
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/7BC92742ADA611F18F55423F6E11F970.roa
File: 7BC92742ADA611F18F55423F6E11F970.roa (raw, json)
Hash identifier: ai7pgQHXoz7YgQfjtoOzeruV6ucLwGuomU9kU9c7KlM=
Subject key identifier: 77:B1:F0:2E:A8:66:44:D2:41:86:A6:84:0C:B7:0D:AC:2E:D1:8E:C1
Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Certificate serial: 3624
Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/7BC92742ADA611F18F55423F6E11F970.roa
Signing time: Fri 11 Sep 2026 06:03:18 +0000
ROA not before: Fri 11 Sep 2026 06:03:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38015
IP address blocks: 120.29.232.0/23 maxlen: 24
123.242.248.0/22 maxlen: 22
203.189.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13860 (0x3624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB
Validity
Not Before: Sep 11 06:03:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aa399a6-f21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:08:d1:78:f4:7b:b9:dc:87:a8:9d:11:11:
12:32:bc:9d:75:d1:bd:a5:19:c8:52:e1:29:a6:f3:
99:ee:e9:53:03:95:52:45:a4:e6:91:c1:c1:9c:09:
4d:a0:2d:90:b8:22:6e:c8:50:d1:16:a1:a6:65:80:
d8:7f:37:0b:c5:10:b8:c8:72:df:cb:4b:cc:04:77:
dd:cb:85:ff:05:fb:f3:3d:4f:21:85:c5:38:88:64:
90:3b:ed:45:fb:2c:1a:16:d7:00:4e:94:c9:75:2e:
63:33:d2:97:12:24:83:31:bb:d3:cc:99:9b:da:78:
7c:49:64:90:6f:65:97:c2:75:17:16:d8:cb:5a:07:
2d:27:b2:42:3a:d8:a5:3e:a0:74:df:ac:28:5d:3a:
66:f7:c5:20:71:71:22:fa:63:c2:ac:53:e6:b1:5c:
f0:76:5e:27:6d:e1:f3:ca:bf:6d:16:2c:0e:c0:96:
69:05:20:4f:06:59:32:67:f1:c8:51:29:00:11:28:
7e:25:87:2d:c1:54:da:98:4f:40:53:00:2b:32:af:
03:c4:68:fa:87:cc:dc:7e:3b:c9:5b:71:d4:c6:03:
dc:1f:98:2d:79:27:74:02:ad:35:a7:19:0d:36:69:
83:33:4c:e4:b3:57:7d:bd:2a:0f:2c:b7:8e:98:33:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B1:F0:2E:A8:66:44:D2:41:86:A6:84:0C:B7:0D:AC:2E:D1:8E:C1
X509v3 Authority Key Identifier:
keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/7BC92742ADA611F18F55423F6E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
120.29.232.0/23
123.242.248.0/22
203.189.176.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:9d:58:8e:78:fe:d2:de:08:c1:2e:72:13:29:ec:55:f3:21:
08:56:6a:ac:fe:77:fe:bf:f0:fd:91:6a:80:77:f6:ee:51:3d:
4e:00:a0:d5:74:97:41:f4:52:63:64:a4:3d:68:8b:ff:87:65:
fa:c0:29:ba:b2:0b:50:b7:d6:92:26:23:41:13:c0:a6:5b:1b:
e5:cf:49:2d:9d:8d:cb:2a:36:8c:14:dc:0e:8f:ab:f0:63:5f:
8e:a9:37:52:be:d4:24:f7:f9:9f:f6:9f:71:66:ab:56:9c:f3:
b5:61:f9:7e:3c:a1:db:56:96:80:9b:54:45:a6:cd:43:84:11:
36:18:b6:84:d4:0c:84:6e:3e:7c:f9:3a:75:44:4f:03:54:93:
eb:ac:05:24:1f:f6:1c:5e:05:b9:0c:55:82:60:75:b0:e5:1f:
27:b6:a0:57:ed:d0:6e:95:ff:a9:59:08:46:49:2e:de:99:cc:
31:c1:8e:3d:c0:cc:3e:f3:4e:f6:ac:5a:82:6c:46:78:ed:46:
25:d2:d4:59:ba:a3:35:d6:d2:a9:50:51:55:02:ba:c0:31:e8:
19:37:73:e2:f9:78:62:60:cf:d0:c6:51:77:b2:79:c3:0a:07:
e0:b7:d8:9e:0b:ca:83:c7:76:3c:60:5d:dc:2e:55:cd:a5:43:
41:83:3c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 16:38:17 2026 by rpki-client