
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/77E54B78C45111EF9D399128C4F9AE02.roa
File: 77E54B78C45111EF9D399128C4F9AE02.roa (raw, json)
Hash identifier: oaVwq+HIN/wyAwR1kQHa3lIBPfZxf93jHy5Nhtjvz8o=
Subject key identifier: 4A:68:2A:75:2A:BD:92:82:96:84:FA:7D:D4:BA:E7:6B:1A:33:B0:74
Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Certificate serial: 018C
Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/77E54B78C45111EF9D399128C4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:14:07 +0000
ROA not before: Fri 01 Aug 2025 07:11:52 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 151349
IP address blocks: 160.20.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl
rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 03:55:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Validity
Not Before: Aug 1 07:11:52 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a5a93f-e050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:a9:f9:dd:bc:2b:a0:bc:84:8d:76:af:41:
0b:96:51:12:0f:34:d5:7c:82:d1:b0:b3:09:b0:c9:
fa:f3:b7:61:5a:c7:8f:25:97:d1:9f:18:02:ba:56:
89:3c:39:e3:08:ff:30:8f:9c:4f:fe:94:58:80:a7:
05:23:1a:cd:d9:8b:5a:35:87:86:b2:f9:60:4b:fc:
ab:ff:a4:eb:91:76:57:93:fa:27:e1:ff:1e:47:1a:
3d:5d:4a:95:2a:57:78:7f:02:e1:72:5d:ec:25:6a:
62:03:f4:7c:4d:04:25:7d:74:15:78:16:77:74:cc:
df:53:a9:59:ff:2c:b2:cb:c3:47:85:92:ea:fa:3c:
85:a1:d6:ac:39:d4:8c:f7:f1:8d:c2:80:9e:75:45:
b0:a3:6a:5b:fd:41:80:bb:4f:20:b5:e3:09:1c:06:
50:81:dd:81:92:e1:c0:ff:e1:82:5e:ec:4c:c7:5a:
b1:46:e5:cb:c2:3a:a3:d6:c4:af:9e:37:07:8d:5d:
d3:08:e0:9f:7d:66:82:5c:44:6f:78:b7:c0:64:47:
07:cd:10:ca:02:3b:6b:a1:fd:ce:19:77:99:6e:d2:
1f:6d:fc:a3:29:e0:a5:20:43:5f:b8:54:16:ac:fa:
04:91:01:67:c7:f4:ce:d8:41:b9:63:43:e0:bc:76:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:68:2A:75:2A:BD:92:82:96:84:FA:7D:D4:BA:E7:6B:1A:33:B0:74
X509v3 Authority Key Identifier:
keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/77E54B78C45111EF9D399128C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.20.142.0/24
Signature Algorithm: sha256WithRSAEncryption
07:da:50:ba:3f:dc:12:90:b8:94:92:6e:bd:cc:af:0e:cc:fc:
61:b5:a1:a0:35:cf:5c:72:2e:a8:79:8d:00:db:02:c5:35:3a:
32:be:b3:54:cd:ec:0a:b1:b2:7d:52:b1:26:87:28:a9:54:1e:
cb:02:40:5d:a9:54:3f:64:90:20:92:5b:58:bb:db:41:1f:18:
04:75:80:ae:2e:e5:3e:a6:11:b7:68:98:16:4d:f4:a4:97:c2:
65:c7:d8:3c:66:f0:30:d9:34:5c:aa:2f:38:ae:db:79:a7:2c:
c2:a7:87:cf:42:58:c1:ab:43:6a:5c:ed:7c:cd:f2:64:2f:b7:
85:9f:9a:5a:ff:a2:46:60:f3:a1:18:5e:59:b9:de:17:e4:9e:
01:84:5f:d5:43:ae:90:1e:30:07:e8:14:6d:cd:a3:2e:fb:76:
e1:29:38:35:71:d5:37:3f:71:27:20:1f:66:4b:37:1c:df:56:
23:cf:62:02:26:84:62:41:1a:66:0f:d3:8f:93:aa:19:0e:1f:
33:f9:a8:86:16:01:5b:dd:19:5b:8a:ef:6e:65:a9:d7:7e:81:
0a:7b:b0:05:b8:bf:fe:09:08:fd:4f:08:56:70:15:3d:0e:2a:
5b:6f:c2:04:71:54:f8:87:74:bd:53:86:c0:d5:a3:9b:ef:c7:
6b:23:9f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:22:15 2026 by rpki-client