
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/750E873CABF211F0BF8FB00EC4F9AE02.roa
File: 750E873CABF211F0BF8FB00EC4F9AE02.roa (raw, json)
Hash identifier: Xbr4HHduQ5p04uMR/+foEnmQEUiUNgTT394PYMTCxSM=
Subject key identifier: A1:B7:03:5D:F4:07:E1:9E:E0:62:43:82:0F:24:C8:A5:9A:78:BC:7D
Certificate issuer: /CN=A91D2CDA/serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
Certificate serial: 0192
Authority key identifier: 0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/750E873CABF211F0BF8FB00EC4F9AE02.roa
Signing time: Wed 09 Sep 2026 04:55:28 +0000
ROA not before: Wed 09 Sep 2026 04:55:28 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 26658
IP address blocks: 43.239.160.0/22 maxlen: 24
103.35.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl
rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2CDA, serialNumber=0E5462596C0C6E77E189B51BE26E25C91538C55C
Validity
Not Before: Sep 9 04:55:28 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa0e6bf-ba68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:f9:9e:e9:cd:cf:cb:7d:99:70:ba:c1:73:
bd:bb:b0:22:98:97:d9:26:c4:cd:43:9f:f6:e8:eb:
44:76:14:45:ff:78:2a:4b:6d:75:07:b9:32:16:bc:
2a:8a:54:90:03:1c:9b:54:5d:a2:78:e2:cc:8a:7d:
70:6a:c6:0c:89:5c:39:48:4e:8b:1b:9d:10:d2:76:
d2:8a:75:2b:b1:b6:43:27:fa:53:6e:fa:f2:22:9e:
93:c9:cc:76:7f:42:6d:1c:0e:61:5c:df:dc:bf:70:
9d:ac:f2:fd:ce:d9:28:f8:33:b6:6a:b0:db:60:7f:
b9:42:1d:be:59:5b:e6:5a:94:91:09:88:52:41:cf:
90:91:4f:ef:b8:ae:19:77:be:d1:fb:10:92:6a:3b:
38:e0:bd:2d:dd:ec:5f:b0:66:be:96:f3:b7:e8:45:
6b:a0:e1:98:11:ef:66:5f:25:f8:ae:87:c4:da:13:
18:bf:d1:87:81:ed:34:a1:84:6e:45:b7:65:3f:ce:
5f:f1:e6:b1:16:06:a3:76:27:37:12:66:fd:52:e1:
c3:48:0e:53:59:24:be:fe:51:2a:33:46:e6:f5:ca:
c6:8e:43:b9:04:ac:13:db:5c:5d:1f:09:69:e7:d3:
35:67:dc:a0:1f:d1:f0:5b:23:6e:9d:f5:a6:6a:fe:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B7:03:5D:F4:07:E1:9E:E0:62:43:82:0F:24:C8:A5:9A:78:BC:7D
X509v3 Authority Key Identifier:
keyid:0E:54:62:59:6C:0C:6E:77:E1:89:B5:1B:E2:6E:25:C9:15:38:C5:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/DlRiWWwMbnfhibUb4m4lyRU4xVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DlRiWWwMbnfhibUb4m4lyRU4xVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2CDA/2C7E72B85A1611EF82B6D912C4F9AE02/750E873CABF211F0BF8FB00EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.239.160.0/22
