
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7345D30EA3F711F0B7D2CC77C4F9AE02.roa
File: 7345D30EA3F711F0B7D2CC77C4F9AE02.roa (raw, json)
Hash identifier: SHhEbqwmJhfq4dAkUEVhyRIDrjpX0ZY4uIjcf1dAOXA=
Subject key identifier: 30:A9:D4:97:A1:28:96:E4:9B:6C:E9:24:C0:6E:33:BA:F3:8A:BF:00
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6BD7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7345D30EA3F711F0B7D2CC77C4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:31:03 +0000
ROA not before: Wed 08 Oct 2025 03:32:43 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153023
IP address blocks: 2001:df4:7d40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27607 (0x6bd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 8 03:32:43 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61db6-97f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:9f:c9:9e:e8:8c:e5:bc:ef:14:3b:43:ee:
b3:a6:77:69:4f:cb:3f:36:34:2f:ea:79:92:aa:72:
05:ab:99:4f:fb:f7:ac:26:72:9c:0f:ca:a6:63:e2:
92:ff:26:7c:ba:c7:8f:41:6f:9a:34:0a:33:96:d0:
b6:38:3b:ff:a6:e5:fa:08:12:6f:90:3b:f7:56:f7:
0b:a4:b3:32:c6:38:19:c9:dd:86:f1:19:e1:98:b0:
a2:12:56:7a:f4:b1:d0:67:45:85:8f:65:9e:20:4d:
1c:9b:35:1e:7c:14:3a:30:4d:fe:cf:5b:cf:4e:ea:
75:49:e8:b2:41:7a:c5:f0:fa:1a:f1:f0:83:7a:2c:
d9:0b:12:31:c7:82:68:1f:a3:f1:a3:98:48:6e:4b:
a6:2a:fb:19:f1:52:0d:a9:62:c0:ba:61:f0:bb:b4:
28:bd:de:29:3c:13:6a:a2:22:54:50:65:fb:c3:5b:
da:21:d4:41:30:b3:d8:64:b6:69:5e:31:f8:03:1a:
b3:90:c4:46:68:46:69:27:a3:0f:9d:98:98:61:84:
58:3f:e6:22:be:54:92:b7:6f:1d:86:b4:b7:5f:85:
e9:50:5d:70:23:38:8b:d2:32:4d:11:47:bf:e8:e4:
5b:0c:bc:e5:e4:a9:d1:a2:a0:79:66:e7:89:47:6a:
77:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A9:D4:97:A1:28:96:E4:9B:6C:E9:24:C0:6E:33:BA:F3:8A:BF:00
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7345D30EA3F711F0B7D2CC77C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:7d40::/48
Signature Algorithm: sha256WithRSAEncryption
74:f7:f1:ef:c2:a5:ee:2c:15:c7:1e:7b:0e:c3:82:4e:29:e6:
b7:ab:ef:a7:f9:c1:89:88:18:a9:fd:72:63:21:84:87:59:fc:
cf:5c:72:e5:2a:c0:e8:4b:ac:c9:5d:4d:73:39:8c:c2:14:8b:
53:57:12:d1:6d:63:6a:b2:26:36:fe:71:3a:cd:91:0d:6f:34:
06:6c:f6:b4:1f:0b:33:da:fe:f2:c3:5f:f6:2a:19:f5:fb:29:
df:38:94:b2:c1:87:6a:56:9f:bc:3f:9c:03:61:40:2c:ac:86:
95:af:2d:3f:dc:f1:e3:42:f7:de:74:5f:62:0b:5f:ff:59:1a:
8a:3d:d6:db:04:a5:0c:63:c0:03:4e:1e:6b:a3:e1:26:10:de:
df:b5:b5:af:25:2e:96:7c:95:e4:3b:69:1f:37:e0:45:33:47:
79:3b:8b:aa:dd:5d:24:87:f2:e3:42:6f:42:59:b5:19:b5:1e:
aa:f9:58:7b:87:14:fa:72:a2:d8:d9:0c:e9:79:30:a7:72:fa:
4d:e9:5e:8d:df:75:ba:d3:a7:ba:ba:5d:e5:0c:0b:7e:e1:6e:
e8:61:2e:0c:ac:35:a7:12:b9:1b:e6:2d:6b:7f:75:f6:10:47:
c6:87:03:5b:63:5a:4a:4d:8a:17:f8:2d:c3:36:9f:0c:76:29:
28:e2:f5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:46:26 2026 by rpki-client