
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/7CC500A86DEC11F0BD1BF429C4F9AE02.roa
File: 7CC500A86DEC11F0BD1BF429C4F9AE02.roa (raw, json)
Hash identifier: vlCeUsTn4mY21TfBNS55XRxHxgBmoj36GLwP2Y1GJ1Y=
Subject key identifier: C7:D2:5C:91:B5:55:0A:EF:E6:D2:98:DF:E5:0D:62:AE:42:4A:4E:0B
Certificate issuer: /CN=A91D61DF/serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
Certificate serial: 9C
Authority key identifier: BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/7CC500A86DEC11F0BD1BF429C4F9AE02.roa
Signing time: Fri 03 Apr 2026 03:35:18 +0000
ROA not before: Fri 03 Apr 2026 03:35:17 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 141199
IP address blocks: 165.101.48.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl
rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D61DF, serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
Validity
Not Before: Apr 3 03:35:17 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cf3575-fec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:71:28:b1:36:02:3d:94:27:d9:8e:e5:87:
7b:31:eb:3d:80:40:53:06:6c:7f:e4:7c:15:96:9e:
02:e9:a9:8f:71:5f:3e:2a:19:ab:97:05:14:0a:7b:
ea:ad:0a:5b:c6:30:a6:84:f5:c7:3b:27:c7:1e:70:
c8:f0:50:75:05:62:e8:18:a0:34:0f:34:75:bd:21:
86:24:d0:0c:4e:61:e2:24:b1:00:3e:96:e3:b6:20:
30:68:04:a0:88:4f:a3:08:31:f0:4d:73:7a:47:0e:
df:db:be:69:a8:f2:34:9a:ed:f9:72:f7:bd:fc:b6:
42:33:24:a4:26:33:4f:65:5f:98:2f:f3:23:a5:3d:
7c:c0:26:da:3f:be:14:1c:4e:fa:d7:f0:98:9c:a5:
b5:2b:72:dd:c3:d7:2e:11:28:7a:8c:ad:4a:3c:ae:
2d:4e:32:48:dc:ce:9c:4e:a6:28:13:d8:d3:37:77:
99:bf:f4:b5:a5:99:1f:7f:ac:9e:c1:80:2d:ba:4d:
2e:ab:95:6a:c1:42:80:3f:46:1b:6f:7d:15:41:ec:
2a:d6:c4:3b:db:1c:99:8f:bb:cd:bd:71:97:c8:45:
c1:1a:a9:4c:08:7d:2d:be:e3:2e:5b:60:a4:78:1f:
1d:4b:30:c3:d6:8e:e0:f8:18:21:cc:05:b5:e3:8f:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D2:5C:91:B5:55:0A:EF:E6:D2:98:DF:E5:0D:62:AE:42:4A:4E:0B
X509v3 Authority Key Identifier:
keyid:BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/7CC500A86DEC11F0BD1BF429C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.48.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7f:81:84:30:49:92:1d:4c:6e:e1:db:89:40:21:6f:44:27:
81:dc:74:09:90:d6:35:dc:9b:ff:b6:88:f4:12:5d:e1:d1:6d:
80:f2:6c:2f:b2:57:32:53:e5:4b:d0:a8:ee:5d:f6:d7:cd:06:
12:50:a7:3d:b4:34:f1:4a:e7:5b:55:93:1d:d0:74:df:72:ec:
25:ae:ca:3a:be:8b:1e:f6:45:af:9b:89:4b:12:6b:38:b8:3e:
f0:0c:85:c0:6f:0c:53:72:ed:a9:8b:42:75:0b:ea:e1:a3:6d:
07:e7:d0:5e:a5:68:75:c3:2a:26:62:d0:12:4e:9d:90:42:a9:
2e:22:00:4c:66:58:c4:24:ac:f6:65:be:46:88:a6:83:e8:56:
c4:7f:59:83:31:16:cd:de:85:3c:d7:83:6d:17:04:e1:e3:9d:
16:b6:2e:cb:c9:bd:e5:97:d2:95:f9:cc:c9:46:c4:d8:d6:82:
c4:e3:f6:f2:bf:2d:ec:5b:7e:0f:a5:ea:d4:06:9f:77:26:d8:
13:b7:a0:a7:1e:cf:6f:61:10:ef:81:87:4e:7e:0f:c2:5f:31:
d7:c3:78:75:1f:6a:84:03:6a:07:f9:e9:87:30:aa:a4:24:ca:
50:74:33:86:ec:32:86:c9:ee:18:4c:5a:cb:cc:58:db:2f:af:
4c:c4:69:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:57:32 2026 by rpki-client