
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/715924988D6C11EBAFD23A2EC4F9AE02.roa
File: 715924988D6C11EBAFD23A2EC4F9AE02.roa (raw, json)
Hash identifier: p9oLeg7LyY+vlGNticT0e8fg65yu3rD7mdYWF8Pyt1o=
Subject key identifier: 38:41:C1:B8:67:A6:0D:B6:AB:01:29:90:1A:D9:55:4B:85:1B:87:1C
Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Certificate serial: 0700
Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/715924988D6C11EBAFD23A2EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:47:41 +0000
ROA not before: Wed 26 Nov 2025 21:13:21 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4637
IP address blocks: 168.134.3.0/24 maxlen: 24
168.134.3.0/25 maxlen: 25
168.134.3.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Validity
Not Before: Nov 26 21:13:21 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46dad-0e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:59:32:3e:ac:2b:cd:03:42:70:c1:6f:06:
a9:29:a4:8a:5c:6d:b6:a4:48:e9:1e:4c:8a:7d:f9:
60:d4:b2:e3:67:f2:75:14:0b:80:15:7c:18:ae:08:
fc:11:3e:30:7b:80:56:3a:1f:51:75:91:1d:c5:51:
06:df:cf:d4:3b:d0:08:1d:b3:a8:95:1f:fc:49:f9:
ba:c6:71:09:14:7b:a5:4a:82:a9:04:f8:c7:db:52:
9a:d7:cd:1d:6e:ec:cf:0d:85:6e:71:c0:e4:88:9d:
50:48:6c:cf:f1:88:f4:45:cf:45:8f:90:04:4e:cd:
a0:ed:67:2e:8c:69:88:38:b7:e5:37:7a:6b:6c:40:
f6:ad:10:ea:2c:1e:4b:d1:21:32:1e:80:7c:b3:23:
eb:c9:3a:a7:71:d8:fd:4d:5e:a5:64:7f:1b:a8:a0:
16:07:01:e5:42:a0:60:de:5f:e6:4b:f3:63:98:69:
98:63:a2:32:f7:e3:f9:8c:f8:a3:f6:fd:8e:c2:db:
05:50:1f:26:f8:e9:bc:87:08:1e:94:46:15:a8:d9:
60:cf:63:9a:34:c1:3b:17:7e:b1:f6:fa:de:8e:a2:
ee:21:4e:56:ce:f5:f9:4a:89:6d:60:fa:11:cc:ce:
bf:a7:ae:ba:c0:5b:40:60:04:86:5d:aa:2b:9f:05:
4e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:41:C1:B8:67:A6:0D:B6:AB:01:29:90:1A:D9:55:4B:85:1B:87:1C
X509v3 Authority Key Identifier:
keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/715924988D6C11EBAFD23A2EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
168.134.3.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:16:15:ea:c0:7f:63:28:f8:c2:ce:2e:97:04:aa:4c:6b:a6:
c9:41:a1:bd:20:c4:ea:10:2f:6f:23:50:c9:8f:82:4f:d3:14:
ff:3c:01:07:ca:0d:08:12:27:4f:23:31:c0:36:9a:16:33:8d:
c6:27:34:63:26:78:45:20:0f:ef:e3:f9:f7:73:2b:e8:f2:4e:
d5:3d:49:ac:a6:37:ea:64:f6:54:57:68:7d:d4:ac:99:81:46:
5c:66:3c:78:28:81:b1:ff:c7:96:0d:b4:da:fe:18:42:e1:e1:
e2:14:a7:58:20:f5:8a:6a:9d:09:53:f3:2b:b4:23:e0:20:6f:
94:f5:c0:16:c6:32:bb:87:dc:7d:d4:e0:ca:22:c4:7d:80:46:
ac:09:7f:ed:19:d1:5d:f0:f1:fd:87:d0:b9:13:d7:c5:30:5b:
7e:5a:33:1c:08:dc:17:d9:8c:65:5f:b9:24:80:d2:c7:ac:8e:
4f:72:bb:e0:8b:99:94:ef:d5:18:e0:25:ca:a7:2a:ca:11:b7:
71:1c:47:01:11:89:63:42:6e:1e:6b:89:54:30:a6:b1:2f:26:
c4:4b:3c:54:f1:cc:53:37:ff:5c:4e:85:80:2c:58:7c:eb:b2:
f2:6c:c4:8e:10:cb:a8:71:f8:d4:8d:d7:20:fe:7f:6d:e7:2b:
66:42:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:41 2026 by rpki-client