
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/7B57CA16ED1C11F09DBA53AB416F56BC.roa
File: 7B57CA16ED1C11F09DBA53AB416F56BC.roa (raw, json)
Hash identifier: zWp6TDXFrmD5/NSfTk8YdIj2drPaBuTNuJsIqnk6a6U=
Subject key identifier: 7A:97:DE:69:78:8C:E7:19:FF:64:F7:F3:D9:F7:74:FC:04:FC:CA:BA
Certificate issuer: /CN=A9125864/serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Certificate serial: 21
Authority key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/7B57CA16ED1C11F09DBA53AB416F56BC.roa
Signing time: Sun 01 Mar 2026 05:46:48 +0000
ROA not before: Fri 09 Jan 2026 05:31:43 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 23719
IP address blocks: 203.32.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:21:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Validity
Not Before: Jan 9 05:31:43 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3d2c8-fb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:e0:02:69:bc:f8:65:2f:90:c0:8b:ff:e8:
f4:bf:8f:e7:d3:67:6f:de:45:0c:52:48:3e:ef:f9:
b3:93:0b:fd:04:6c:cc:30:55:36:ac:8c:bb:11:ab:
7b:86:00:4b:70:26:98:85:5f:76:bf:88:c0:15:8e:
28:a6:60:e4:ec:a3:f5:2d:e2:f9:55:54:4a:8c:63:
15:ce:98:34:95:fb:03:99:83:2d:80:c4:54:52:20:
84:9f:4d:0e:41:f8:da:e6:4a:f5:9e:80:b4:04:fb:
eb:60:5a:d7:60:d5:bb:21:d0:6c:b7:de:ca:f3:5b:
0d:1b:d8:d5:f0:35:dd:13:f5:1a:42:17:77:a9:36:
ef:82:98:1d:4c:88:4c:22:70:9a:cc:dd:85:7a:8c:
4e:e7:30:77:87:6a:2f:7a:15:7d:dc:76:29:03:b0:
8e:fa:47:66:a0:23:d4:2a:1f:c2:f0:4b:f0:95:66:
9b:7c:ef:f5:a3:bb:90:4f:85:88:3e:fb:49:97:79:
a6:1e:c6:eb:7c:8b:a7:9b:61:5a:b9:22:7a:5c:91:
6f:93:f0:9a:d3:4f:3f:bf:7e:49:ec:73:11:75:79:
9d:17:5c:ee:9a:2d:92:6b:2f:69:22:1b:ff:72:ee:
f9:11:62:2b:5b:12:65:49:82:c3:49:58:29:c3:f7:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:97:DE:69:78:8C:E7:19:FF:64:F7:F3:D9:F7:74:FC:04:FC:CA:BA
X509v3 Authority Key Identifier:
keyid:FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/7B57CA16ED1C11F09DBA53AB416F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.32.106.0/24
Signature Algorithm: sha256WithRSAEncryption
49:47:8f:34:be:e5:41:fb:f7:eb:32:44:f8:08:8d:3c:da:eb:
a4:14:cf:3d:44:12:4d:d7:12:30:8e:61:b7:ff:29:64:e4:2c:
a4:a4:88:04:49:36:ed:19:83:32:4c:ce:6d:e0:98:28:bc:4b:
ec:3d:b5:dc:b2:25:da:e9:c2:3e:67:5b:ca:8f:f3:63:d0:23:
64:2c:97:9b:b3:c2:c0:73:24:9d:8a:b0:5b:c2:ef:57:7f:44:
f7:f4:2d:eb:17:5e:28:bf:d7:ce:55:c2:e2:d9:35:04:5b:85:
84:03:14:5d:1b:ed:38:d3:04:a2:e2:ee:a7:24:07:25:2c:e4:
c8:75:71:49:71:84:b9:38:3f:4c:fb:6c:90:39:ca:c1:94:5f:
2b:2c:2b:bf:a3:fb:98:d2:1a:80:7a:51:fd:d4:60:b1:05:7e:
5c:59:e8:45:17:df:36:ec:e0:eb:9f:ba:d6:8c:bc:f3:5a:97:
cc:32:3c:cb:6b:d5:6b:89:ab:f5:91:2d:cc:e5:4c:4e:20:b4:
18:3b:47:ee:e1:f6:10:48:5a:be:3e:21:3e:c0:c7:4a:40:b3:
29:c9:27:b1:b4:eb:5a:10:2b:12:1a:36:92:09:f8:07:d1:e5:
cc:5f:d9:63:60:fc:52:2b:a2:d0:73:6a:d7:ed:0b:71:fa:10:
c0:0c:4a:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:41:57 2026 by rpki-client