
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7CDB77C68D7511F1B81A5A6E3211F970.roa
File: 7CDB77C68D7511F1B81A5A6E3211F970.roa (raw, json)
Hash identifier: wW3zDmhseyh3Yh/oOeh4ea2UWN+ukBkLwblwcoglm2g=
Subject key identifier: EC:73:A2:D3:AB:0B:ED:A8:A8:E5:E2:9E:0D:21:D6:B4:97:DB:9A:B8
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0DB2
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7CDB77C68D7511F1B81A5A6E3211F970.roa
Signing time: Sat 01 Aug 2026 06:51:57 +0000
ROA not before: Sat 01 Aug 2026 06:51:57 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 23532
IP address blocks: 43.246.129.0/24 maxlen: 24
103.7.209.0/24 maxlen: 24
103.7.210.0/24 maxlen: 24
103.26.164.0/24 maxlen: 24
103.26.165.0/24 maxlen: 24
103.244.211.0/24 maxlen: 24
160.20.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 17 Aug 2026 18:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3506 (0xdb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Aug 1 06:51:57 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a6d978d-f650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:ee:7f:6b:fb:8f:b7:51:96:41:63:14:63:
32:19:59:cb:b5:4b:3b:df:a8:8f:4f:7c:e9:db:8d:
35:d7:02:90:4b:a6:6f:69:a3:3c:61:9a:19:95:1e:
bb:5a:54:73:d9:1c:ef:fe:49:54:36:44:e0:e8:8c:
9c:6e:06:91:a1:43:27:83:bf:73:11:62:28:10:23:
0f:18:03:62:cb:2e:6e:cc:0e:f4:50:9a:e1:d4:9a:
c6:33:d9:e9:89:7f:41:ec:6d:6b:b0:58:15:88:ed:
9c:03:6b:08:b4:3e:c9:29:ba:53:3f:29:f4:b6:78:
f7:2f:12:f2:91:0d:16:02:29:e7:51:b8:d7:c6:1f:
a1:47:e9:5a:a2:d1:59:79:8c:08:77:0d:d6:5d:ee:
76:15:40:f2:db:65:c2:96:dd:29:ec:e0:f9:d5:cd:
3a:53:1d:b4:f4:3a:95:f2:4f:70:60:ab:92:44:8d:
70:23:be:fd:cb:3d:a4:60:01:1b:1d:77:f6:5a:8b:
23:5f:95:87:68:f9:d5:d8:86:31:9b:a6:93:70:7f:
8f:78:e9:02:e7:1c:f3:56:5d:97:0e:83:f8:a8:8d:
b5:24:b3:94:76:4a:75:4e:ed:56:e6:4b:6a:51:e0:
4b:ca:80:41:78:19:43:14:17:88:5e:18:48:3a:a3:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:73:A2:D3:AB:0B:ED:A8:A8:E5:E2:9E:0D:21:D6:B4:97:DB:9A:B8
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/7CDB77C68D7511F1B81A5A6E3211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.246.129.0/24
103.7.209.0-103.7.210.255
103.26.164.0/23
103.244.211.0/24
160.20.45.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:e5:d5:4a:3e:6f:d8:97:08:97:ea:8c:11:e8:fd:e2:17:67:
df:ec:15:9a:52:04:f4:2a:1e:4b:cb:3d:50:16:ef:42:98:c3:
ca:ac:8a:9f:d7:28:95:c1:4d:e3:fb:11:c8:30:d6:59:5a:d3:
6f:41:65:05:70:43:fd:54:71:07:30:a6:02:62:76:98:0d:84:
2d:8b:78:bc:c9:ec:7b:52:5f:a6:c5:c3:c9:79:df:6c:17:30:
1d:b5:d5:d0:37:07:aa:10:d7:68:96:27:66:c4:f9:67:de:6b:
a2:0f:bf:03:c9:d8:ab:0b:d3:dc:a8:2b:46:4e:5d:9f:a1:5c:
f9:a4:b6:76:10:66:3f:64:92:27:c3:cf:21:d0:7f:12:24:d9:
b9:d0:e3:e1:27:d7:f1:cb:26:07:ec:5d:5e:e0:3b:98:ff:97:
82:8a:7a:5b:21:80:f3:96:ff:63:8f:5b:8d:e2:80:00:58:d4:
e5:45:13:e6:05:90:8b:42:d7:aa:31:37:58:62:f3:3a:f6:69:
1d:7d:f9:70:a6:21:6d:52:af:9b:ae:a1:ec:d6:8a:88:4e:e1:
15:d6:f6:7f:82:c9:b5:3e:60:ff:e3:e4:a4:9f:b3:d4:24:b8:
82:dd:2b:60:42:af:fb:7b:c7:48:ef:81:fc:17:f8:85:25:f9:
16:03:eb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 15:02:49 2026 by rpki-client