
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/7AD326AC663911EDA919A02AC4F9AE02.roa
File: 7AD326AC663911EDA919A02AC4F9AE02.roa (raw, json)
Hash identifier: QgXgIU4iewVv/gvtM7nRh4tylfGnpHiAGu1ZYVRzjpY=
Subject key identifier: AE:F9:31:C3:E3:66:6F:AB:21:7A:11:27:52:2A:FA:85:1C:E7:6E:DD
Certificate issuer: /CN=A91BA733/serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
Certificate serial: 030C
Authority key identifier: 47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/7AD326AC663911EDA919A02AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:05:18 +0000
ROA not before: Wed 09 Jul 2025 02:38:41 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 142539
IP address blocks: 103.168.178.0/23 maxlen: 24
2407:95c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl
rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 780 (0x30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA733, serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
Validity
Not Before: Jul 9 02:38:41 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4014e-fb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:a5:b9:4e:fd:ea:43:e0:f4:11:cc:34:17:
e4:54:b4:39:05:89:df:39:dc:1b:e8:2f:53:4b:c0:
b6:2b:7c:f1:d6:6a:4a:dd:65:b5:cb:14:ed:09:52:
83:c9:56:40:20:e1:a3:82:36:55:ae:fd:63:84:e7:
94:50:b4:04:2c:b1:6b:b7:77:72:11:a3:1e:02:12:
9c:50:5c:59:44:8a:42:93:fd:a5:6c:6c:e8:fc:a8:
38:42:c2:b7:af:0d:d5:82:43:4c:3d:5e:d9:32:0d:
19:5c:90:0a:b5:9a:14:64:45:7d:19:63:16:87:9a:
7d:4b:60:d9:70:4c:a5:a6:6c:01:21:8f:0c:92:7c:
d9:a8:1a:07:95:60:43:cc:11:f0:d1:14:17:4c:8d:
46:0b:09:25:b6:18:34:44:e8:8d:c7:e8:aa:28:1a:
e2:e4:8c:91:6f:72:2f:6c:18:01:80:76:ea:70:35:
8c:82:de:7b:11:e6:46:e3:a1:82:60:1a:b4:41:f9:
61:05:9b:ca:38:e2:76:9e:bd:af:e0:a9:6d:ec:27:
80:0a:ea:4e:11:5f:6a:03:43:33:08:60:bd:6c:45:
61:d2:54:c3:c1:27:db:ad:66:c4:19:8d:0e:0b:1f:
f4:11:b5:6f:73:3b:ae:7a:9d:2b:f2:9d:24:a4:00:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F9:31:C3:E3:66:6F:AB:21:7A:11:27:52:2A:FA:85:1C:E7:6E:DD
X509v3 Authority Key Identifier:
keyid:47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/7AD326AC663911EDA919A02AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.178.0/23
IPv6:
2407:95c0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:c7:3c:b9:d4:b3:f9:91:07:4f:5a:39:aa:21:65:54:a7:5b:
1a:c8:1d:ba:97:39:02:4a:5e:60:a8:4d:29:9f:0d:07:7f:54:
cd:aa:06:6a:57:de:cd:a0:cf:b2:5f:5e:28:f5:8d:33:df:06:
fd:32:f0:f3:bf:5f:32:eb:19:a3:f6:7e:7a:a8:7d:c9:83:09:
32:6c:b8:e4:e5:08:8a:df:4d:f1:6f:83:88:55:cd:4d:5e:43:
b7:29:e1:13:78:30:2c:8b:92:36:fb:8e:dc:fc:1b:eb:86:35:
55:4b:f0:06:9e:35:1b:19:79:f1:52:74:d8:5b:5d:c7:40:df:
7f:5d:f2:0b:47:90:92:93:4c:6a:04:3c:33:28:52:4b:b5:ba:
5b:ba:bb:14:d0:ae:77:88:e4:98:8b:95:c6:f8:e6:6f:1d:7e:
40:f9:a1:02:39:2d:b5:74:fc:e7:e9:53:93:96:d6:10:72:82:
29:fa:31:20:86:3f:07:07:09:a9:6e:b1:53:63:13:f4:9b:65:
e5:7c:0b:f4:8b:36:4f:ff:d2:1d:03:86:34:f1:2f:fb:e6:8c:
4c:d4:92:46:d6:58:fc:35:78:d6:89:b9:f0:bb:4e:29:8c:2b:
6f:2a:23:31:35:78:03:f6:09:56:e3:42:a6:02:74:6b:5b:71:
9f:b6:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:36 2026 by rpki-client