
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/74C3FC2413B911F1B7CEB625083D8C67.roa
File: 74C3FC2413B911F1B7CEB625083D8C67.roa (raw, json)
Hash identifier: P4H5FeCoBASYrayJLn/hEkJQo4s7Z0+nN2dTkoyBEgM=
Subject key identifier: 60:C6:79:D7:73:5F:03:E2:BD:7B:B3:2E:5D:3B:CA:EA:AA:34:4A:E7
Certificate issuer: /CN=A91B6A04/serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608
Certificate serial: 37
Authority key identifier: 88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/74C3FC2413B911F1B7CEB625083D8C67.roa
Signing time: Sun 01 Mar 2026 06:01:25 +0000
ROA not before: Fri 27 Feb 2026 08:51:08 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 133694
IP address blocks: 144.79.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl
rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6A04, serialNumber=88FB1D21CB883C97C29ACB77D4D68884B3A7A608
Validity
Not Before: Feb 27 08:51:08 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a3d635-c17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:32:bb:98:b5:b4:6d:cf:45:45:61:07:8b:
8b:db:0b:f7:a8:22:22:60:e4:43:a0:86:a7:ac:ca:
05:b7:d3:dd:a2:f1:79:2a:49:de:1c:4c:b0:5a:3f:
a5:d7:89:02:f5:6e:9d:77:10:7b:b9:2d:f8:bc:b2:
c4:08:62:0f:62:76:39:f9:57:26:68:f4:63:e9:8c:
84:0c:25:1f:70:4e:3f:c5:4b:cc:86:d3:40:b6:35:
ea:2f:0f:53:51:a4:33:bc:9c:95:32:c6:41:08:5d:
1f:33:ee:dc:4f:fd:5d:8f:c9:f8:8b:eb:69:8b:71:
6e:b0:1f:a3:70:28:31:30:98:f9:b2:63:7c:a4:9a:
63:a0:b2:21:10:03:bd:08:d1:5b:80:8b:80:76:70:
1f:30:3a:d7:b4:25:8c:d6:0b:e3:7b:dc:e9:12:19:
b2:9a:ae:88:65:23:d9:a3:26:85:09:a6:b4:ed:7a:
38:9a:98:fa:54:b4:25:b2:a1:bb:2d:28:0d:09:6a:
00:08:63:b5:15:97:f2:0d:19:54:1b:93:d1:f6:4c:
d9:2a:40:f4:26:68:8b:11:65:ac:77:ec:75:8a:03:
8c:e3:b8:60:36:58:d9:78:69:b3:4c:85:d4:84:2f:
b2:f2:de:83:0a:85:ff:0a:1f:38:7e:ae:05:fb:9f:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C6:79:D7:73:5F:03:E2:BD:7B:B3:2E:5D:3B:CA:EA:AA:34:4A:E7
X509v3 Authority Key Identifier:
keyid:88:FB:1D:21:CB:88:3C:97:C2:9A:CB:77:D4:D6:88:84:B3:A7:A6:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/iPsdIcuIPJfCmst31NaIhLOnpgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iPsdIcuIPJfCmst31NaIhLOnpgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/25C5277EC9AE11F098E92745C4F9AE02/74C3FC2413B911F1B7CEB625083D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.8.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b4:97:74:05:23:f7:4a:f2:25:b4:67:07:d2:d9:20:c7:40:
85:b6:cf:13:72:65:fd:93:40:a5:c2:1a:6d:ba:98:fb:ef:39:
5a:5f:d9:d4:02:10:91:a0:a4:27:df:97:26:c2:6a:e1:e1:f1:
f5:61:68:9d:bc:7f:80:72:6d:e5:ff:fa:fd:cd:5c:0f:e6:45:
c7:cf:92:61:06:8e:18:f3:cb:a4:0a:df:8d:3a:4c:a9:97:ad:
c5:35:e1:95:64:27:68:25:0d:a4:fc:b7:cb:59:16:40:b4:d1:
6e:92:6f:56:00:75:aa:bb:60:76:e3:37:d2:03:86:1a:81:19:
ee:97:af:8b:6f:89:67:72:72:f5:ef:fa:f3:40:8c:5e:6a:ca:
93:18:d9:f4:ff:46:32:8e:a6:aa:87:51:04:f1:e5:50:c2:fc:
91:89:6a:42:49:c8:44:af:62:11:c8:8f:49:a4:b8:dc:f5:5d:
16:d3:08:3f:d6:6c:29:f0:db:03:37:6f:60:93:3b:2c:a0:1e:
05:5f:82:fb:d6:b9:5d:fb:f4:c9:89:e0:cf:51:76:f7:81:fc:
83:b7:64:8f:bc:c8:5e:54:33:40:e4:1d:78:c7:23:a9:8c:fe:
cb:0b:3d:ca:60:84:1e:ce:73:7a:6d:bd:42:b3:df:34:84:83:
61:76:bc:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:54 2026 by rpki-client