
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/7857C144B87211EE98B04B19C4F9AE02.roa
File: 7857C144B87211EE98B04B19C4F9AE02.roa (raw, json)
Hash identifier: 7xpqZ91wcPuMMRlkm0PRbNRyyyJyggzoweRHZKLnU7c=
Subject key identifier: 7C:51:2E:EE:B4:95:16:46:07:20:16:07:18:35:16:92:38:8C:AB:54
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 0316
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/7857C144B87211EE98B04B19C4F9AE02.roa
Signing time: Fri 07 Aug 2026 02:52:20 +0000
ROA not before: Fri 07 Aug 2026 02:52:20 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 211759
IP address blocks: 2401:b60:200::/44 maxlen: 48
2401:b60:3150::/44 maxlen: 48
2401:b60:3200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 02:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 790 (0x316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Validity
Not Before: Aug 7 02:52:20 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a754864-bd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:54:fc:1d:9a:83:8d:ed:4c:d3:e6:40:75:
75:0c:c5:40:92:19:fb:12:94:11:a6:bb:26:14:b6:
af:b8:bc:9d:25:32:2d:02:77:3c:b0:55:4c:60:3b:
3c:a5:f5:87:de:b0:0e:d0:5d:00:74:82:12:c6:7c:
5a:99:1c:66:92:71:40:78:62:9f:90:86:e2:58:96:
ea:6f:9a:10:44:8c:7e:45:07:c5:39:e7:cb:df:74:
11:fb:0a:a1:41:f3:e9:6e:67:e5:f4:1b:d1:18:57:
f3:ff:3a:03:52:94:45:33:f7:9b:48:08:db:a6:78:
86:f3:86:f1:39:a4:cb:07:b3:89:63:0e:bd:bf:6d:
d2:5d:9f:d4:4f:2b:60:54:2b:fd:b5:e2:56:f2:61:
76:e1:b3:d6:29:17:42:bf:b7:a0:18:9e:1f:35:e4:
6c:1e:f4:0e:f1:75:f8:ba:94:6e:20:d0:6c:f8:5a:
fa:fb:14:90:25:e2:76:a9:c4:68:d1:34:f3:44:d7:
90:db:81:16:89:69:29:86:73:95:60:d4:91:24:2c:
e6:43:c7:53:ac:76:2b:b8:37:c6:15:a4:8c:be:52:
55:ed:05:93:08:81:39:0d:9b:fe:e6:a9:7d:ed:be:
64:c8:1a:f7:97:69:19:ae:84:d8:6c:42:b5:3a:b4:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:51:2E:EE:B4:95:16:46:07:20:16:07:18:35:16:92:38:8C:AB:54
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/7857C144B87211EE98B04B19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b60:200::/44
2401:b60:3150::/44
2401:b60:3200::/40
Signature Algorithm: sha256WithRSAEncryption
0b:67:58:55:22:18:b6:44:6d:0a:c8:95:c1:be:a7:08:3c:f3:
4d:00:08:4d:ef:19:4f:74:63:91:08:c0:47:2b:33:cd:35:6d:
2f:89:79:91:e5:48:05:9a:fd:fb:85:96:24:28:24:3c:a0:3e:
3c:0e:a1:2d:33:ef:19:57:bf:34:12:7c:9c:b3:d8:e5:19:2a:
21:dc:6c:1c:bb:c3:0d:e0:ce:22:a6:72:cd:65:5f:d5:fe:7e:
2c:e9:2f:03:f6:6c:39:97:f0:60:db:4e:3f:35:42:42:1a:83:
0c:ef:79:fe:23:b1:a4:1a:d9:be:ef:92:a5:6e:21:6f:ad:3d:
62:1c:86:59:b7:2c:33:76:f0:43:3f:aa:22:97:f4:61:67:75:
7c:72:53:6c:bb:e2:6f:92:94:7b:0f:3f:6f:c6:03:a2:61:cf:
1c:0c:01:32:93:07:c0:b9:82:57:ab:f3:1a:1e:55:3c:75:65:
08:5a:61:f2:74:1d:ff:a7:84:2d:8f:aa:7c:7a:6b:c9:3a:9c:
0e:fd:97:5e:92:23:48:72:d2:d4:6d:a8:26:e2:52:9f:44:57:
19:49:54:a4:f7:0c:02:38:26:2c:5d:58:00:35:1f:dc:dd:41:
88:1b:98:85:de:b3:f3:66:0b:d1:db:3f:32:9f:36:2b:db:cf:
a0:08:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 08:58:57 2026 by rpki-client