
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/CFE87CFEE74911EE9E36BA2AC4F9AE02.roa
File: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (raw, json)
Hash identifier: z9EDVnBrrvYkKd0g5cZsXbHmSVTdTt1qtDE8mfboD8c=
Subject key identifier: 1D:D9:D2:3F:5E:5E:43:F4:9A:75:FB:77:8D:C4:9A:D3:77:4C:4D:FC
Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Certificate serial: 01A0
Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/CFE87CFEE74911EE9E36BA2AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:43:35 +0000
ROA not before: Mon 21 Jul 2025 05:41:38 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 135315
IP address blocks: 159.73.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl
rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Validity
Not Before: Jul 21 05:41:38 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a59407-846b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:90:30:4b:82:a8:8d:44:e6:3d:51:dd:a3:
2a:24:77:bb:5f:49:4b:f9:87:1a:11:1e:5d:39:f0:
25:66:6f:84:92:8c:b1:7c:54:47:76:70:45:76:6d:
a2:3e:34:d4:2a:c2:85:d4:a9:8b:3f:9e:2c:dc:d5:
6d:1d:2a:5d:51:9a:05:f6:82:7b:39:f5:67:37:fe:
d0:07:b4:e7:6d:2e:ca:98:ec:70:c9:00:2d:10:8e:
2b:ed:9b:01:ed:dc:87:ed:14:6c:ad:9a:27:c6:ad:
40:75:2f:02:63:d1:8d:51:3e:dc:48:a0:35:99:c4:
9a:20:9a:78:7b:11:fa:9e:6c:63:f6:95:c8:c4:85:
e6:be:4b:ad:9e:e5:71:6c:33:ec:0c:1f:10:0d:b2:
55:25:f6:b0:47:f5:6b:81:17:25:e9:e6:2b:67:dd:
37:6d:72:5d:98:19:69:7e:a6:8a:9e:5e:37:1d:4c:
9b:63:c5:96:8e:41:0c:53:42:10:ec:17:8b:29:f4:
7a:eb:c1:8e:39:18:4f:08:e6:ec:80:46:44:51:36:
ad:44:74:51:a1:46:a6:a4:f5:f8:a2:70:dc:cd:d0:
2a:ed:53:72:1e:cf:68:b5:46:cd:b6:26:94:c4:3b:
ef:cc:08:95:dc:a5:32:31:0f:4e:b2:09:92:c5:56:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D9:D2:3F:5E:5E:43:F4:9A:75:FB:77:8D:C4:9A:D3:77:4C:4D:FC
X509v3 Authority Key Identifier:
keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/CFE87CFEE74911EE9E36BA2AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
159.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
71:03:7a:d5:d4:bc:25:c7:96:1d:8b:d2:76:3d:a6:6c:34:d5:
84:ad:51:93:cc:a8:44:80:36:9d:67:35:39:10:cf:05:36:70:
bc:d7:fd:20:8a:58:1a:af:f0:3d:32:5f:0e:6a:f9:24:b2:b2:
9b:e0:ad:f0:27:d5:09:55:76:2c:58:ea:98:d8:ba:c7:74:7b:
38:24:58:cf:2f:08:b9:39:b2:e6:70:a3:75:60:61:47:01:d4:
07:77:ce:74:fd:f6:0b:1b:a7:31:93:98:b6:5f:ae:27:22:b6:
23:e4:9a:d3:e2:f9:9c:83:d2:9c:d8:75:36:7f:56:4d:c9:06:
8d:a4:4a:15:63:1f:48:77:5e:ff:a5:a4:ae:bc:22:4a:b6:f1:
a9:c7:5c:6e:59:5a:09:64:97:ca:0f:0d:11:c1:20:45:2d:70:
c5:a1:c6:7b:91:46:76:02:db:85:86:a6:80:6f:7a:1e:88:64:
01:e3:95:a5:54:6f:64:47:f9:1b:ad:1c:6f:d0:48:db:dc:72:
a7:97:2f:96:88:fa:43:a5:9e:b5:4a:27:a7:03:b2:df:fc:95:
bb:ff:c3:2f:6e:cb:bd:77:f8:c0:f5:4d:b9:88:dc:48:5d:da:
e7:b5:78:c2:90:1f:08:ad:55:89:1d:d8:36:35:83:76:90:38:
02:77:f7:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:21 2026 by rpki-client