
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/00756F7E63F011EC987F5B19C4F9AE02.roa
File: 00756F7E63F011EC987F5B19C4F9AE02.roa (raw, json)
Hash identifier: NJ2yttVg/1tKklwG0b4mf3B8YWLlDm4GZ+hgK2zNvsU=
Subject key identifier: 42:5A:B2:E7:87:5F:77:49:52:0A:5D:71:4E:A6:97:FB:AC:81:62:C3
Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial: 073C
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/00756F7E63F011EC987F5B19C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:42:14 +0000
ROA not before: Wed 08 Oct 2025 20:51:38 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 132420
IP address blocks: 91.203.132.0/22 maxlen: 24
151.185.32.0/19 maxlen: 24
217.18.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1852 (0x73c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Validity
Not Before: Oct 8 20:51:38 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a45e56-4f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:ac:d9:cd:0c:b5:fb:7b:57:f9:ac:ff:f1:
b3:9c:3e:b7:8f:d2:87:45:34:80:8d:ae:1d:ff:aa:
9a:40:56:c8:1d:3c:15:ef:11:0b:ca:a5:9b:f1:56:
04:80:5b:f6:67:f9:91:6d:b4:96:b9:f5:b5:ab:40:
92:e3:77:ad:72:f4:21:f1:df:b7:d8:19:41:11:7d:
13:d0:44:f4:a5:82:18:c6:fa:2b:8f:60:d0:46:64:
15:c4:a1:b9:c0:b3:37:7a:5c:0e:4b:14:92:f6:65:
ff:89:12:24:68:07:e5:8f:f6:ca:f2:de:44:e4:88:
76:36:f4:95:37:b7:5c:64:4c:3e:55:d0:dc:4e:75:
44:73:98:68:20:fc:be:c7:e0:0d:ba:aa:e5:c7:1e:
01:b2:8f:ff:df:ba:90:ed:38:d6:2f:9d:04:a8:10:
7f:e0:ec:33:cc:41:ab:5e:d4:67:bc:56:27:ea:5a:
d1:0a:32:f4:d9:c4:77:f3:4c:8b:ad:a1:9f:70:b5:
bb:6a:e6:82:98:84:dd:9b:21:b5:73:48:9c:e6:02:
2b:05:0b:aa:04:66:ce:72:5a:ec:d5:70:ff:36:90:
b9:87:f1:9c:76:2d:0f:f8:bf:34:ff:eb:20:0c:82:
99:f2:dc:58:66:86:81:a1:c5:96:71:39:73:67:36:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5A:B2:E7:87:5F:77:49:52:0A:5D:71:4E:A6:97:FB:AC:81:62:C3
X509v3 Authority Key Identifier:
keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/00756F7E63F011EC987F5B19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
91.203.132.0/22
151.185.32.0/19
217.18.52.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:29:f8:e9:4d:9c:1a:88:be:e7:6d:4a:ff:3e:31:17:2e:c4:
ff:8d:c0:b8:b5:2f:81:a4:84:b6:43:e2:46:d8:e9:9b:00:21:
27:16:26:f1:25:af:94:d3:42:b5:cf:ad:c2:36:4f:3e:e1:f6:
fe:cf:5d:21:e1:68:b0:40:ce:f7:c4:d9:6d:57:7d:a1:46:69:
42:32:5e:4e:61:58:10:5e:03:3e:78:c4:80:a9:9a:dc:db:f7:
47:ff:f3:15:c1:3f:02:1e:66:a3:04:2f:14:fe:ec:b4:74:2f:
48:b4:b2:c0:10:6b:83:79:fd:f5:ff:09:32:7d:7e:96:8c:8a:
d0:8c:15:7d:3c:22:58:c0:67:3e:f6:69:e0:72:e4:76:b8:7b:
23:4d:73:95:e6:40:ee:76:1a:f5:4f:13:01:c5:be:65:0e:2e:
e2:19:71:d0:e7:91:b3:0f:f0:4d:55:47:11:35:37:7a:ad:59:
8a:1d:2d:2f:69:de:62:56:af:9d:f0:32:09:ea:c2:bf:be:be:
8b:fe:f6:25:15:13:5f:0b:1e:dd:69:e4:5a:17:14:cd:ec:10:
cc:5f:52:6f:7f:dc:c6:dc:13:81:08:e5:3c:64:79:5f:1f:d0:
ff:81:19:2c:15:a7:05:d2:91:c3:d7:e9:d4:13:6e:7e:0a:b1:
07:40:77:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:45 2026 by rpki-client