
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/7A8706087CA011EF8491607DC4F9AE02.roa
File: 7A8706087CA011EF8491607DC4F9AE02.roa (raw, json)
Hash identifier: b4sgJcDJhftGhDWysYunsu/KDke3XRuXY3MfBbMHDRE=
Subject key identifier: 4B:FE:63:86:C9:A5:45:E9:53:49:70:2E:C0:0E:9C:B9:1E:4E:13:77
Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F
Certificate serial: 01FF
Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/7A8706087CA011EF8491607DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:36:35 +0000
ROA not before: Wed 09 Apr 2025 03:09:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151061
IP address blocks: 103.126.40.0/23 maxlen: 24
2001:df2:37c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl
rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F
Validity
Not Before: Apr 9 03:09:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3de73-4407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:da:98:40:de:60:92:c6:3a:93:75:5c:d4:dc:
e4:73:d2:b5:fe:27:06:4b:c4:d5:d1:f9:bd:82:b7:
31:f4:e7:cb:eb:cd:ad:84:21:a9:9f:0c:fc:0b:1c:
e2:83:df:0b:d0:a3:08:c4:55:7b:c2:53:c5:55:ba:
41:73:45:3f:8a:d1:11:c7:b3:92:96:0d:3a:ed:fb:
af:50:4b:e6:44:35:64:5a:d0:bc:ae:02:e1:b1:ed:
32:35:90:b1:ec:07:f3:aa:1e:3e:61:d5:9a:2f:d5:
9f:df:e3:aa:65:5f:e6:1d:38:bb:c9:d1:1d:a5:d4:
12:45:df:9f:71:d2:8a:93:83:1c:84:e8:00:7f:88:
73:0c:37:39:6f:a5:b6:9b:f3:65:e0:24:f8:ca:65:
25:23:46:83:5d:32:65:15:8b:6f:cd:af:b7:11:4b:
33:69:d7:d5:a1:90:b6:b8:99:15:48:7b:4b:75:fd:
20:55:56:b5:02:ac:f5:42:14:c9:ed:20:3e:06:45:
dc:31:2c:da:de:5d:f1:e1:94:6f:43:cf:73:9b:9c:
20:a7:bb:4e:2b:41:dd:c1:4d:29:cb:42:60:4e:85:
99:a7:9d:c6:2a:f1:24:88:93:e1:6d:7d:9a:39:9c:
3e:c8:42:2c:76:e9:06:cf:82:7e:88:b5:76:77:13:
1e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FE:63:86:C9:A5:45:E9:53:49:70:2E:C0:0E:9C:B9:1E:4E:13:77
X509v3 Authority Key Identifier:
keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/7A8706087CA011EF8491607DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.126.40.0/23
IPv6:
2001:df2:37c0::/48
Signature Algorithm: sha256WithRSAEncryption
62:54:f1:8b:fa:be:11:37:cd:bc:5c:19:7c:44:e4:71:ba:75:
50:c9:7d:ac:11:af:02:3a:50:5f:ac:dc:ad:d7:3e:8d:ff:a2:
9f:a3:3f:1c:59:de:c9:3b:94:91:15:29:47:66:21:97:34:67:
27:05:70:0e:aa:f2:d6:2c:c9:53:9b:c0:25:99:5b:20:d8:a2:
fb:ed:24:88:94:46:bf:13:64:7d:2f:12:2f:cc:47:6d:6b:96:
aa:bd:cb:3e:37:2b:3c:16:96:53:bc:b5:43:26:c1:67:10:77:
53:2a:1c:11:be:6d:08:5a:8e:69:63:be:81:2a:ba:0e:92:5d:
5d:e5:3f:17:56:6a:70:39:4c:9b:22:0e:8c:a3:d6:8b:1e:f1:
4f:06:35:b9:7d:e9:bb:e5:93:09:bc:1d:92:ee:62:19:02:7d:
11:6f:11:a6:11:ac:17:64:63:fb:73:5a:80:f0:f0:85:77:30:
0b:2b:b9:84:d1:28:06:c3:5e:85:24:8f:73:97:0e:43:44:82:
74:c2:4e:87:ea:6a:5f:2d:09:16:06:ac:ec:00:34:f7:46:6e:
b8:0d:3b:6d:d8:1f:6f:b4:1b:fa:1a:84:03:e4:4a:14:cd:3c:
07:73:20:11:05:70:e0:e8:7c:bd:56:5b:48:94:72:95:69:31:
4b:a0:de:94
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx
OUE5Nzc0MEYwHhcNMjUwNDA5MDMwOTE3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZGU3My00NDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2tqYQN5gksY6k3Vc1Nzkc9K1/icGS8TV0fm9grcx9OfL682thCGpnwz8Cxzi
g98L0KMIxFV7wlPFVbpBc0U/itERx7OSlg067fuvUEvmRDVkWtC8rgLhse0yNZCx
7Afzqh4+YdWaL9Wf3+OqZV/mHTi7ydEdpdQSRd+fcdKKk4MchOgAf4hzDDc5b6W2
m/Nl4CT4ymUlI0aDXTJlFYtvza+3EUszadfVoZC2uJkVSHtLdf0gVVa1Aqz1QhTJ
7SA+BkXcMSza3l3x4ZRvQ89zm5wgp7tOK0HdwU0py0JgToWZp53GKvEkiJPhbX2a
OZw+yEIsdukGz4J+iLV2dxMeDwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEv+Y4bJ
pUXpU0lwLsAOnLkeThN3MB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5
N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk
QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkEyQUIvMTExRTU1RTAwOTdFMTFFRUFFN0YzNTFGQzRGOUFFMDIvN0E4NzA2MDg3
Q0EwMTFFRjg0OTE2MDdEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ34oMA8EAgACMAkDBwAgAQ3yN8AwDQYJKoZIhvcNAQELBQADggEB
AGJU8Yv6vhE3zbxcGXxE5HG6dVDJfawRrwI6UF+s3K3XPo3/op+jPxxZ3sk7lJEV
KUdmIZc0ZycFcA6q8tYsyVObwCWZWyDYovvtJIiURr8TZH0vEi/MR21rlqq9yz43
KzwWllO8tUMmwWcQd1MqHBG+bQhajmljvoEqug6SXV3lPxdWanA5TJsiDoyj1ose
8U8GNbl96bvlkwm8HZLuYhkCfRFvEaYRrBdkY/tzWoDw8IV3MAsruYTRKAbDXoUk
j3OXDkNEgnTCTofqal8tCRYGrOwANPdGbrgNO23YH2+0G/oahAPkShTNPAdzIBEF
cODofL1WW0iUcpVpMUug3pQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:57 2026 by rpki-client