
$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/7CAFA5C44CA711EC9D22716BC4F9AE02.roa
File: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (raw, json)
Hash identifier: 0049Zz3fRHQMf9xILQTLOj9NCi/xxI+LPAtxWbsSsqc=
Subject key identifier: B7:C2:91:74:64:0B:C9:B4:FB:E1:D7:7C:00:BF:A3:49:C6:D7:0F:C9
Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Certificate serial: 0549
Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/7CAFA5C44CA711EC9D22716BC4F9AE02.roa
Signing time: Fri 31 Jul 2026 00:44:54 +0000
ROA not before: Fri 31 Jul 2026 00:44:54 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 22552
IP address blocks: 45.121.136.0/22 maxlen: 24
103.61.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1353 (0x549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5
Validity
Not Before: Jul 31 00:44:54 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6bf006-bf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:b1:3e:84:72:94:f6:87:c0:d5:4c:4a:8c:
e3:50:4a:aa:d5:0c:27:46:29:56:cb:db:0b:ad:d2:
08:94:6f:3a:1c:e4:98:68:46:58:ff:6d:e2:24:25:
8e:11:9f:2b:df:55:67:30:90:b8:ec:7c:a5:59:19:
da:19:b0:de:d9:84:4c:dd:09:ba:e5:8e:cd:8d:61:
8f:fc:8a:00:ff:a1:5c:6d:b0:6f:c8:93:cc:4e:b8:
c6:62:c4:c2:e7:b5:53:a6:85:79:e6:ed:23:1c:ae:
c8:85:bc:0a:4b:9d:b6:05:22:ff:77:02:f8:d6:30:
92:41:da:22:9c:fc:09:3c:29:55:53:f1:71:89:b8:
42:3e:3e:b5:09:12:2a:f3:75:a3:0d:15:6b:df:bf:
64:65:89:e0:64:dd:bc:f7:79:f4:d5:f4:4f:c1:8c:
b2:ce:14:3b:85:3e:82:c4:c1:8f:07:65:de:e2:7f:
b7:a5:9d:0f:58:ee:cf:af:05:ab:35:72:2f:3e:07:
70:91:9d:36:e2:ed:50:85:61:e0:54:d3:59:46:92:
07:49:80:d3:bb:1a:2b:5f:96:ab:1a:a8:13:d0:6a:
6e:a9:21:f3:3d:1d:9a:88:78:ac:b2:9e:04:fa:88:
e2:3a:32:09:a4:8e:4a:cf:a9:f2:46:8b:e2:ca:06:
77:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C2:91:74:64:0B:C9:B4:FB:E1:D7:7C:00:BF:A3:49:C6:D7:0F:C9
X509v3 Authority Key Identifier:
keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/7CAFA5C44CA711EC9D22716BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.121.136.0/22
103.61.236.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:96:e3:3d:35:b6:7c:59:8f:2f:7b:44:dc:10:19:ed:8c:2d:
db:78:5b:50:40:7e:4e:e3:70:aa:4a:ad:16:be:ac:42:b5:b8:
0b:4c:ef:3e:cf:c3:e6:a2:46:d1:a6:18:91:06:8c:be:1c:60:
b4:b6:62:80:20:54:68:8b:b2:4e:c9:0d:ed:f9:37:c8:df:c1:
a7:e6:5f:c0:50:30:0d:7b:24:70:c9:32:91:02:39:ff:5b:fc:
a3:39:09:1b:d3:aa:63:a1:df:13:37:cc:77:65:eb:25:96:6d:
ed:6b:b6:e8:c0:e6:6f:b3:f4:fb:4e:34:ff:17:02:68:02:a1:
59:d3:4f:3e:a5:4b:4e:bc:71:e4:c0:72:61:ed:37:11:2a:ba:
68:a8:40:cc:57:de:86:00:ac:5b:08:8f:87:2d:a8:c2:5d:b3:
9c:66:99:18:56:f8:de:b2:3d:9a:fa:35:87:9a:05:b8:96:a4:
13:f0:56:58:b4:2f:a4:a2:a7:ef:35:64:58:08:37:09:13:15:
5b:8f:32:9d:17:30:42:f0:8e:76:ca:3f:2c:51:a2:ad:44:28:
39:6f:6d:aa:35:10:62:35:82:0c:b1:a3:e2:26:0d:f6:3a:51:
78:94:dd:96:2f:65:7e:44:bf:1d:8e:80:7d:aa:f9:99:22:10:
c6:a4:3f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 22:05:17 2026 by rpki-client