
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/7BCC4B32E85C11EE9593933FC4F9AE02.roa
File: 7BCC4B32E85C11EE9593933FC4F9AE02.roa (raw, json)
Hash identifier: js/NeNf/P0ilTfK3hm4VU61TP33gO5AhYeKCE1H/UPQ=
Subject key identifier: 00:B0:90:EE:94:81:86:FA:77:E9:28:18:A8:87:81:48:63:05:42:15
Certificate issuer: /CN=A91E91BC/serialNumber=414FB6178869130F826E9E30C0B794084D9760DD
Certificate serial: 03C9
Authority key identifier: 41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/7BCC4B32E85C11EE9593933FC4F9AE02.roa
Signing time: Fri 19 Jun 2026 01:29:22 +0000
ROA not before: Fri 19 Jun 2026 01:29:22 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 151499
IP address blocks: 192.188.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl
rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 01:28:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 969 (0x3c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E91BC, serialNumber=414FB6178869130F826E9E30C0B794084D9760DD
Validity
Not Before: Jun 19 01:29:22 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a349b72-614e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:fe:86:78:df:b0:1f:d8:f6:04:a5:8e:7c:
ac:27:b6:e3:08:24:68:10:53:26:cd:94:e9:8e:0c:
c4:df:e2:81:3b:a2:ad:30:f1:65:a2:1d:83:37:64:
d5:be:38:ee:66:93:d9:5c:65:08:72:39:1b:1e:1c:
dc:b8:ed:64:81:fd:fd:56:19:f5:1c:0d:2a:c6:6f:
c8:aa:30:ca:83:e2:28:e7:5b:df:e7:82:59:b6:df:
26:c2:b2:9d:0d:c4:c0:31:de:41:e0:27:73:88:7d:
6b:5e:45:c0:f2:2a:eb:c0:23:48:a8:4d:1a:32:bb:
02:ed:18:00:7c:aa:97:d1:ba:55:c4:b1:b5:a2:82:
a4:90:2b:56:23:14:c2:7c:ac:5b:04:e3:1a:88:c7:
3f:29:b0:4c:3d:50:c6:0d:2a:cd:07:c5:f5:c1:e3:
46:40:92:d8:54:3c:4f:ee:08:21:47:3a:05:ec:5e:
69:f0:40:c0:3b:33:89:f5:00:01:7f:4d:09:ef:f1:
9f:f6:d3:9d:7a:8f:ce:28:f9:61:d4:55:ac:d9:d4:
6c:5e:0f:ef:12:a7:3b:41:b6:b3:8d:db:47:91:a2:
c8:e0:a7:d6:34:a4:7f:89:b8:7c:e9:ab:8d:b8:6b:
42:bc:c0:0c:7d:56:74:7d:35:b5:a0:6f:8f:d8:c4:
a8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B0:90:EE:94:81:86:FA:77:E9:28:18:A8:87:81:48:63:05:42:15
X509v3 Authority Key Identifier:
keyid:41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/7BCC4B32E85C11EE9593933FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.188.107.0/24
Signature Algorithm: sha256WithRSAEncryption
60:91:0c:13:dd:0c:5d:ec:17:f8:69:74:51:c0:0d:6a:bd:3f:
32:45:30:dc:b2:ad:9f:d7:fd:8a:94:ed:86:51:8f:21:8e:c4:
67:c5:e2:93:3e:84:83:8b:cf:3b:28:47:e0:f8:19:fa:e4:20:
50:d3:d1:5d:dd:14:fe:66:81:0b:8e:f1:86:bd:64:1b:57:db:
67:00:68:5d:8e:ea:d0:f1:b0:94:8b:bd:6e:7e:53:03:24:53:
fd:ef:56:8e:e3:0f:bb:5a:9d:57:14:80:d6:16:e4:9e:b1:32:
89:43:13:c3:2c:ed:9a:f5:26:95:3d:63:6e:b2:50:d8:48:37:
ec:b3:8c:dc:66:b9:2a:5f:0c:b9:b6:5d:96:1c:1f:41:aa:5d:
a4:c4:ad:18:b5:11:de:25:77:fa:ce:81:80:95:e2:de:d4:71:
c6:aa:ca:43:94:5b:05:31:bd:4d:aa:93:51:4d:aa:dc:c0:a1:
49:db:41:ef:4e:ad:03:88:f2:db:f8:47:80:c7:da:9f:35:38:
78:0e:df:99:27:61:bb:29:6f:c2:69:dd:00:d5:ac:e9:da:aa:
aa:b1:4d:a2:0e:d3:33:22:76:02:a9:7d:f9:c7:4f:a7:99:00:
ff:89:d9:2c:7c:a7:46:16:2e:62:53:dc:9d:c4:48:89:28:c2:
0e:bf:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 07:00:58 2026 by rpki-client