
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/78040D1CC38511F1B940358A4211F970.roa
File: 78040D1CC38511F1B940358A4211F970.roa (raw, json)
Hash identifier: q7lMHkfc3Kg57FunRBoqrPu8lvqmyZy6KVAf8O0fstk=
Subject key identifier: A6:DF:A9:DE:95:70:0E:F1:B4:FB:16:9A:99:A2:9F:4A:24:C7:9C:BE
Certificate issuer: /CN=A91AC70D/serialNumber=1D144CE260195E8CB35F8F288731E2EA08800661
Certificate serial: 16
Authority key identifier: 1D:14:4C:E2:60:19:5E:8C:B3:5F:8F:28:87:31:E2:EA:08:80:06:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/78040D1CC38511F1B940358A4211F970.roa
Signing time: Fri 09 Oct 2026 02:02:24 +0000
ROA not before: Fri 09 Oct 2026 02:02:24 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 23602
IP address blocks: 124.40.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.crl
rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 10:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC70D, serialNumber=1D144CE260195E8CB35F8F288731E2EA08800661
Validity
Not Before: Oct 9 02:02:24 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac84b30-8445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:f2:1e:51:fc:7f:23:60:a0:d3:1a:38:ba:
0e:5f:e3:0c:3b:fe:97:43:e5:b1:61:b4:5e:53:7f:
42:f9:8a:a2:86:7d:36:18:0f:32:49:87:ed:ad:42:
90:e4:7e:9a:e3:2d:fb:87:3f:96:26:51:a2:1c:fd:
cc:2e:05:2a:19:df:90:68:ef:07:c9:63:b8:2f:f1:
c2:9a:31:52:b0:d7:98:84:d4:6a:37:d0:b0:27:60:
b8:52:8d:d8:77:fc:81:ea:ca:39:54:be:a8:28:05:
88:a2:c9:43:cd:6f:38:54:89:20:66:97:bb:66:e3:
1e:63:d5:f8:89:c7:8d:ad:01:d0:ec:32:b2:97:d9:
8c:74:42:d8:7f:7e:28:e8:70:88:d7:de:68:31:aa:
8a:dd:53:50:c2:ed:a5:bf:82:8f:a4:87:98:94:fd:
4e:d3:49:27:fb:91:80:3b:59:40:29:ce:0d:30:f5:
07:32:7b:b7:6b:a6:e9:02:7e:08:cf:e2:0f:cb:90:
4c:87:23:08:1c:74:22:ca:0c:c7:4d:ec:fc:e0:17:
b8:db:a9:61:7b:85:68:c7:78:3d:d7:7a:43:90:86:
2f:2f:5e:9e:c7:5a:eb:03:05:8f:e3:b3:d6:4e:02:
a2:06:28:3e:2f:d8:b3:43:c0:25:3b:ca:3d:9d:05:
1f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DF:A9:DE:95:70:0E:F1:B4:FB:16:9A:99:A2:9F:4A:24:C7:9C:BE
X509v3 Authority Key Identifier:
keyid:1D:14:4C:E2:60:19:5E:8C:B3:5F:8F:28:87:31:E2:EA:08:80:06:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/78040D1CC38511F1B940358A4211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
124.40.232.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7b:af:4c:eb:a1:bb:dc:9e:fb:90:d0:e8:ed:cc:40:fa:7e:
c0:96:b8:22:e1:9d:b3:32:d2:f9:c8:29:67:31:bd:d3:7d:c2:
6c:10:bb:98:85:7b:40:75:25:7c:0e:7f:fe:cd:24:39:d9:8d:
8c:30:be:70:5b:6f:be:f7:1a:cd:6b:ab:de:d4:4a:65:80:36:
18:c6:1d:e9:ca:cf:1a:3f:b3:3e:08:49:9b:9a:28:a6:85:9e:
f8:1d:b2:30:1d:7a:5e:4c:41:2e:30:53:7f:c9:f4:a1:e2:48:
41:6f:7c:fb:e6:ba:39:6f:7a:77:08:5a:af:33:3d:34:39:4f:
58:23:9a:6c:95:d5:c1:3e:11:7a:16:30:a4:76:96:80:3b:40:
c5:cc:6a:ed:d8:3d:e6:6d:61:ec:df:49:5e:81:92:ce:63:7e:
40:67:50:af:52:37:ce:36:91:0e:8d:87:93:a7:fb:ff:1a:27:
0b:97:5a:c7:38:8e:66:a9:02:a0:c4:34:e7:f7:86:29:a0:2a:
f0:85:be:09:90:83:22:6f:24:2d:53:1e:c7:ba:da:88:b1:be:
94:bc:cd:f7:c5:a4:6f:f0:f7:fb:4f:d5:07:e4:7d:91:58:3a:
c0:29:e4:20:71:91:b9:f8:28:08:bf:62:17:cd:2c:78:30:ea:
00:c0:54:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 11:30:58 2026 by rpki-client