
$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/4DC60A785C7F11F089D20138C4F9AE02.roa
File: 4DC60A785C7F11F089D20138C4F9AE02.roa (raw, json)
Hash identifier: X8cGL1QZAJHz7KDH62TgirLobR0d4YLXS1ArwiUOvzg=
Subject key identifier: 2F:41:3D:73:B6:80:E8:FF:FC:69:1E:61:D4:17:46:81:1B:60:81:90
Certificate issuer: /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Certificate serial: 7E
Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/4DC60A785C7F11F089D20138C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:11:46 +0000
ROA not before: Wed 09 Jul 2025 04:50:53 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 153995
IP address blocks: 165.101.74.0/23 maxlen: 23
165.101.74.0/24 maxlen: 24
165.101.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Validity
Not Before: Jul 9 04:50:53 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3f4c2-09cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:4f:c0:7a:9a:bf:7d:9b:dd:95:4c:34:67:
c8:19:cc:a2:e2:54:99:b4:48:29:d4:54:82:4d:f5:
00:79:ef:16:58:7b:68:ce:fd:73:2b:f7:32:84:6b:
38:47:86:0c:3a:cd:b4:2c:2a:59:72:ec:c8:fc:83:
89:51:3f:1b:c7:b4:62:16:be:e1:9e:c2:dd:f0:56:
e3:4a:7f:e6:09:1c:c0:a1:4e:bc:ac:f5:d1:1e:d6:
cd:9d:01:5e:d7:79:9d:56:f3:11:ff:f9:df:da:1c:
a7:b3:59:83:ee:da:65:ba:c4:39:ec:02:c2:91:ec:
03:86:44:e6:cb:fd:4e:92:f1:3f:56:57:3a:b8:59:
ed:a8:c3:fe:25:f6:54:a3:17:03:28:1c:4c:87:2e:
c4:21:8c:d7:3a:24:04:ff:c9:17:c8:aa:6f:7e:83:
bd:89:63:76:44:44:23:e5:08:59:db:2a:a9:b2:e3:
dd:fb:4e:e1:5e:5f:ba:4e:2b:5f:1f:52:89:63:d6:
24:a4:10:9d:87:fb:0f:e2:4f:2f:b0:ee:08:84:ac:
74:5f:2f:99:bc:11:d5:d9:cf:94:fa:87:64:f1:95:
b3:d8:6d:4f:4f:ea:e7:17:4b:82:28:34:21:05:1e:
1b:87:7a:d5:7f:e3:41:e2:ba:4e:62:7b:81:59:64:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:41:3D:73:B6:80:E8:FF:FC:69:1E:61:D4:17:46:81:1B:60:81:90
X509v3 Authority Key Identifier:
keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/4DC60A785C7F11F089D20138C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.74.0/23
Signature Algorithm: sha256WithRSAEncryption
83:f7:b3:40:5b:c8:0f:77:12:37:2d:2e:1c:21:b7:06:90:92:
a4:bc:96:ca:4c:dc:c1:b8:c8:c6:29:45:bd:9d:d5:53:a7:9a:
27:0b:3f:59:6d:b4:d1:20:b8:c8:0f:f0:37:6c:1d:eb:10:d3:
68:0e:8a:72:e6:01:2e:2d:9d:ec:1f:b7:32:0a:f7:36:22:29:
6e:13:d7:9a:5b:5f:37:da:85:02:09:69:43:fa:bf:c4:8c:dd:
d0:55:b3:6d:68:e2:c5:57:a6:b0:39:c8:72:48:35:d9:74:b5:
58:91:b6:c2:ae:94:55:7d:f4:b8:45:23:a6:7a:07:79:2b:f2:
40:88:47:c5:6b:c4:44:95:a3:c2:7e:26:be:4b:c9:77:42:9a:
e2:18:0b:db:9b:c4:a5:b5:c9:6c:4a:c0:b1:e8:74:53:63:8d:
17:46:8d:fd:9a:33:fe:b0:1d:11:aa:24:02:15:1c:78:60:26:
e9:d3:12:3e:f3:3c:b5:92:ef:64:9f:8e:fc:ef:2d:6a:1e:70:
96:ab:9c:ac:4e:2f:79:95:97:18:e7:b9:b5:0f:9f:fb:53:a3:
7d:41:1b:23:4d:e5:b8:ff:d8:21:61:b2:e0:23:ed:d0:df:7a:
bf:bc:cc:eb:76:0c:01:a3:0a:2f:f6:d4:72:34:35:4c:dc:ea:
2e:45:a9:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:20 2026 by rpki-client