
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/E7EFEDC07C1F11EB95B6492DC4F9AE02.roa
File: E7EFEDC07C1F11EB95B6492DC4F9AE02.roa (raw, json)
Hash identifier: qvzE76PFy2NPN5rRDpxGNeqZ+8JdO7LEoeTuH6PPc/o=
Subject key identifier: D7:BB:C6:21:FE:B6:36:75:33:B6:8D:07:FF:53:E1:D2:0E:F3:82:5A
Certificate issuer: /CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B
Certificate serial: 080D
Authority key identifier: 28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/E7EFEDC07C1F11EB95B6492DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:26:08 +0000
ROA not before: Wed 08 Oct 2025 21:22:39 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138179
IP address blocks: 103.129.120.0/22 maxlen: 24
114.141.112.0/21 maxlen: 24
192.171.104.0/21 maxlen: 24
2403:7cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl
rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2061 (0x80d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C744F, serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B
Validity
Not Before: Oct 8 21:22:39 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4305f-e35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:70:da:13:72:f9:15:c9:3c:0e:7b:9b:a4:
b6:12:d0:db:38:64:14:d7:4c:77:6b:fb:e2:95:12:
80:04:47:be:33:c1:b2:86:5c:50:a7:f9:b5:91:33:
b3:dc:cf:b8:ff:06:b8:30:ce:b4:28:65:f6:1e:54:
0a:17:a8:89:79:37:3d:b9:8c:15:96:2b:ac:ef:d4:
2a:81:ff:f4:26:6a:4a:c3:d7:7c:57:aa:38:f5:aa:
8e:76:83:40:6c:d1:a1:1e:aa:cd:e6:0e:e9:8a:55:
a7:85:fc:0d:6d:cd:ef:e8:9f:6c:55:dd:83:32:ef:
89:7f:df:c6:37:77:d1:78:21:a6:c0:58:8b:2b:0b:
b5:e6:81:17:2e:88:45:13:d8:f5:42:c6:87:00:40:
a7:a0:e5:de:4e:67:d3:11:51:78:fe:ba:61:2c:fb:
2e:a4:5a:d2:5a:2d:51:16:2b:fb:43:56:4a:1a:f7:
7e:44:fa:b9:cd:7f:4d:dc:ac:43:e2:07:42:40:22:
0a:63:f8:74:2b:48:08:01:de:77:29:82:2a:c8:d9:
b3:57:29:49:da:ae:fe:9d:20:07:23:d7:c0:9e:38:
ca:49:1b:18:20:47:93:64:df:6a:f0:78:ee:e4:80:
59:50:52:22:08:85:03:dd:e0:0f:f9:1a:11:cc:0f:
cb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BB:C6:21:FE:B6:36:75:33:B6:8D:07:FF:53:E1:D2:0E:F3:82:5A
X509v3 Authority Key Identifier:
keyid:28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/E7EFEDC07C1F11EB95B6492DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.129.120.0/22
114.141.112.0/21
192.171.104.0/21
IPv6:
2403:7cc0::/32
Signature Algorithm: sha256WithRSAEncryption
a8:b3:70:99:b2:2d:c0:b5:c9:a3:07:8b:a5:a6:d9:d6:75:78:
14:d4:cd:c0:f3:ed:a3:e3:2b:37:aa:d2:34:23:d5:71:cf:dc:
79:65:de:bc:49:e5:64:99:7e:ef:28:ef:dc:b6:7b:f9:36:81:
5e:0e:c1:5e:dd:5b:1e:fd:bc:36:a7:03:56:28:7d:e1:d6:6f:
3a:43:42:e3:9b:04:e9:5f:f0:8b:d5:b9:2d:97:f6:d3:a6:e0:
25:cb:9c:dc:69:1b:08:7c:71:2a:11:e7:e6:9e:b2:06:20:d5:
10:25:f9:36:1b:4e:bf:1d:6e:91:86:e4:0a:f1:7c:8b:3f:ad:
ac:73:0e:7c:3c:01:08:ab:f4:6e:85:bc:b9:35:97:30:d3:6a:
d1:2b:ae:cb:c3:e9:e3:aa:e3:3d:ae:a5:37:6a:32:8d:56:61:
0c:8a:8d:da:ac:2f:3e:21:80:58:a5:39:4e:8c:59:97:c4:c7:
33:7a:c9:e7:8e:bd:b3:5a:79:89:26:80:a7:5a:fe:3a:c1:ea:
af:7d:33:0a:88:23:34:a8:33:a5:43:28:00:4e:32:4f:2f:55:
6f:56:fb:58:5d:94:56:50:eb:ad:6a:ae:64:e5:6e:92:4a:5c:
01:18:76:cc:81:37:d9:d7:fc:9a:00:76:be:2c:b9:55:58:de:
41:1a:d6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:02 2026 by rpki-client