
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/078AE946642A11EAA019224CC4F9AE02.roa
File: 078AE946642A11EAA019224CC4F9AE02.roa (raw, json)
Hash identifier: 31whv5fvX3GHhn8oNBBfKndDfzOhLiKe+vMmbXanShU=
Subject key identifier: A0:4B:D7:56:FD:86:CA:55:7E:88:48:EF:D3:B6:0B:DB:EA:17:B0:0F
Certificate issuer: /CN=A91FE7DB/serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
Certificate serial: 0BB6
Authority key identifier: AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/078AE946642A11EAA019224CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:57:51 +0000
ROA not before: Sun 26 Oct 2025 19:38:01 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 135554
IP address blocks: 103.123.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl
rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2998 (0xbb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DB, serialNumber=AEBA19B6FCC1D21AE7131770E7B1DA3E1475EC90
Validity
Not Before: Oct 26 19:38:01 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a445df-9ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:8e:e8:f9:be:6c:49:68:ee:ab:d3:f9:89:
9e:f6:dd:b3:50:a1:51:e9:6b:6c:fa:cf:fa:e8:0d:
6a:e5:db:7e:ca:a9:26:7a:93:05:af:c9:ba:12:66:
55:99:44:a1:32:3e:95:da:71:a2:fd:7c:70:43:32:
50:0b:33:15:42:9c:20:76:32:c4:76:15:69:d9:18:
15:e4:5e:97:ff:c2:c6:0c:15:73:35:19:92:2b:88:
e9:69:9b:2e:ac:c6:a6:25:15:f2:79:50:ed:f9:50:
df:c7:b4:26:01:94:8c:2d:57:f7:6a:83:1c:95:f7:
4f:17:97:0d:85:ab:13:a9:44:6f:c2:41:a5:39:4c:
48:9c:57:04:cd:36:bd:d3:47:b8:83:e0:42:97:07:
79:c1:7c:62:45:a5:dc:01:61:87:81:c9:fb:66:c6:
bc:f7:c2:12:1f:56:a0:bb:04:98:0e:86:bb:2e:f1:
b2:92:62:29:72:65:8e:43:4c:f5:2c:6e:12:da:8b:
26:7e:56:de:64:6e:79:76:7f:31:95:f5:07:39:5c:
3a:7f:f0:22:6f:2e:6c:15:c3:7c:48:88:85:67:4c:
ab:b3:a7:ad:9f:9b:0a:2a:f5:b5:45:c1:bc:94:a0:
27:aa:62:7f:42:e0:f3:11:4b:10:ae:bc:cb:ce:cc:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4B:D7:56:FD:86:CA:55:7E:88:48:EF:D3:B6:0B:DB:EA:17:B0:0F
X509v3 Authority Key Identifier:
keyid:AE:BA:19:B6:FC:C1:D2:1A:E7:13:17:70:E7:B1:DA:3E:14:75:EC:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/rroZtvzB0hrnExdw57HaPhR17JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rroZtvzB0hrnExdw57HaPhR17JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DB/B951E28C3DCA11EA81B9D352C4F9AE02/078AE946642A11EAA019224CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.123.32.0/22
Signature Algorithm: sha256WithRSAEncryption
15:d2:62:e4:f5:c7:27:d4:21:b1:c3:dd:16:6f:c0:7c:5e:2c:
a3:9d:55:2f:7f:25:f9:a5:fd:77:c0:89:a2:82:61:af:c7:71:
a8:1e:34:79:81:46:ac:b2:fa:72:da:52:1b:b1:81:77:ac:ac:
b5:d6:53:df:da:72:e3:c9:42:79:df:02:4d:be:fb:9a:7e:d3:
c1:e3:ce:17:78:00:2b:11:53:31:3a:e5:80:db:b7:6b:f8:ab:
62:51:72:13:3c:07:b2:e3:a9:ff:5b:78:e1:8e:6b:d9:db:68:
ae:90:42:d8:48:5f:2c:be:b3:fd:c9:3c:92:d9:c4:03:8d:0a:
ab:d3:06:53:03:e1:ab:ec:57:44:e1:6b:37:a5:26:e1:07:2c:
41:27:7b:8d:8c:79:b1:7a:b6:ea:ad:ea:5a:ee:93:e4:1b:3a:
e1:e4:74:b2:85:55:f8:c5:74:c3:6a:4a:b4:76:86:87:1b:ec:
97:c2:a2:e3:22:5a:ee:d8:27:56:f2:15:41:a2:cc:58:69:43:
8d:7d:f4:fd:6e:4f:f6:c8:c0:95:cc:d1:73:2c:11:dc:9e:02:
af:03:97:2c:85:bc:da:ee:a7:d3:0f:24:bd:0f:f9:00:6b:e4:
de:b7:b6:f9:94:4d:31:2e:e1:4b:6d:dc:8a:a7:76:78:67:e3:
66:1b:c1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:43 2026 by rpki-client