
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7E87079C721B11EF81654E68C4F9AE02.roa
File: 7E87079C721B11EF81654E68C4F9AE02.roa (raw, json)
Hash identifier: Ofcv64QiRuJ8e1Cn8cx7vEXXUxb7GlJHfjbCgc8i+PA=
Subject key identifier: 34:B3:B4:B8:90:1F:C0:8D:0F:61:4C:1B:E0:29:4A:D6:8D:74:B8:DB
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 0259
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7E87079C721B11EF81654E68C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:17:00 +0000
ROA not before: Wed 31 Dec 2025 04:24:27 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 140618
IP address blocks: 202.28.72.0/24 maxlen: 24
202.28.73.0/24 maxlen: 24
202.28.74.0/24 maxlen: 24
202.28.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 31 04:24:27 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a490ac-525b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:60:c9:0f:c8:37:24:a1:e8:16:15:f1:70:
87:03:48:9b:15:50:46:49:74:e1:c5:16:17:f6:b3:
36:d5:93:97:81:1b:41:43:13:e6:74:85:38:f7:66:
55:38:5d:fb:f2:ad:8b:a0:9d:93:ff:b1:15:ae:15:
8b:60:77:e8:b1:59:b0:1e:c1:ce:3b:08:6b:c7:65:
53:80:28:d2:17:da:af:d1:90:09:19:0f:31:36:59:
97:d7:7d:39:db:50:ec:18:14:f8:59:ef:e7:04:be:
3a:bf:fa:e4:42:83:d5:89:13:cf:51:45:30:14:09:
9e:19:1d:02:f4:8d:66:e2:b9:35:d3:7b:63:e1:d4:
90:8c:2d:49:08:b5:5d:48:23:c8:9a:17:ed:7b:71:
81:01:3e:55:7a:aa:59:38:75:39:16:10:8c:30:63:
f8:66:e2:02:0d:9e:64:8d:f5:27:0b:0e:5a:04:08:
f1:7e:76:dd:05:db:be:97:8d:55:ca:89:68:a9:3e:
c9:6b:5c:6a:95:20:1d:bb:26:33:78:50:d7:76:81:
e8:6e:0f:48:0c:4b:74:84:b5:d4:5d:37:01:5b:c0:
2a:31:bb:3a:be:15:fb:af:f1:0a:b0:7c:d8:f9:0d:
5e:b5:97:04:de:12:ac:e3:94:96:dc:b7:3b:df:ff:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B3:B4:B8:90:1F:C0:8D:0F:61:4C:1B:E0:29:4A:D6:8D:74:B8:DB
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7E87079C721B11EF81654E68C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.28.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:d2:d7:89:c3:82:bf:49:52:35:d6:a9:8c:18:9d:ed:15:ad:
c9:c9:69:94:84:ea:b0:4e:f5:be:4e:a3:ee:22:d7:c1:e2:94:
3b:d8:00:3a:40:9f:9d:42:c9:1e:53:3d:29:58:2e:d2:78:6d:
60:d0:2f:60:a7:94:50:a9:cb:1c:7f:c4:35:ba:90:dc:44:b1:
0b:3b:81:02:ef:21:95:e7:f8:90:89:c4:1e:c5:9e:71:37:3f:
41:35:5f:53:bb:ad:b9:0a:75:23:30:7d:1c:40:95:3d:01:2f:
cb:8f:5d:3a:ef:1c:a0:85:cd:52:66:d9:69:0d:b3:be:95:2b:
ff:18:a5:18:f5:25:5a:7e:90:3f:95:19:b2:69:d9:da:cc:46:
ff:e3:6c:24:53:00:0b:0a:65:4c:ba:9a:92:4b:c9:95:64:2f:
27:97:42:ce:84:04:5d:88:be:a4:6a:ce:46:3a:47:aa:74:1a:
dc:c4:14:ae:e8:21:1e:97:fa:2b:79:d0:35:9e:00:3b:e4:17:
33:ba:c6:c4:86:3c:b7:7f:c4:ae:dd:c3:7b:90:63:61:14:8c:
c2:0c:45:7c:11:cf:2c:6e:8e:0a:88:7f:8e:a0:0e:73:e4:bb:
86:af:74:79:1d:19:ee:61:8b:c3:c7:36:f4:3e:4f:3b:e3:19:
e4:0b:90:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:44:55 2026 by rpki-client