
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/7DF6251A74B311F0A365281CC4F9AE02.roa
File: 7DF6251A74B311F0A365281CC4F9AE02.roa (raw, json)
Hash identifier: CSo2AGQqGn0kd2y3BxFVD7WYUjWebI85PFFaDCSVnE8=
Subject key identifier: F6:F5:CB:51:90:34:16:36:AE:74:5E:5D:BC:75:4A:5B:7A:3F:4E:1C
Certificate issuer: /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761
Certificate serial: CE
Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/7DF6251A74B311F0A365281CC4F9AE02.roa
Signing time: Mon 07 Sep 2026 06:57:26 +0000
ROA not before: Mon 07 Sep 2026 06:57:26 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 54309
IP address blocks: 165.101.218.0/24 maxlen: 24
165.101.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl
rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:41:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761
Validity
Not Before: Sep 7 06:57:26 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9e6056-fc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:64:23:09:c1:e1:56:2e:15:08:95:75:d8:
46:5b:ee:08:63:60:56:e8:86:b0:2e:f2:2d:78:19:
d2:91:1f:81:1a:a1:b1:81:b9:d2:83:15:02:31:ae:
76:51:3f:59:d9:28:9a:bd:4e:5e:f0:ef:12:f3:1d:
9a:2e:52:c7:16:2a:bd:5e:91:a9:96:d5:41:ce:0c:
6f:2d:74:8a:1f:d1:14:1d:57:35:36:d3:5f:21:7f:
a8:53:15:b0:8f:41:1f:bb:3c:7d:3e:2e:d0:4b:aa:
b3:c0:7e:35:40:cd:20:ce:f8:2e:df:9a:d8:24:3d:
a3:d8:18:b5:eb:9b:13:71:6e:89:9b:8f:59:ca:87:
6f:4f:c3:50:5c:ae:c4:78:ea:98:52:c5:ac:c2:60:
1c:fa:4c:bc:ce:ba:58:ed:5b:ad:0c:f3:b4:35:84:
4c:3b:8a:50:fc:36:9f:25:e3:b3:4e:fd:21:09:bd:
f1:a6:86:b1:74:a0:2c:ee:39:2f:e9:80:b3:c1:95:
99:8f:c3:0b:b1:ed:8d:64:a1:65:2b:d7:c3:df:fc:
7b:26:31:f4:bb:0e:dd:79:70:d9:44:ad:63:d6:66:
1e:19:06:4a:8a:5f:5b:52:91:67:0d:7f:fe:c1:f2:
05:c7:b8:c5:6e:8a:06:b0:f3:db:d2:00:26:2c:66:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F5:CB:51:90:34:16:36:AE:74:5E:5D:BC:75:4A:5B:7A:3F:4E:1C
X509v3 Authority Key Identifier:
keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/7DF6251A74B311F0A365281CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.218.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:fa:79:fb:a8:a1:b6:0d:bc:ce:78:e6:86:9f:3c:38:81:7f:
43:d4:63:ac:bf:f9:03:f4:5d:34:df:92:78:81:17:a5:34:68:
2b:7b:ad:45:7b:13:b2:63:2a:81:62:30:7e:ff:8d:80:06:00:
9c:a9:cc:aa:9c:fc:ca:9f:34:cf:04:e4:f7:f0:38:00:d7:75:
92:84:36:a4:5f:5b:0a:54:7b:15:50:cd:e2:93:08:e5:d9:7f:
7d:95:b1:bc:ae:95:26:29:f2:28:a7:78:de:a9:c3:87:de:b5:
fa:61:23:2c:f5:40:74:b4:6a:64:95:67:90:37:23:94:44:2f:
80:d5:0a:20:ba:95:93:fe:a7:5f:09:0f:bc:1e:42:11:7d:c4:
2f:66:7d:ab:02:04:fa:f6:6e:cf:25:b0:39:12:9a:c2:31:98:
a4:71:c8:b8:84:0d:17:54:db:d1:ff:85:23:e7:af:43:db:c6:
38:24:0f:e7:e2:7b:d0:60:2c:76:e1:5e:5f:9e:fb:7f:80:bf:
5a:33:ca:f4:8f:de:4e:fd:41:6b:df:ec:49:a6:d3:4a:4a:45:
fd:96:1c:20:ba:66:3a:d4:2a:a7:1d:26:a9:48:fe:21:51:bf:
69:fd:d0:9a:49:1b:14:17:32:b3:c2:a4:a8:26:f0:85:d2:96:
87:a1:63:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:22:30 2026 by rpki-client