
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/74A64D6C784C11EC96A28137C4F9AE02.roa
File: 74A64D6C784C11EC96A28137C4F9AE02.roa (raw, json)
Hash identifier: BKeukvs+XB6GprJ3hFyFXNLFXDWiSEyXxlArMlcN05g=
Subject key identifier: ED:8A:CB:25:77:DB:37:4C:6D:CE:4C:33:79:F0:8E:32:9F:0E:9E:F1
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DCE
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/74A64D6C784C11EC96A28137C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:24:56 +0000
ROA not before: Fri 02 Oct 2026 15:24:56 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135949
IP address blocks: 103.129.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28110 (0x6dce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:24:56 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfccc8-6efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:96:74:4e:0c:bc:e4:01:62:17:38:24:ff:ca:
bd:a4:18:f8:c6:41:90:b7:ee:98:9d:65:7e:fa:39:
5e:cf:78:16:88:f3:a1:5a:1d:d6:31:ff:25:e6:b7:
48:62:25:5c:35:de:3d:dc:fa:ea:50:25:d8:a5:2d:
d3:60:4d:55:ad:f4:a8:3e:70:7f:0f:d3:2d:93:c5:
de:83:de:b3:6e:4b:86:62:7c:3a:14:bc:68:0c:91:
af:54:e0:78:c8:68:ac:1d:1c:86:22:ad:0b:2f:e4:
90:73:8c:f3:79:89:3b:82:39:07:75:62:e6:1e:c3:
98:64:f0:5f:a5:f9:89:05:04:48:f9:2b:b5:3d:c6:
6d:32:7d:7e:05:88:dc:df:ad:00:6a:d2:37:67:31:
94:e0:0f:e5:ed:44:95:84:9d:66:7e:7a:b4:30:d1:
30:41:83:2d:dd:13:ed:4e:34:4b:78:06:9a:52:e2:
d5:1f:c1:52:61:e6:e0:7b:76:95:a8:48:c4:96:92:
7e:98:f8:a2:ba:28:fb:5d:d7:d5:c8:fc:50:64:57:
ab:83:32:12:cd:5d:1e:56:80:a0:64:d0:39:2a:ef:
11:df:17:f3:24:35:71:14:5b:5a:1a:80:95:ba:9f:
b9:b4:68:e6:d1:39:6b:a9:d9:35:c8:6a:ce:57:d5:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8A:CB:25:77:DB:37:4C:6D:CE:4C:33:79:F0:8E:32:9F:0E:9E:F1
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/74A64D6C784C11EC96A28137C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.129.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:45:a2:12:15:60:eb:fc:17:31:79:ee:77:4c:ba:c3:cd:9b:
33:70:39:91:ce:95:5d:d3:e6:8e:80:09:de:15:36:b6:21:b8:
83:5d:74:69:75:3a:b4:c4:75:0c:6a:83:4c:d9:c5:6c:08:f1:
b2:61:cb:d7:1c:12:ac:91:0c:65:06:e1:a7:8e:cb:be:9d:6d:
ca:3f:04:f6:62:86:29:a5:00:81:27:7e:9b:cf:c6:1c:a3:e6:
9c:97:0c:5a:8e:f9:78:64:76:c4:16:cd:3c:d2:df:cd:7c:c5:
55:51:4b:c3:92:d4:2d:c6:78:f9:0a:34:a1:2d:aa:7f:a8:87:
a8:14:29:7e:40:b3:e7:fa:48:0c:65:5e:c5:43:3d:12:11:87:
39:70:c7:b2:aa:5c:04:52:be:57:2a:eb:e3:dd:ce:ea:24:c3:
07:df:9f:5a:d2:ec:62:e4:dc:51:c6:51:b1:7e:e6:ea:00:b4:
3c:5b:b4:47:4f:90:b3:74:23:63:3c:79:e1:a8:a6:83:8a:50:
79:40:1a:c9:66:fd:1c:6b:af:b3:d4:14:72:a3:7f:14:0e:09:
c7:32:1f:56:3f:83:b4:c5:08:f1:a1:af:87:db:6f:f3:b1:11:
08:d8:08:42:f8:ef:0f:99:69:66:54:48:06:42:aa:b8:4b:52:
6f:0b:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:14:45 2026 by rpki-client