
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7789A03E061D11F1B16329A6233D8C67.roa
File: 7789A03E061D11F1B16329A6233D8C67.roa (raw, json)
Hash identifier: xoyMaP8lPAOFuEmRo8v03VuDXi/OSIy2VINIy00y/js=
Subject key identifier: 20:E6:CF:79:D9:D0:C6:E4:B1:49:6C:A5:18:3D:60:DD:9F:41:F9:06
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4FAD
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7789A03E061D11F1B16329A6233D8C67.roa
Signing time: Tue 10 Feb 2026 01:11:46 +0000
ROA not before: Tue 10 Feb 2026 01:11:45 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 150818
IP address blocks: 2400:d760::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20397 (0x4fad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Feb 10 01:11:45 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=698a85d1-0c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:a4:2f:03:45:cb:db:0b:79:19:e2:a3:de:
d5:3e:f4:4a:fb:36:5d:f5:a3:4b:60:36:f4:c5:c6:
40:c3:41:31:41:a8:3a:d7:52:ac:2b:6d:11:70:ec:
fa:17:5b:da:7c:85:14:15:13:4f:d9:f1:96:7f:92:
9a:c2:3e:8a:60:b3:4e:dc:c7:d3:aa:4d:e7:08:c9:
76:3e:19:3e:fe:60:7d:60:1a:45:d0:f2:b0:be:5c:
c7:59:20:ec:6d:a4:e2:c3:46:d6:93:1a:23:00:5d:
07:d5:9f:35:e0:31:92:9b:03:4c:69:de:9d:ad:c2:
f2:48:e5:75:fd:7d:71:92:af:a3:4e:4b:99:a7:ed:
f5:26:1c:9a:3f:3a:42:7f:b5:09:88:b4:d6:63:3b:
ac:92:23:c1:73:f8:0b:0a:a3:d1:53:ac:35:47:3d:
50:6c:79:e9:53:cf:a2:f0:cd:d0:ce:f7:df:dc:b9:
81:ee:57:1d:f6:02:5d:74:89:f4:2f:03:0e:bc:0b:
51:81:0c:46:0f:da:d8:1f:e3:68:93:d6:03:f3:75:
71:f7:07:b1:ff:99:be:05:5a:82:46:6f:97:db:3a:
26:15:00:0e:01:27:7a:94:ea:8e:18:e7:b8:70:3b:
76:5e:da:29:62:2b:76:10:e2:66:37:b2:39:11:ee:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E6:CF:79:D9:D0:C6:E4:B1:49:6C:A5:18:3D:60:DD:9F:41:F9:06
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7789A03E061D11F1B16329A6233D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:d760::/48
Signature Algorithm: sha256WithRSAEncryption
9e:90:43:da:3c:6d:7b:4f:95:ee:3f:57:1a:51:3c:75:da:18:
b3:88:a5:75:fd:78:e8:fe:03:60:e3:54:bc:f3:fd:fd:12:79:
da:af:36:e7:74:42:08:a2:4b:dc:dd:76:8a:7e:af:f0:92:a0:
94:f4:01:45:81:a1:85:09:0b:d3:83:c5:e8:eb:4a:be:d4:94:
da:03:82:8d:25:49:f8:69:5f:8d:c1:9b:9a:28:da:f7:46:d3:
10:04:9d:6f:a1:65:a6:52:d2:89:44:cd:df:2d:93:c4:98:3b:
bd:83:36:94:d8:18:d1:30:08:ac:85:da:81:de:f9:50:32:1b:
16:7f:ec:56:1b:4a:93:54:c0:a7:80:f6:f3:99:e5:99:aa:db:
cf:26:55:58:1e:51:5e:77:fe:24:49:c3:7c:a1:92:a6:a5:fe:
5c:3b:14:87:8d:0e:05:b6:27:3d:d4:d7:6b:2f:b8:65:42:2e:
16:d1:ff:1a:94:54:b8:c9:c3:f2:3e:ad:13:40:9b:d1:17:74:
f4:35:20:5f:46:3f:15:1e:f1:38:f6:55:e8:01:f4:82:55:88:
cd:0d:dc:bc:e4:61:15:47:9b:d5:a8:6f:6f:99:6a:39:0b:ff:
45:cc:d9:ab:c0:44:29:8b:18:f4:a8:1d:7d:ba:0e:a3:14:b8:
12:49:48:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:31:26 2026 by rpki-client