
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/6767E894A32311F0A8D9D520C4F9AE02.roa
File: 6767E894A32311F0A8D9D520C4F9AE02.roa (raw, json)
Hash identifier: EHyz2xRZs5VYv9OanUFyye7p3N/wXAHiJq/ekOSOYZA=
Subject key identifier: B7:48:BF:2A:91:CE:45:6F:48:CC:1D:A6:E0:16:2E:30:0E:1B:C0:5E
Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Certificate serial: 57
Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/6767E894A32311F0A8D9D520C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:18:57 +0000
ROA not before: Wed 17 Dec 2025 07:25:04 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 21859
IP address blocks: 165.84.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Validity
Not Before: Dec 17 07:25:04 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a3da50-2b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:f2:ca:1f:77:e4:09:bd:41:1a:41:20:24:
45:7b:3d:d7:9e:da:be:a2:7e:4f:a5:52:e7:56:d8:
a5:ef:a4:51:18:7d:be:09:8a:5c:48:94:97:e5:3f:
5f:89:30:bf:d0:ac:b5:1c:ff:0f:0a:45:03:f9:c4:
b5:62:54:14:6a:9b:c2:e8:63:49:a0:c1:ad:fc:45:
31:2f:50:26:ff:ae:ee:e7:55:af:5c:ff:b8:b0:85:
2f:37:57:11:f4:31:43:13:4d:67:e5:ef:66:53:da:
dd:ea:12:dc:30:e5:d4:b5:50:43:64:bd:4a:ca:b1:
58:4c:b1:b5:f1:43:af:de:91:af:03:27:bc:23:91:
c7:f8:b3:a6:2f:36:c2:39:90:8b:68:63:06:77:c1:
17:10:97:ee:1f:52:36:20:54:e0:27:cd:73:7e:2c:
3c:09:a7:6a:e4:d5:f8:a4:be:46:17:48:2f:b2:07:
b3:18:03:b7:7d:03:88:5c:13:f9:b2:19:cc:29:6d:
ef:71:6d:d6:ff:33:5f:01:34:89:6e:fa:cd:00:11:
8a:41:d6:2e:f3:19:ad:cc:e1:0a:d4:4d:0a:9c:b8:
4a:4f:18:c7:29:ce:78:7a:eb:ef:52:3e:b5:2e:d2:
38:87:88:56:32:75:ef:cc:fb:e5:c5:77:f2:a2:d8:
40:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:48:BF:2A:91:CE:45:6F:48:CC:1D:A6:E0:16:2E:30:0E:1B:C0:5E
X509v3 Authority Key Identifier:
keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/6767E894A32311F0A8D9D520C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.84.245.0/24
Signature Algorithm: sha256WithRSAEncryption
22:3a:c4:2a:dd:92:32:b9:a9:74:27:4e:6c:47:c6:1c:f2:22:
50:7b:67:bc:98:54:d2:0d:17:2d:aa:26:30:18:6c:b7:9e:7d:
16:5a:13:e3:d3:41:e2:19:c3:a7:8f:b5:b7:8c:34:3f:57:bb:
37:58:37:1f:33:93:43:a5:aa:87:f3:a7:50:d8:41:19:13:ba:
65:06:ad:23:ed:42:66:a2:e6:fc:4a:1d:36:01:12:5c:7f:e9:
79:5c:4e:f4:37:b0:45:88:3e:98:ef:c8:bd:b1:f9:1f:78:bd:
be:fa:1d:20:84:43:58:79:1f:28:db:55:4a:d4:6f:46:64:ed:
b5:c4:e9:17:4e:07:20:b8:31:b5:87:06:eb:ac:9a:af:62:29:
3f:34:76:bb:7b:b9:67:4b:40:c7:fa:b1:14:20:8e:bd:3b:38:
4e:8d:45:67:d2:29:1a:3a:71:a5:5e:81:e5:6e:ed:08:8a:64:
cb:1b:45:53:53:a8:4a:8b:6a:cc:7d:84:45:5f:5b:41:f8:da:
0b:69:73:1e:71:eb:26:4f:8a:4f:d9:89:61:81:ff:0b:24:30:
80:ee:36:2c:63:19:24:df:af:d3:0c:5d:d6:f1:f9:59:ba:f9:
d8:da:65:d1:33:5c:fc:b6:80:f4:90:54:7b:3c:49:1c:b2:a9:
7b:6f:ef:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:01:52 2026 by rpki-client