
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/7E782718940B11F1AE7863F93E11F970.roa
File: 7E782718940B11F1AE7863F93E11F970.roa (raw, json)
Hash identifier: XTTBwDL+3ZX31Mb6Vk3dZi/vUMZFs0rfR5N64dJPp9c=
Subject key identifier: 88:80:F3:C8:B1:B6:5C:49:13:44:9E:99:52:83:E6:90:47:3E:EC:1A
Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
Certificate serial: DA
Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/7E782718940B11F1AE7863F93E11F970.roa
Signing time: Sun 09 Aug 2026 16:00:52 +0000
ROA not before: Sun 09 Aug 2026 16:00:52 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 149287
IP address blocks: 49.213.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl
rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 06:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
Validity
Not Before: Aug 9 16:00:52 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a78a433-0357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:ba:73:24:45:49:f5:fa:cc:69:99:1c:22:
e8:87:dc:0f:bc:f3:8e:15:30:09:32:9f:a8:5b:65:
ad:bb:84:89:64:e8:9d:ac:75:d5:05:35:96:f5:2f:
fb:c5:58:5b:c5:b9:5f:f3:3f:03:ed:9e:3c:e8:3a:
77:31:0f:53:e2:11:ca:09:57:de:8f:fe:5d:cb:f1:
36:c9:58:54:ed:8a:c6:01:28:fb:32:d0:fb:18:7c:
c4:ec:5e:a0:eb:08:c9:61:aa:dd:1c:b0:1b:7a:4d:
0e:d2:f7:37:2e:04:d3:64:f3:4d:3f:fa:bd:c5:97:
9f:bc:f1:10:2f:24:af:34:53:7d:06:cc:d7:cd:4f:
aa:52:55:ae:ec:0e:82:4f:6c:2f:3f:88:b3:ce:29:
af:b4:e2:c4:b0:e1:83:a4:84:12:fb:10:6f:cd:63:
c1:64:61:85:c8:c2:24:17:b3:7a:77:96:93:9c:ca:
71:02:f6:96:f3:d2:b1:50:66:a2:0d:6d:b0:a7:6f:
ed:15:71:4e:7d:8a:4e:7e:36:24:b7:8f:10:14:74:
61:65:d2:73:8a:79:d5:3b:ea:fb:60:fa:89:0e:37:
ab:c8:fd:e8:b5:72:5e:ce:80:6e:5c:ac:49:02:eb:
e6:7c:0d:90:b0:fa:c9:45:00:4c:77:c1:0b:4f:56:
db:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:80:F3:C8:B1:B6:5C:49:13:44:9E:99:52:83:E6:90:47:3E:EC:1A
X509v3 Authority Key Identifier:
keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/7E782718940B11F1AE7863F93E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
49.213.33.0/24
Signature Algorithm: sha256WithRSAEncryption
96:33:d8:a4:01:ec:76:b8:6b:d0:b8:e3:32:1f:d0:e0:6c:5f:
47:55:a9:35:dd:3a:e2:8b:e4:25:59:a0:a6:60:3f:aa:4b:9a:
a0:85:e5:c2:89:c5:27:65:66:6f:69:42:9f:a7:3c:d5:60:f4:
97:bf:0c:70:84:67:1d:4d:79:2f:59:82:75:cc:de:6a:46:3a:
d5:a5:4c:65:74:e5:e1:39:ec:ae:fb:70:22:9a:a2:25:07:4a:
66:bd:f6:2c:d5:86:f5:b9:10:82:34:b6:65:b1:7c:0b:90:ea:
76:26:8d:2b:2c:f5:a1:a8:26:06:3b:5d:21:d4:36:05:21:9a:
06:d7:a3:d0:d7:6a:29:97:94:fb:de:51:46:69:26:ab:8c:05:
72:06:39:3f:9b:09:be:ec:c8:83:e2:62:e4:c8:89:88:5a:f4:
d0:09:2f:a2:e3:7d:7b:8b:37:c9:d7:9c:44:0d:be:6d:83:54:
b8:54:77:c9:c7:b5:aa:82:99:10:7c:71:c1:d0:14:aa:10:c5:
4e:1c:01:0d:ac:f4:37:16:c7:a2:15:c3:0c:a2:9f:c1:43:8c:
af:5e:d8:8a:dc:44:69:2a:21:74:2e:46:86:86:e3:7e:3b:4c:
2c:58:62:87:89:97:36:c6:4d:0e:1d:b8:9a:ea:ee:7d:c1:34:
f8:b8:49:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:39:25 2026 by rpki-client