103.35.76.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:b2:88:e7:b5:ad:0a:9a:c8:ca:b0:fd:7d:d7:60:3b:ff:1e:
be:f6:52:03:57:c7:d9:be:c2:7f:7d:e4:17:c7:f8:ea:75:50:
86:12:e7:5a:29:0b:c5:6d:a7:7d:a4:0f:c8:1f:a9:6f:8e:db:
86:c4:11:dc:96:e1:c7:f3:c2:3e:8c:ba:f0:3d:dd:fe:85:9f:
12:ce:61:d9:32:4e:e3:47:82:81:cc:c9:c2:0f:70:60:5d:90:
d7:c4:1a:55:c8:ec:f7:01:fe:0f:75:02:ec:9b:96:c4:ef:20:
db:15:88:eb:e4:9d:4c:c1:c4:f2:01:b0:bc:4b:92:04:39:a4:
4a:f0:28:29:85:e5:73:25:14:47:bb:6d:29:20:35:3c:11:f7:
d4:15:12:c1:ff:79:1e:c0:80:f0:66:b3:b7:1d:92:a0:67:b1:
65:f2:2e:b1:c4:31:c5:80:30:ed:1b:15:91:e4:f1:61:64:44:
8f:a5:df:30:8b:c3:10:e1:07:67:fd:4a:4a:76:18:18:bf:bf:
8d:8e:56:e8:33:be:d1:e8:bc:47:38:5c:02:bb:3a:47:d2:ac:
37:db:84:85:c2:3d:69:b4:bc:cf:d2:6a:76:ff:df:ae:e4:78:
c6:ea:97:31:fc:da:5b:7d:05:90:57:fa:a4:66:8d:26:7a:65:
fc:61:68:24
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJDREExMTAvBgNVBAUTKDBFNTQ2MjU5NkMwQzZFNzdFMTg5QjUxQkUyNkUyNUM5
MTUzOEM1NUMwHhcNMjYwOTA5MDQ1NTI4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwZTZiZi1iYTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArsv5nunNz8t9mXC6wXO9u7AimJfZJsTNQ5/26OtEdhRF/3gqS211B7kyFrwq
ilSQAxybVF2ieOLMin1wasYMiVw5SE6LG50Q0nbSinUrsbZDJ/pTbvryIp6Tycx2
f0JtHA5hXN/cv3CdrPL9ztko+DO2arDbYH+5Qh2+WVvmWpSRCYhSQc+QkU/vuK4Z
d77R+xCSajs44L0t3exfsGa+lvO36EVroOGYEe9mXyX4rofE2hMYv9GHge00oYRu
RbdlP85f8eaxFgajdic3Emb9UuHDSA5TWSS+/lEqM0bm9crGjkO5BKwT21xdHwlp
59M1Z9ygH9HwWyNunfWmav4AcQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKG3A130
B+Ge4GJDgg8kyKWaeLx9MB8GA1UdIwQYMBaAFA5UYllsDG534Ym1G+JuJckVOMVc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkNEQS8yQzdFNzJCODVB
MTYxMUVGODJCNkQ5MTJDNEY5QUUwMi9EbFJpV1d3TWJuZmhpYlViNG00bHlSVTR4
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RsUmlXV3dNYm5maGliVWI0bTRseVJVNHhWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDJDREEvMkM3RTcyQjg1QTE2MTFFRjgyQjZEOTEyQzRGOUFFMDIvNzUwRTg3M0NB
QkYyMTFGMEJGOEZCMDBFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCK++gAwQCZyNMMA0GCSqGSIb3DQEBCwUAA4IBAQC9sojnta0KmsjK
sP1912A7/x6+9lIDV8fZvsJ/feQXx/jqdVCGEudaKQvFbad9pA/IH6lvjtuGxBHc
luHH88I+jLrwPd3+hZ8SzmHZMk7jR4KBzMnCD3BgXZDXxBpVyOz3Af4PdQLsm5bE
7yDbFYjr5J1MwcTyAbC8S5IEOaRK8CgpheVzJRRHu20pIDU8EffUFRLB/3kewIDw
ZrO3HZKgZ7Fl8i6xxDHFgDDtGxWR5PFhZESPpd8wi8MQ4Qdn/UpKdhgYv7+Njlbo
M77R6LxHOFwCuzpH0qw324SFwj1ptLzP0mp2/9+u5HjG6pcx/NpbfQWQV/qkZo0m
emX8YWgk
-----END CERTIFICATE-----
Generated at Tue Sep 22 00:54:48 2026 by rpki-client