
$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/0754E1A6115411F19A223E75263D8C67.roa
File: 0754E1A6115411F19A223E75263D8C67.roa (raw, json)
Hash identifier: XkNkIGOcXYJKZ6BnuWlh6sl/eiNLJIsKVaWehkRd9Ok=
Subject key identifier: 89:F4:9C:B5:04:32:53:F2:81:18:82:F2:2E:27:9D:54:05:D8:53:9C
Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Certificate serial: 1CFB
Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/0754E1A6115411F19A223E75263D8C67.roa
Signing time: Sun 01 Mar 2026 15:54:52 +0000
ROA not before: Tue 24 Feb 2026 07:40:02 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 26506
IP address blocks: 114.10.33.0/25 maxlen: 25
114.10.33.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 16:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7419 (0x1cfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Validity
Not Before: Feb 24 07:40:02 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4614c-40b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:bf:36:1b:ea:60:99:ad:9d:24:08:45:cf:
e7:c1:42:72:c1:54:54:89:0e:09:b3:56:76:ca:18:
e4:73:5b:88:ba:9d:fa:50:58:cb:41:62:a1:fb:5a:
03:4b:e5:f0:de:a8:57:bd:83:16:10:73:f9:9d:68:
5e:58:dd:5a:6d:f5:8a:ce:0d:83:dc:d3:c9:5e:c4:
ea:92:44:e6:29:9b:53:e6:58:fa:43:94:e3:02:3c:
86:ac:87:07:cf:38:c7:b7:97:db:93:b2:c7:0a:aa:
13:b5:2d:37:a9:e8:60:7e:a5:f0:ea:28:53:70:46:
82:23:aa:e8:b6:c6:3d:cd:22:b4:ce:b3:bf:39:dc:
60:1a:14:3b:7a:f8:6f:c9:a6:bd:23:e8:5c:47:9f:
12:d8:6a:d6:ef:bf:e5:ce:42:3a:b5:6a:2c:4e:b4:
43:23:ba:b7:dc:f7:7f:60:4e:0a:22:61:f6:63:51:
64:eb:f3:57:7b:42:9c:de:55:55:26:2a:69:20:ce:
69:1c:5d:a0:e4:47:3b:2a:6a:b5:d6:d4:1a:81:87:
23:59:12:6f:10:f7:44:22:85:22:14:8c:f1:cc:b0:
c3:01:6f:a9:b4:c3:fc:3d:91:38:2c:50:71:fa:44:
51:29:24:2e:23:15:91:d2:05:d5:fb:73:cb:6c:10:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F4:9C:B5:04:32:53:F2:81:18:82:F2:2E:27:9D:54:05:D8:53:9C
X509v3 Authority Key Identifier:
keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/0754E1A6115411F19A223E75263D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
114.10.33.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c6:7d:08:3e:48:fd:fd:92:d5:1e:88:78:7b:ce:7c:82:da:
24:3b:69:ae:2d:5b:00:c9:61:37:56:8b:3c:bd:67:ae:43:7b:
c0:fa:d4:7c:fa:07:63:ff:5f:4a:9d:90:cd:e4:04:50:7d:b2:
47:4f:41:3b:bb:7e:8c:a0:de:36:03:55:8c:7c:22:5d:89:b0:
93:25:ac:cb:47:de:e1:70:1d:1c:f3:83:59:b4:cd:6a:42:b0:
2b:5f:a2:70:0e:2e:28:41:f1:a6:d9:b1:05:b6:54:36:74:bf:
da:49:32:f4:f9:e1:4d:0c:86:42:52:63:d3:29:d0:27:ed:94:
cf:03:b5:18:9a:4f:b4:95:b2:6e:a3:3e:29:da:71:0b:a9:08:
c1:3f:4c:9c:c5:b7:2d:28:c3:61:16:9e:51:42:62:1b:bc:fd:
c3:bd:ab:c0:bd:2a:49:46:f6:9f:c2:ad:83:ee:61:6a:0c:fc:
f5:e7:4b:16:11:cb:68:fc:3c:22:2e:de:bf:55:af:c2:90:ff:
b7:41:17:62:03:8f:2b:ea:85:7f:db:93:89:e3:15:9a:ca:fa:
25:07:4b:2c:4e:3e:d6:a5:64:0e:ff:f0:f3:58:a1:b1:b3:c5:
6b:83:ed:6d:60:31:46:ea:fd:a3:16:a0:23:4a:79:9f:7e:a8:
b9:2b:b5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 06:23:16 2026 by rpki-client