
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/07DEEBF0F20311F09027AFE1496F56BC.roa
File: 07DEEBF0F20311F09027AFE1496F56BC.roa (raw, json)
Hash identifier: iWkfkl8IPV0JFK1Zl8pweCdJ/SFodByB+0jA5hETEao=
Subject key identifier: 9B:B3:4B:CB:DE:AB:AD:99:5A:7B:3A:75:B5:D5:B2:07:F0:83:24:0E
Certificate issuer: /CN=A91F7D5E/serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
Certificate serial: 1D
Authority key identifier: 4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/07DEEBF0F20311F09027AFE1496F56BC.roa
Signing time: Sun 01 Mar 2026 05:45:31 +0000
ROA not before: Thu 15 Jan 2026 11:12:08 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 131171
IP address blocks: 144.79.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl
rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7D5E, serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
Validity
Not Before: Jan 15 11:12:08 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a3d27b-2a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:63:fe:ce:d8:8d:bd:57:a8:9a:7e:c2:9b:
27:66:21:fa:a9:e3:88:ce:76:e4:bb:72:8d:73:16:
e9:1c:e9:96:b5:c0:4f:d8:df:79:83:bb:d1:e8:c3:
30:be:b4:81:57:c7:96:85:8b:d7:5a:18:56:40:5b:
7f:b0:cb:ec:96:3b:ec:c3:8f:d7:7a:3b:97:f1:e9:
42:91:a5:87:50:d6:fc:f6:41:e9:1a:20:2e:52:e9:
87:fb:e0:2f:2b:8b:c5:11:b7:6a:1e:45:dd:fa:fd:
1a:f3:83:6c:85:b7:da:39:d8:39:75:b8:2c:70:92:
74:34:33:7d:8e:54:e3:d1:b6:93:a6:c9:91:40:c3:
26:87:37:20:75:92:20:8a:89:b8:b0:20:25:ad:66:
cf:83:7a:2c:e7:19:4f:d0:cd:3e:d7:c4:20:f3:86:
4a:f9:7e:b1:35:df:1b:04:47:33:26:fe:ad:5f:90:
3f:c4:12:db:fc:6c:8f:41:66:47:5a:5d:33:58:e3:
e4:b4:ff:5d:3e:56:04:74:09:b7:63:43:43:66:55:
b9:e4:2b:03:eb:af:97:e3:6c:7a:16:b0:9f:54:3e:
8a:76:14:cb:98:55:ed:85:40:d4:02:b7:d2:32:05:
c2:14:8b:67:e0:80:ed:7b:bf:be:e2:64:26:41:e1:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B3:4B:CB:DE:AB:AD:99:5A:7B:3A:75:B5:D5:B2:07:F0:83:24:0E
X509v3 Authority Key Identifier:
keyid:4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/07DEEBF0F20311F09027AFE1496F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.246.0/23
Signature Algorithm: sha256WithRSAEncryption
13:40:dc:8b:f5:d3:00:c7:16:e2:d2:08:a1:f4:12:9d:f6:fa:
42:e7:22:b0:f3:b5:7c:16:ae:68:03:c6:cb:f8:19:be:cd:bd:
76:d6:8e:e9:79:06:69:0e:b1:7a:46:ab:54:00:bb:35:08:b7:
19:dd:9b:d8:47:8b:88:d3:04:88:1d:9e:b2:5b:52:3f:73:b3:
a0:26:f3:31:98:51:38:3e:84:8e:d7:6e:dc:23:7b:ee:52:0a:
3e:8c:c3:be:4e:b7:cd:2d:d2:57:cf:ed:b3:f2:9b:ce:36:af:
99:a6:7c:9f:f1:21:47:76:14:2c:49:fb:d0:9f:64:06:89:1d:
d7:07:a8:a1:f4:dd:b1:3c:50:37:da:91:3e:9b:c6:b4:20:e1:
3f:0e:30:c9:48:f5:44:15:00:2f:76:20:9c:0f:9c:4e:9e:56:
db:fc:f6:2a:f8:a5:ee:f5:99:b3:b7:25:28:fe:53:d9:2a:8a:
c9:84:e2:e4:53:4d:1a:27:1d:69:c8:82:62:b4:d2:7c:0b:ad:
b4:58:85:61:46:33:40:d6:84:42:0e:e7:e3:ae:e7:5a:a9:2a:
b3:b6:98:10:df:08:9b:64:7a:44:9f:e2:9c:0f:d6:1e:84:45:
28:7a:b1:97:dd:76:c9:c1:22:85:b7:f0:38:24:d9:2c:07:43:
b5:ee:83:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:47:05 2026 by rpki-client