
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/764601EE6A7A11EFAF10EC37C4F9AE02.roa
File: 764601EE6A7A11EFAF10EC37C4F9AE02.roa (raw, json)
Hash identifier: CJtNext5PGiHGHfRvis01icRrUClz7gxR8gb7K0FV7o=
Subject key identifier: 1D:4A:1B:37:D0:20:BF:44:95:20:DD:1F:FB:1F:A0:46:80:E0:C2:8D
Certificate issuer: /CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
Certificate serial: 269E
Authority key identifier: 87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/764601EE6A7A11EFAF10EC37C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:27:13 +0000
ROA not before: Wed 30 Jul 2025 15:52:59 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 38071
IP address blocks: 58.147.168.0/21 maxlen: 24
223.27.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl
rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9886 (0x269e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5030, serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14
Validity
Not Before: Jul 30 15:52:59 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a42290-0dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1a:af:4c:4a:f2:08:a7:29:34:f7:09:5a:83:
e7:43:02:2e:96:60:99:da:b2:b1:da:19:bc:3f:a6:
b3:5f:1a:37:b5:d7:51:37:e1:b2:61:f6:ba:8c:4a:
ff:41:cd:25:72:b3:fa:6b:d1:cc:a7:17:3d:51:16:
02:7d:54:6e:e6:fd:e9:c9:08:1c:6f:f3:0a:d6:54:
b9:52:46:8b:db:b2:68:53:8b:81:9e:59:dd:db:0d:
19:6b:56:5f:bf:d5:bc:10:bb:1f:ea:78:6d:64:91:
79:8f:d1:ab:eb:b3:08:31:90:e7:52:32:44:a2:83:
a1:f0:20:3e:3b:96:ed:9f:f4:e7:da:d5:ed:c1:34:
11:72:8f:8a:ce:c2:fb:28:a8:54:e4:78:b7:d5:de:
d0:4a:db:1c:d5:78:91:fb:e6:61:7a:2f:7e:a2:62:
4b:dd:7a:4d:84:0b:85:a7:f5:69:b8:fa:23:a6:f7:
f5:dc:aa:c7:53:29:f0:b1:87:99:cd:82:54:7d:6c:
9b:4e:8e:01:35:4e:c0:d1:39:d2:07:76:29:5e:50:
b8:44:62:48:66:aa:b7:b1:10:05:01:ea:77:c2:4f:
2c:5b:4c:e3:1e:15:87:5c:85:a1:1b:7b:2c:d3:63:
ea:e8:e9:e9:49:7b:4f:ac:0d:f0:1c:1b:8e:2d:4d:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4A:1B:37:D0:20:BF:44:95:20:DD:1F:FB:1F:A0:46:80:E0:C2:8D
X509v3 Authority Key Identifier:
keyid:87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/764601EE6A7A11EFAF10EC37C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.147.168.0/21
223.27.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:13:4c:7c:b0:67:d9:f7:3e:ef:31:b0:37:8a:3a:83:81:58:
4a:9f:5e:7d:7e:81:5b:34:5c:39:fe:84:27:c7:0b:86:8e:a8:
d4:00:5a:72:fd:51:0e:30:1c:db:e0:44:23:95:9d:33:3e:2d:
03:ff:e9:61:e0:4d:80:81:10:c5:ad:df:49:4b:8f:88:6b:00:
42:3e:f1:c5:55:6f:98:9c:a7:e6:2c:14:6b:50:98:3d:64:ee:
98:7d:f5:06:53:17:a2:cd:a7:40:35:21:3b:13:d8:94:4e:86:
ff:ed:5f:91:a6:61:0c:d1:ca:23:44:be:76:7d:35:95:34:73:
2b:61:7f:12:da:70:75:ea:17:ed:c9:f8:9c:4a:66:2c:87:42:
8b:29:20:31:15:cf:f9:b8:fd:f4:29:ba:f1:4c:4e:e3:d3:96:
82:ec:31:34:2b:5e:82:02:51:e4:32:ed:b2:05:ca:43:e8:96:
dd:82:2a:dd:c8:ae:93:d3:ba:55:f9:d1:9d:4b:93:aa:53:e2:
32:f7:d3:e3:23:ef:d9:67:4f:8b:4f:52:60:c0:b8:a0:c3:e1:
8f:36:b0:5d:d1:a5:53:b7:1d:3c:e0:2e:c6:a4:52:72:05:b0:
52:78:f3:bc:1e:00:76:d7:65:da:df:3d:5b:08:f4:35:f5:a1:
bf:2e:49:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:29 2026 by rpki-client