
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/B7E7EF7C2C2511F1AC709C159C833773.roa
File: B7E7EF7C2C2511F1AC709C159C833773.roa (raw, json)
Hash identifier: 22lcIVcWJJNQeedflM7ajUp8JwhpkgUi0gHeb905Grk=
Subject key identifier: 80:B3:5F:50:BD:13:94:B3:8F:64:19:96:80:81:74:AC:E6:A3:BB:40
Certificate issuer: /CN=A91C9F00/serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E
Certificate serial: 02
Authority key identifier: A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/B7E7EF7C2C2511F1AC709C159C833773.roa
Signing time: Mon 30 Mar 2026 10:46:34 +0000
ROA not before: Mon 30 Mar 2026 10:46:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154562
IP address blocks: 163.128.98.0/23 maxlen: 23
2402:5260::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl
rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9F00, serialNumber=A4D800DB18C7C2C79711B35FC8B7D217DC7D4C6E
Validity
Not Before: Mar 30 10:46:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ca5489-4de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:b2:d8:c9:23:a4:11:47:0e:df:d0:88:4b:
7c:c4:26:a4:b7:aa:b8:2a:72:13:e4:30:75:ba:0d:
e4:38:18:72:94:97:f2:40:11:1b:e6:e7:ce:22:4a:
9a:c8:2b:b6:b0:13:d8:0f:aa:21:69:bd:a2:bb:7c:
79:e4:03:ee:f2:5e:f6:74:da:22:3e:6a:98:0d:65:
6b:1c:3d:67:66:fb:c3:78:f1:f2:44:62:6e:b3:6f:
a4:fd:17:fc:31:cf:10:7e:b0:98:4f:26:6e:8a:de:
16:28:53:80:e8:9b:da:82:5d:10:d6:62:a4:1a:13:
48:1b:38:e7:18:20:99:75:b9:29:d5:92:d2:86:ac:
81:4a:34:1b:f2:d9:5c:5c:b5:ae:05:df:65:b3:26:
78:e2:c9:14:cc:14:cd:32:29:80:08:de:48:68:32:
c3:b2:4f:dd:df:af:7a:0e:cf:a8:47:27:3e:95:53:
09:af:74:eb:23:d9:9a:d5:34:37:dd:f4:32:4d:bf:
19:66:8c:e8:b8:c0:bf:6f:73:bd:95:3a:65:3b:65:
b3:46:de:18:0f:35:f2:ed:41:7b:f3:e5:b6:a0:73:
87:49:ef:a2:a0:3d:a0:dd:82:bb:69:21:2d:f1:63:
4e:0f:71:17:f6:cf:d4:f6:6a:6c:75:a9:16:81:ab:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B3:5F:50:BD:13:94:B3:8F:64:19:96:80:81:74:AC:E6:A3:BB:40
X509v3 Authority Key Identifier:
keyid:A4:D8:00:DB:18:C7:C2:C7:97:11:B3:5F:C8:B7:D2:17:DC:7D:4C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/pNgA2xjHwseXEbNfyLfSF9x9TG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pNgA2xjHwseXEbNfyLfSF9x9TG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9F00/0BB1E4B02C2511F18F7125819B833773/B7E7EF7C2C2511F1AC709C159C833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.98.0/23
IPv6:
2402:5260::/32
Signature Algorithm: sha256WithRSAEncryption
a3:07:fb:09:ef:7a:4c:ce:4b:e9:64:42:c1:aa:80:aa:50:64:
c5:9c:21:ec:88:bf:bc:27:ab:26:46:db:e1:21:5b:f1:53:4a:
a9:1a:8e:82:7c:ff:6f:ed:da:92:3e:de:28:74:07:f7:f6:69:
ed:da:ad:c3:7b:e1:df:93:6e:31:91:6b:1b:39:57:d6:fb:88:
3c:23:fc:9e:07:8e:aa:92:36:aa:ee:df:22:98:1a:99:39:05:
6a:39:d5:39:03:7e:de:15:e0:65:44:b1:33:ef:31:be:de:35:
ec:9b:cd:b8:39:a1:ed:c4:ea:d5:e4:c6:be:69:3e:4a:76:1c:
f3:42:a1:a1:e5:38:22:0f:4c:b4:9a:fd:79:fb:c8:7f:22:8a:
08:29:59:3f:7b:d2:7a:eb:6d:2a:a0:45:69:04:20:fb:3a:31:
66:5d:dc:35:a3:f0:a3:8f:78:a9:32:e7:47:ed:00:b8:a1:e6:
6f:13:c4:dd:07:63:d9:40:83:20:a9:f9:9c:e7:b2:c4:1f:a9:
34:d4:ae:57:72:82:fd:85:ab:35:a4:86:3c:a4:7d:97:49:ee:
69:41:5e:70:fe:4c:0c:de:f1:22:d0:03:14:15:a6:13:06:2d:
25:17:27:2b:85:73:e0:02:41:7a:c0:1d:ac:a0:93:09:45:5f:
f2:2a:82:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:16 2026 by rpki-client