
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/B7DDE480BC0A11F180E45ED03811F970.roa
File: B7DDE480BC0A11F180E45ED03811F970.roa (raw, json)
Hash identifier: cDycKBJXOUxI+akK5mVIps9oXW7WJEblif4OldMMBLA=
Subject key identifier: 7D:3F:AF:45:E7:6E:1D:05:63:7E:B8:4B:07:2B:97:01:6E:3C:C7:63
Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial: 0151
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/B7DDE480BC0A11F180E45ED03811F970.roa
Signing time: Sun 04 Oct 2026 20:40:40 +0000
ROA not before: Sun 04 Oct 2026 20:40:40 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 154834
IP address blocks: 74.52.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 20:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Validity
Not Before: Oct 4 20:40:40 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac2b9c8-3fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:da:86:1b:74:d5:4f:42:97:d1:0d:d4:d9:3d:
44:6d:2f:19:3f:a7:ff:a3:2d:70:e5:45:2d:38:d6:
b4:c3:57:ca:6b:2f:b5:53:ae:78:51:2c:db:d2:ea:
08:14:2a:d2:b6:d1:f4:ea:df:0b:6c:95:24:ff:2f:
d3:90:4c:d7:da:cc:a9:55:1d:8a:51:97:c2:05:07:
45:77:95:6c:40:8c:06:7e:1d:a4:0f:8f:db:1c:48:
9e:ef:36:48:8c:06:96:53:1f:0e:69:09:c8:0f:54:
a9:f5:e2:76:90:27:b6:f1:4d:d0:92:9f:7d:fd:52:
9b:eb:cd:77:d3:37:5f:88:af:d7:07:91:38:bc:67:
86:b8:fb:ac:fa:f0:90:40:e4:4a:c6:ab:a4:f6:0e:
6d:7e:96:14:2f:9d:2c:cb:4a:3a:50:ad:45:a5:a2:
12:56:84:10:ef:8e:52:a1:22:47:d2:9d:77:06:17:
b2:55:e0:e8:f7:f4:6a:f4:3e:3a:a8:fc:c4:2d:28:
0f:43:e7:6b:d2:cb:ef:a2:c8:e6:c5:b6:9e:ee:ad:
76:1a:ed:8e:5a:3a:16:1e:83:31:4a:a5:d2:81:c1:
3e:a3:18:40:61:d8:eb:74:86:20:da:64:32:bf:32:
95:b9:e8:b8:1a:60:cb:96:82:79:09:f5:b1:74:00:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3F:AF:45:E7:6E:1D:05:63:7E:B8:4B:07:2B:97:01:6E:3C:C7:63
X509v3 Authority Key Identifier:
keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/B7DDE480BC0A11F180E45ED03811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
74.52.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:17:a3:44:38:91:94:78:3a:6a:2c:0d:02:dc:63:35:97:fe:
b6:a9:08:43:a0:7b:c5:ea:07:2f:9b:8c:87:8a:9a:6c:1b:67:
79:d4:7c:09:75:e1:7e:d0:62:25:77:b9:67:5d:74:51:f5:b6:
8e:c6:21:c0:48:fd:b6:2e:5b:91:08:ab:fe:ae:39:53:8c:34:
df:0d:ff:c5:ef:45:4a:2c:6c:e6:9f:41:91:11:48:67:11:74:
c1:70:ba:42:a4:cb:e7:53:15:8a:e3:34:ce:6e:d6:d1:ab:c9:
51:b9:e4:36:ac:d4:ab:5c:c7:8d:ec:f8:cf:5a:ea:cc:09:10:
85:a1:4e:43:13:57:f7:29:81:1c:b3:02:da:51:e7:b5:16:ba:
8d:90:7b:d4:70:d9:05:83:18:87:5f:0b:f8:d0:be:da:70:69:
56:f9:fa:20:7b:ed:67:ca:80:67:9b:22:43:a8:9f:6b:b9:03:
10:ce:28:ac:b3:fe:56:34:45:f2:8c:da:59:9b:ab:fc:2e:b8:
c1:c6:a6:25:f1:ce:d7:fb:6f:08:97:02:ef:36:de:b5:85:e6:
23:cd:bc:ef:fe:a6:09:bb:50:10:75:5e:55:cd:cb:d2:70:51:
5a:ee:47:b3:71:43:96:a6:db:bb:73:6c:cf:41:a2:95:11:68:
27:21:4a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:47:39 2026 by rpki-client