
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/7C76080E08D611EE82522448C4F9AE02.roa
File: 7C76080E08D611EE82522448C4F9AE02.roa (raw, json)
Hash identifier: RXzPjqfGnjMFGEe5IJDvXNa9x/aOyMwECSrglqs4E24=
Subject key identifier: 97:B0:B6:CC:3A:6E:DB:D1:F9:09:BE:5A:66:FF:61:03:55:75:26:EE
Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Certificate serial: 084D
Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/7C76080E08D611EE82522448C4F9AE02.roa
Signing time: Sat 16 May 2026 21:26:04 +0000
ROA not before: Sat 16 May 2026 21:26:04 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 51.162.4.0/22 maxlen: 22
51.162.8.0/21 maxlen: 21
51.162.16.0/20 maxlen: 20
51.162.32.0/21 maxlen: 21
51.162.48.0/22 maxlen: 22
51.162.64.0/21 maxlen: 21
51.162.80.0/21 maxlen: 21
51.162.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 21:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125 (0x84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Validity
Not Before: May 16 21:26:04 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a08e0ec-ea1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:98:c6:d7:f6:88:81:51:2d:d9:3b:16:ad:
11:ea:ca:ad:d5:ad:8f:d2:fb:90:a3:67:3f:df:05:
4b:9e:3b:67:6e:56:e4:a4:7a:c7:e8:27:e2:c6:e0:
74:76:7a:cf:33:1a:c3:21:f4:a6:fe:ca:f3:44:43:
78:1d:fb:32:9b:a4:83:ea:d2:12:99:44:48:a9:ca:
54:90:56:e9:52:19:77:f7:89:90:83:bb:43:ef:ed:
bf:31:7c:24:2a:3f:74:b7:af:a4:33:c0:77:93:f2:
c2:fa:52:27:dd:5d:b7:8d:b6:a9:30:29:8c:15:bf:
88:01:0b:72:f0:40:a6:0e:56:1f:45:61:3b:0e:0f:
a3:da:87:10:66:8d:c7:da:17:5a:80:17:70:24:e8:
4e:3d:22:2d:70:d2:01:3a:9a:ba:32:ae:fb:a4:bb:
30:12:13:32:88:88:1e:df:2c:54:ba:f1:42:e4:49:
64:8a:56:05:17:e9:ce:39:70:da:7a:24:58:f3:9a:
4a:7f:17:04:6a:c7:5a:39:5f:d1:0d:3e:ce:b7:a3:
5a:6b:50:3f:6d:c3:74:d4:15:2b:a8:d6:ca:29:28:
91:26:f1:9d:57:db:fa:09:68:a1:c2:5a:39:a9:8b:
b6:2d:e8:a7:63:57:4a:fb:29:03:19:c7:8c:9b:02:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B0:B6:CC:3A:6E:DB:D1:F9:09:BE:5A:66:FF:61:03:55:75:26:EE
X509v3 Authority Key Identifier:
keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/7C76080E08D611EE82522448C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
51.162.4.0-51.162.39.255
51.162.48.0/22
51.162.64.0/21
51.162.80.0/21
51.162.124.0/22
Signature Algorithm: sha256WithRSAEncryption
11:ad:bd:a2:d3:b5:1d:f7:e1:cc:71:12:09:59:3c:dd:d9:1a:
f9:cb:17:ee:e1:6d:a8:8a:f8:37:17:76:53:ac:67:72:3a:e9:
33:4c:43:45:54:98:01:45:f8:c0:48:c6:08:3f:b6:14:e4:a9:
10:be:ab:da:b0:0d:be:ff:53:db:10:3f:3d:1b:e1:a7:a0:30:
14:1e:12:25:ca:4e:2d:af:8d:6e:5b:e1:c7:a5:fa:1a:86:32:
52:be:9b:b2:c4:6e:e4:62:0d:6c:23:4d:35:99:d5:ca:af:40:
40:c2:4c:8e:c3:b5:bb:f3:0c:d2:87:0a:e7:f4:1d:fa:35:29:
37:9e:fc:bb:3b:a8:a3:1d:14:fa:35:67:d2:3d:f5:ff:ce:d5:
d6:b4:42:30:75:a5:c6:de:cb:02:40:e1:3b:cf:2a:18:7d:9d:
c6:47:05:75:a7:b8:b3:06:09:e9:77:56:ca:c8:de:21:86:ad:
c1:13:d0:78:ed:df:f4:2d:c6:72:65:c5:e8:ca:e1:f6:37:6e:
2f:c2:15:5b:20:9e:e5:2f:38:85:41:11:ff:3b:6d:09:76:61:
3f:45:55:fb:01:23:4f:75:4a:32:0d:05:6d:14:25:fa:3e:d1:
37:d9:03:69:d5:9f:73:26:ec:77:d0:ca:fe:1a:b9:08:b0:24:
ee:82:6b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:18:59 2026 by rpki-client