
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/0A7BC528913611EBBD9B811AC4F9AE02.roa
File: 0A7BC528913611EBBD9B811AC4F9AE02.roa (raw, json)
Hash identifier: Axv4ofsSe90yP+Tj74eBTq7TDNPSfa7eV4MAl8BctRE=
Subject key identifier: 31:5F:8B:47:1E:C4:DA:E5:DB:A5:C3:BF:76:0A:A1:00:26:53:9C:0D
Certificate issuer: /CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Certificate serial: 06FB
Authority key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/0A7BC528913611EBBD9B811AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:48:18 +0000
ROA not before: Sat 06 Dec 2025 21:34:43 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9738
IP address blocks: 103.95.77.0/24 maxlen: 24
103.95.78.0/23 maxlen: 23
202.176.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl
rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEAE7, serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA
Validity
Not Before: Dec 6 21:34:43 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46dd2-78f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:06:ea:d9:5d:ab:2d:c6:2e:7e:47:40:ab:09:
1b:fa:39:43:e5:d7:32:c2:98:e6:b0:0d:e9:ee:2f:
70:f1:9d:5a:50:a5:71:aa:ef:23:ab:24:68:db:3d:
69:e7:f0:87:6f:77:86:60:67:5a:44:56:19:08:20:
c9:b9:28:8a:04:6e:f2:7f:92:f8:10:81:2e:41:fe:
bc:6f:23:ab:1d:b2:8a:b6:58:d4:84:87:f4:73:17:
81:3e:64:96:d1:b4:d9:0a:14:bb:89:be:c1:e9:b8:
e3:d5:65:77:6b:70:1e:ca:94:2d:9a:3c:cd:a4:9e:
7a:6e:e9:15:99:ba:45:cb:8b:55:3b:50:d6:dc:7a:
c7:fb:d7:b0:ee:ae:bd:f1:18:42:35:08:36:7b:39:
5e:50:df:df:42:4d:f1:30:1e:4a:b9:ad:46:0e:e2:
5e:71:56:4f:55:81:28:7d:c1:17:30:49:5a:2f:3b:
f5:52:13:dd:8f:f2:56:eb:5b:3a:83:3a:32:dd:be:
84:65:20:0e:26:c4:c3:ff:d4:6e:4e:cb:07:40:4a:
08:6f:ed:6b:e3:27:d4:db:03:90:1d:21:25:15:b4:
3b:63:6c:d9:91:86:40:52:57:c5:78:1e:a5:6e:2c:
47:bc:b1:e2:35:89:c9:71:98:05:fe:26:a1:1f:db:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5F:8B:47:1E:C4:DA:E5:DB:A5:C3:BF:76:0A:A1:00:26:53:9C:0D
X509v3 Authority Key Identifier:
keyid:DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/0A7BC528913611EBBD9B811AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.95.77.0-103.95.79.255
202.176.15.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a6:2b:68:34:61:22:86:9f:06:9f:d0:61:0f:1b:c3:50:1b:
7c:df:5b:46:7e:8e:45:73:35:b4:4d:c9:1c:63:1c:18:80:b4:
5c:83:59:19:c1:b1:11:5b:a7:72:c8:c7:e0:a6:1a:83:a9:1f:
c2:55:1a:32:df:a4:aa:49:dd:56:2f:a9:2c:67:c2:66:b6:0c:
25:f5:c1:70:e1:6b:11:d5:49:61:44:79:9f:3e:43:10:2b:c7:
18:89:3e:a6:45:e3:a8:97:54:8a:97:aa:2f:fa:15:fe:5a:90:
01:76:7e:52:50:57:e3:72:34:ab:5d:97:14:e8:ac:4e:db:3e:
0d:92:df:9f:a2:16:19:29:77:1d:84:12:bc:46:3a:7e:8d:af:
1b:e1:99:1a:87:97:8c:fd:52:d5:b5:05:e8:12:bd:d9:89:ba:
18:a7:8a:00:8f:5e:42:e7:8d:d1:83:b8:75:e6:b3:78:43:ba:
d8:c4:3c:7c:77:4f:ce:55:d9:5c:5b:46:44:8b:7f:e5:52:c0:
d3:e2:02:89:37:16:02:0d:c7:f5:96:38:93:5d:6f:2b:c7:61:
f2:10:5b:4d:0c:97:e9:09:5d:13:51:e2:16:0b:da:ec:36:68:
d1:f4:10:f0:f1:d5:ac:eb:c0:64:be:b5:07:9e:0b:83:5f:86:
b7:f7:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:25 2026 by rpki-client