
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/76C6BCF6B72811ECAEFC180DC4F9AE02.roa
File: 76C6BCF6B72811ECAEFC180DC4F9AE02.roa (raw, json)
Hash identifier: Ahq8pAmeUbi/UnTEDIDcD1i65MG+Vf7huahab+3HR9s=
Subject key identifier: 1F:D4:E5:D4:85:7D:B0:06:E3:37:C9:AD:33:15:18:EA:0F:F0:FC:33
Certificate issuer: /CN=A91EA9BD/serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED
Certificate serial: 146E
Authority key identifier: DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/76C6BCF6B72811ECAEFC180DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:27:16 +0000
ROA not before: Sat 30 Aug 2025 15:32:28 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 4755
IP address blocks: 130.248.126.0/23 maxlen: 23
130.248.126.0/24 maxlen: 24
192.150.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl
rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5230 (0x146e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA9BD, serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED
Validity
Not Before: Aug 30 15:32:28 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a45ad4-15a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:76:eb:32:ff:09:72:f2:4f:82:7a:be:41:
70:d3:91:a5:5b:1b:b0:5f:e0:9b:2a:0b:43:ed:be:
9e:06:36:73:ba:8a:ea:0b:b4:04:1a:e7:a7:c2:34:
a1:4b:dd:db:67:0d:cf:4d:8b:4d:62:5b:fa:56:a2:
b0:f2:d0:ce:c9:a5:06:5d:55:96:8c:d9:63:c7:ed:
1a:25:90:96:09:44:70:48:e2:c4:34:8b:e8:2d:d0:
1c:70:3a:1b:76:a4:a2:e8:7d:2a:f2:c6:58:a5:62:
cd:fc:fe:45:aa:f3:c3:7b:ce:38:c7:27:23:cf:6f:
9c:4d:be:db:23:e1:cc:13:a8:fc:5f:55:82:c8:b8:
55:6b:12:79:23:24:c5:09:e2:4a:99:ac:d7:a3:ae:
0a:bf:94:cb:ec:af:03:ec:81:68:b2:0d:dc:50:81:
15:9f:aa:19:6f:e4:a5:cf:5d:e5:bb:e9:7c:f8:63:
5f:3c:0d:7b:ff:f2:dc:c1:35:59:8c:c3:17:4e:99:
c4:ff:26:93:c5:e2:13:44:18:28:38:16:9e:d7:33:
ad:08:3a:b0:11:95:37:2c:db:71:3e:af:db:02:e5:
de:d3:48:8e:9c:fc:ba:85:9e:4a:2b:72:ff:63:8d:
b0:3c:9a:35:cd:d0:9c:f6:a1:74:f7:87:5b:82:f6:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D4:E5:D4:85:7D:B0:06:E3:37:C9:AD:33:15:18:EA:0F:F0:FC:33
X509v3 Authority Key Identifier:
keyid:DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/76C6BCF6B72811ECAEFC180DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
130.248.126.0/23
192.150.16.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:77:7f:cc:04:7a:4c:d8:aa:68:15:3b:03:d0:af:f5:c3:1c:
43:be:84:b3:f2:a4:a8:2a:3d:63:17:f2:58:7e:df:44:08:be:
21:c3:90:50:dc:fb:bc:42:ca:71:da:7b:ef:0a:94:70:5c:eb:
80:a1:ac:62:2c:3a:e9:55:0f:2f:3c:0d:c7:3b:df:23:be:64:
ad:39:d6:22:36:b7:44:a7:0e:cc:3d:16:e9:bf:9d:6f:2e:5e:
d7:e7:aa:6e:6e:62:98:53:4d:c3:64:86:1d:45:b0:a2:eb:2a:
d8:05:f1:74:6a:f1:6d:b3:23:5d:6c:87:cc:31:62:5e:87:ae:
7a:af:9c:57:69:de:aa:61:cb:3b:a9:8f:bb:4d:e9:82:bd:f6:
ff:28:a8:66:34:54:cd:0a:82:a0:52:cc:32:26:29:c7:45:d2:
35:28:e5:55:62:c0:c0:cd:d3:3b:4e:8c:d5:12:5a:53:9e:62:
0c:10:cd:53:f8:3a:2f:b1:4f:36:d9:48:40:2a:5b:81:fa:32:
d5:59:da:78:88:4d:87:21:f2:00:46:33:be:99:04:7d:67:97:
7a:e6:b3:f0:94:04:82:10:8e:0b:87:b0:93:ce:b3:62:b8:ce:
61:3b:5e:04:74:1a:5e:29:fb:a5:ab:3e:31:35:16:c2:01:5b:
ae:6e:55:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:35 2026 by rpki-client