
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/767E7B3CA60211EFBFCDB65FC4F9AE02.roa
File: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (raw, json)
Hash identifier: vf7yinj1S9cWrGMf1fGP8uJmMGRAcRT+S6wc+GqOAfM=
Subject key identifier: FD:CF:F0:51:7E:3F:14:3D:82:78:59:F0:49:1A:C4:EF:C5:74:F1:94
Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Certificate serial: 35B6
Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/767E7B3CA60211EFBFCDB65FC4F9AE02.roa
Signing time: Tue 28 Jul 2026 15:17:52 +0000
ROA not before: Tue 28 Jul 2026 15:17:52 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 16509
IP address blocks: 116.214.100.0/24 maxlen: 24
116.214.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl
rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13750 (0x35b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8
Validity
Not Before: Jul 28 15:17:52 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a68c820-52ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:8b:4c:fe:31:53:d5:38:8e:22:43:13:40:
3b:29:ff:af:4e:46:c3:9d:e5:f2:03:b0:b2:32:66:
ef:02:4d:18:dd:b4:16:1e:49:3c:fd:2e:7c:76:ad:
d3:12:ae:9d:e7:f0:2e:af:47:11:79:5c:87:75:08:
1c:00:8a:71:72:55:c2:7f:05:90:08:7f:50:bc:58:
0b:df:db:07:5c:4c:04:9a:c9:ac:15:af:b2:5a:42:
4c:c9:70:b4:08:31:3e:01:d3:0b:c8:28:ec:38:19:
19:38:54:2c:3f:eb:58:78:7d:cc:52:cc:47:7d:83:
02:7b:ab:d8:9a:09:09:26:40:ce:ab:2c:31:15:6e:
05:bc:a0:08:1d:cc:6a:55:55:e8:ac:0d:9c:66:f3:
62:98:5b:7d:d7:22:2a:a4:1d:d9:86:d8:18:1a:5a:
9d:f1:e1:f9:ac:cf:b8:b6:d2:08:77:0b:ab:2c:25:
86:67:47:b4:12:c9:bf:d1:b0:c1:81:e5:93:25:17:
dd:ff:15:bf:49:33:1d:7d:99:d1:b3:c8:7a:72:35:
0a:8a:6c:5e:ee:d6:d0:fe:f5:3c:a9:6d:01:74:4f:
db:ef:43:af:d0:75:44:5b:4a:51:0b:ea:94:a5:41:
8b:fe:e6:f9:91:2f:b7:e9:b0:ab:c3:82:43:31:3a:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CF:F0:51:7E:3F:14:3D:82:78:59:F0:49:1A:C4:EF:C5:74:F1:94
X509v3 Authority Key Identifier:
keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/767E7B3CA60211EFBFCDB65FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.214.100.0/23
Signature Algorithm: sha256WithRSAEncryption
09:29:0e:6d:54:f6:87:41:9e:a8:1e:b9:f1:ca:89:03:e3:23:
65:19:db:d5:68:32:56:bb:55:e8:35:53:4a:d3:c5:67:45:9a:
e9:b5:11:f4:58:63:a8:89:09:2e:18:48:67:7d:d5:de:52:13:
17:6d:1f:9c:32:8a:ea:34:20:c4:e0:0b:8b:9c:9e:27:6a:7a:
65:b6:91:ce:ea:a7:a6:a8:d2:c2:f5:a5:da:97:fe:1b:6e:2e:
fb:59:ae:bc:3b:b6:41:7d:6c:4c:79:23:b3:e1:e0:5a:c3:27:
62:a0:6c:00:02:56:39:c2:ce:53:04:43:f0:7b:4d:55:85:5b:
ea:04:8f:b4:e4:d3:a5:d8:d6:a1:64:ec:66:83:e4:e7:10:12:
d0:f7:d3:1e:98:17:62:90:5e:fd:aa:3c:8f:f4:f9:5b:ec:b3:
d0:85:ba:46:b4:88:57:7b:f1:0b:80:73:28:83:00:45:c1:55:
18:46:84:54:7a:85:a6:dc:be:b7:fb:26:53:72:6e:f7:fe:33:
79:62:a9:0d:47:29:98:4c:a7:9d:83:0f:d2:b2:4d:bd:7d:4e:
25:e1:ef:b3:8b:c2:a5:23:90:c5:98:ee:e6:6f:f4:be:2e:10:
9b:4b:0d:69:38:f3:71:e2:a4:c8:62:f4:6e:ad:c2:d2:6d:99:
c6:2b:2c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:47:48 2026 by rpki-client