
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/7B9AF6D818F111F0A3CFBB17C4F9AE02.roa
File: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (raw, json)
Hash identifier: YZ95zLAZ9RgE3ArJgZyq41uo4zFDNyVSmDttc4IYSCE=
Subject key identifier: 7D:61:F0:23:4B:A7:7E:F9:14:90:81:04:82:22:A7:2C:F2:6A:2C:B7
Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial: 02E6
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/7B9AF6D818F111F0A3CFBB17C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:31:27 +0000
ROA not before: Tue 03 Feb 2026 01:21:19 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 139358
IP address blocks: 115.42.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 742 (0x2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Validity
Not Before: Feb 3 01:21:19 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a477ef-5255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:cd:4e:96:a0:90:3e:b9:43:71:fa:0a:a1:
90:23:35:c0:2e:51:d1:62:76:f0:ba:a0:8d:b4:0c:
c2:fe:b4:79:e0:4e:ca:b6:ea:39:79:2a:a0:e0:74:
66:94:f8:ad:09:0d:d3:b2:b1:75:4d:46:59:9a:ed:
b3:f0:d0:b2:02:ed:64:98:78:8a:19:c6:2d:29:d2:
f4:ef:f3:2f:7b:92:3e:79:03:b9:82:5b:0c:68:1a:
65:4b:c5:82:7b:49:e5:b0:00:70:a1:35:bc:cd:b3:
87:b1:59:93:82:23:1f:fa:ff:d2:a4:6d:a7:21:0c:
fb:30:18:5b:53:dc:ef:9c:a2:44:55:4e:4a:e8:21:
0b:e0:bb:cc:0e:66:5e:14:b3:0d:5d:9f:36:78:16:
4c:e7:df:0c:c5:40:b4:32:b8:d1:7e:fe:64:07:1b:
b7:19:2e:14:14:a7:30:70:ed:73:ee:f5:92:0b:97:
28:2a:36:5e:fa:fb:c2:2a:f1:7d:c8:73:50:b4:c2:
02:36:b5:4a:0a:b3:08:39:73:0d:aa:c8:98:4a:6c:
c5:cb:71:55:7b:c0:f1:8c:12:ca:a9:e8:e6:b7:f3:
c9:01:ea:61:b5:66:75:44:6f:18:b6:bf:19:46:5e:
f8:49:5c:93:d4:5e:3b:d4:8f:1f:a9:36:93:d6:a6:
d8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:61:F0:23:4B:A7:7E:F9:14:90:81:04:82:22:A7:2C:F2:6A:2C:B7
X509v3 Authority Key Identifier:
keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/7B9AF6D818F111F0A3CFBB17C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
115.42.62.0/24
Signature Algorithm: sha256WithRSAEncryption
97:48:01:80:d2:e8:b9:31:35:c2:be:7b:c1:0b:e6:ef:f7:56:
1b:2b:03:d9:f1:f8:2c:98:bf:7b:77:e0:ed:68:43:bb:52:33:
f9:5c:e6:a1:7f:7e:63:5f:da:71:42:af:d9:25:ff:7e:4c:c8:
5a:06:77:b1:2f:7b:bf:a9:8e:ca:a7:8b:89:0b:95:a6:5a:65:
d0:6f:79:a0:72:a2:ef:73:c0:1b:50:33:d0:c7:19:27:6d:88:
58:56:60:7a:30:c5:5b:7e:92:2d:cb:38:a4:22:46:e1:11:6e:
41:a1:2e:25:8c:8e:99:c6:df:95:71:80:48:5f:91:e0:9e:40:
f2:a7:6e:d5:2f:06:b4:d1:30:db:b9:00:1d:0d:78:fa:9f:5b:
f3:ba:bf:67:29:5c:6e:c9:f4:05:37:be:e1:d0:42:17:f8:c0:
1c:b5:38:91:1b:20:10:8c:d4:1d:57:27:f4:b9:55:8d:13:77:
90:a1:d7:64:a0:4a:75:1f:bf:bb:ff:22:8a:24:bf:da:5f:2b:
63:b9:8f:48:42:82:d0:97:ad:f3:e6:86:34:93:6a:90:27:8b:
f0:6f:64:b3:42:7b:2a:46:90:44:96:67:42:7b:fd:93:50:41:
16:bf:b7:e5:5e:78:90:09:23:69:a0:a7:a7:f4:26:fa:bb:10:
61:09:c7:fe
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5
QTNFRDVERkUwHhcNMjYwMjAzMDEyMTE5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzdlZi01MjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmBDNTpagkD65Q3H6CqGQIzXALlHRYnbwuqCNtAzC/rR54E7Ktuo5eSqg4HRm
lPitCQ3TsrF1TUZZmu2z8NCyAu1kmHiKGcYtKdL07/Mve5I+eQO5glsMaBplS8WC
e0nlsABwoTW8zbOHsVmTgiMf+v/SpG2nIQz7MBhbU9zvnKJEVU5K6CEL4LvMDmZe
FLMNXZ82eBZM598MxUC0MrjRfv5kBxu3GS4UFKcwcO1z7vWSC5coKjZe+vvCKvF9
yHNQtMICNrVKCrMIOXMNqsiYSmzFy3FVe8DxjBLKqejmt/PJAephtWZ1RG8Ytr8Z
Rl74SVyT1F471I8fqTaT1qbY4wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH1h8CNL
p375FJCBBIIipyzyaiy3MB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3
N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU3REYvNkQ1NTJENzAyNzdBMTFFREE2QjFBODI2QzRGOUFFMDIvN0I5QUY2RDgx
OEYxMTFGMEEzQ0ZCQjE3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAcyo+MA0GCSqGSIb3DQEBCwUAA4IBAQCXSAGA0ui5MTXCvnvBC+bv
91YbKwPZ8fgsmL97d+DtaEO7UjP5XOahf35jX9pxQq/ZJf9+TMhaBnexL3u/qY7K
p4uJC5WmWmXQb3mgcqLvc8AbUDPQxxknbYhYVmB6MMVbfpItyzikIkbhEW5BoS4l
jI6Zxt+VcYBIX5HgnkDyp27VLwa00TDbuQAdDXj6n1vzur9nKVxuyfQFN77h0EIX
+MActTiRGyAQjNQdVyf0uVWNE3eQoddkoEp1H7+7/yKKJL/aXytjuY9IQoLQl63z
5oY0k2qQJ4vwb2SzQnsqRpBElmdCe/2TUEEWv7flXniQCSNpoKen9Cb6uxBhCcf+
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:55 2026 by rpki-client