:67:1c:3d:5d:b4:df:02:e6:40:e8:66:0b:c1:3f:7a:99:49:
38:9f:ca:d4:f5:f8:3c:3d:8f:db:5b:b3:21:84:29:3c:b3:30:
a7:76:da:cd:ff:3d:a5:b6:fd:44:ff:60:f2:7b:a6:22:d6:02:
c6:29:25:da:03:f7:ee:5f:e0:85:da:a1:78:79:a6:a3:38:f0:
95:1d:34:81:ea:75:b0:54:be:00:ee:f7:aa:69:a9:33:2f:ce:
9e:2b:a9:c2:e0:38:60:7b:5f:dc:e2:82:44:85:20:f2:36:9b:
78:16:76:97:30:fe:4f:ce:13:d6:4c:b2:2d:c2:13:c6:04:36:
86:ce:90:be:d8:f0:60:a7:b2:b7:56:2f:92:35:d9:c5:c9:6d:
84:48:16:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:07 2026 by rpki-client