
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/4776F9120CCE11F0A08AA749C4F9AE02.roa
File: 4776F9120CCE11F0A08AA749C4F9AE02.roa (raw, json)
Hash identifier: yGM7eKq5h+PmwajQSPDe5cv2bwop3r2WJ/lVhjv7Pu8=
Subject key identifier: 7A:1F:D2:AA:C6:53:7D:60:FF:D4:60:19:77:34:A4:B0:42:30:1A:32
Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1
Certificate serial: F7
Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/4776F9120CCE11F0A08AA749C4F9AE02.roa
Signing time: Tue 07 Jul 2026 07:33:34 +0000
ROA not before: Tue 07 Jul 2026 07:33:34 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 152901
IP address blocks: 160.22.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl
rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1
Validity
Not Before: Jul 7 07:33:34 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4cabce-2891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:9f:82:26:c7:83:e9:c6:c2:85:c7:a1:84:
f9:26:62:86:70:03:16:67:46:52:f2:c5:e2:b2:48:
e8:dd:85:36:01:73:bd:67:6e:fd:4a:cd:50:a6:99:
8b:6e:46:ea:aa:4d:e6:25:36:9b:b3:a3:82:d2:b5:
74:c2:3a:85:b8:c3:af:79:a8:d9:b3:a5:be:32:63:
9e:a2:99:8d:bc:5d:78:ab:c4:d0:68:4a:79:a1:09:
10:eb:3b:6b:c8:e0:c2:5a:76:51:f9:7e:69:0a:7c:
c0:76:d3:e1:e9:8f:01:0b:56:e3:3f:e8:83:fd:85:
d7:e6:e8:85:c5:66:e3:75:95:75:01:9b:89:85:8b:
d4:a2:4c:84:fc:87:79:15:6f:b2:90:06:7a:95:cb:
9d:f0:54:2a:76:6a:96:af:36:f8:4a:8f:fb:a0:2d:
79:85:c6:97:7c:f8:0c:6f:28:89:cf:63:96:4f:40:
0d:77:e2:5b:d9:06:7f:e0:71:9b:ac:c4:64:bb:58:
1d:ca:16:32:9c:0b:6b:56:2c:51:0b:57:53:85:12:
85:fd:fa:7a:b1:f9:78:9d:31:0f:68:0c:a6:62:0d:
f0:20:9b:a3:d1:4c:64:72:09:1c:fc:5a:40:4c:38:
ee:e2:ee:06:60:e3:77:3a:dc:59:b0:d9:53:ec:2b:
7b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1F:D2:AA:C6:53:7D:60:FF:D4:60:19:77:34:A4:B0:42:30:1A:32
X509v3 Authority Key Identifier:
keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/4776F9120CCE11F0A08AA749C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.76.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:1e:6c:5b:a7:e2:5d:50:5b:60:fd:38:54:f3:0c:9e:42:6e:
24:13:9d:76:17:0a:f4:69:03:4c:cf:7c:42:24:95:50:4d:44:
d5:c9:f8:59:47:b2:39:a4:15:a4:f7:41:99:21:cd:fb:0e:55:
14:68:11:2d:3a:df:06:37:16:08:5a:f1:5e:ad:6a:f9:35:50:
e5:3b:2e:05:22:7f:4c:48:f1:5d:ea:08:b6:92:4d:7d:f0:69:
08:68:eb:e0:7e:da:b2:43:cc:7c:43:7e:f8:50:68:19:5d:c2:
18:1c:0b:34:3a:67:44:52:22:35:16:06:c7:a6:08:ba:cf:d8:
99:0a:7b:b8:37:e1:6a:c5:8f:d5:0c:09:1f:37:6e:a4:f0:73:
f4:55:c3:fc:61:fa:8f:74:12:5f:a1:c0:80:82:05:7a:9a:23:
0f:7e:da:39:0d:09:f0:ba:a8:90:1a:60:45:ff:6b:fa:40:24:
35:db:ef:b2:9f:71:e2:af:e5:cf:27:37:6d:c4:4a:9e:2e:88:
47:c4:5f:83:00:6e:4d:50:56:df:fa:10:b5:75:be:0a:bd:ab:
6d:bc:be:bf:cc:6b:4a:27:9c:9e:7e:9c:ee:ee:dc:f9:20:73:
79:45:d3:0a:3e:94:9a:e4:c3:7a:aa:4b:27:aa:92:2b:b8:26:
18:58:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:23:29 2026 by rpki-client