
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/7CB48FB0EA9411EAB77B1C69C4F9AE02.roa
File: 7CB48FB0EA9411EAB77B1C69C4F9AE02.roa (raw, json)
Hash identifier: C7P5AcEx090pAuIHt/BLFBDZ2T8kalGct8M8n/mgbS0=
Subject key identifier: 89:8B:57:E2:9F:C4:A0:07:FD:D9:08:9A:79:79:8A:B7:3E:7F:13:FB
Certificate issuer: /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB
Certificate serial: 1FAA
Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/7CB48FB0EA9411EAB77B1C69C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:54:15 +0000
ROA not before: Fri 02 Jan 2026 16:14:52 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 17423
IP address blocks: 202.131.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl
rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8106 (0x1faa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A0CB, serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB
Validity
Not Before: Jan 2 16:14:52 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a46127-13ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:8b:1f:c5:e3:e2:4a:87:12:89:11:3a:f1:
5b:a6:67:31:6d:05:3d:a5:78:d2:b8:b6:0d:6e:8a:
cb:b5:2b:38:33:a1:b1:ac:82:c4:45:cf:cb:07:66:
96:be:6f:a1:47:e5:2a:1c:e8:b3:c5:72:6b:89:6a:
36:19:ae:10:d4:18:c5:c4:e6:c8:33:ae:93:e0:c0:
c4:00:7f:65:0d:9f:34:e0:7b:42:a2:99:34:6a:a4:
9e:ac:12:d5:8a:c6:e2:b5:68:4a:4b:41:e2:59:b5:
1b:f0:71:dc:8e:80:00:02:07:ba:bf:ef:23:4a:12:
db:19:62:e8:7e:e0:d6:2c:2c:b3:6f:51:ec:3a:91:
38:a8:bc:38:bb:0c:2d:5f:40:b9:10:8b:4c:42:48:
20:d7:f1:5a:4f:71:16:19:95:a2:b1:1f:a7:22:09:
bb:b9:67:cb:b7:41:d4:03:c5:c2:8b:21:78:be:46:
3a:a5:19:c7:64:26:dd:6e:b4:4d:81:09:23:b2:03:
f7:e2:2f:25:dd:04:2f:a3:b2:5b:0d:35:7f:b0:e0:
dc:3c:62:8c:96:66:d0:68:62:57:90:79:3c:97:41:
e7:fb:43:3e:c4:a2:90:af:94:b9:fa:dd:30:b3:7a:
76:59:37:02:e2:74:0a:53:03:56:eb:ae:57:71:9a:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8B:57:E2:9F:C4:A0:07:FD:D9:08:9A:79:79:8A:B7:3E:7F:13:FB
X509v3 Authority Key Identifier:
keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/7CB48FB0EA9411EAB77B1C69C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.131.127.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4d:7d:d4:0f:f8:3e:30:9b:0e:a3:b1:ef:d8:30:6d:d2:dc:
8b:63:fd:45:ca:2f:4d:d2:3a:26:a0:49:b7:43:0d:9e:5d:e7:
32:10:ac:3c:d0:4e:24:fc:97:a4:c0:bc:f3:f8:57:bb:62:83:
6a:6c:38:86:f3:24:8a:b4:39:24:75:67:1b:61:82:5f:31:bb:
0f:0e:41:95:bb:4b:55:10:d0:72:84:39:84:8f:5d:12:64:36:
0d:9d:b3:02:eb:92:83:31:8a:02:86:bf:5b:64:1c:cb:39:b1:
ce:8d:f0:b1:c4:46:ff:1e:81:b2:8f:3e:48:88:07:a8:61:30:
bf:36:04:8a:b9:7c:45:38:d9:c0:69:ba:3a:b5:dc:dd:25:da:
c8:5e:28:ff:7a:23:e3:44:52:fe:a1:48:93:da:27:2c:ed:90:
1c:07:c9:95:a8:78:ad:6a:b8:ae:74:b7:ec:b1:43:b0:56:21:
2a:f7:29:a4:be:e2:de:ee:74:bf:d6:f2:36:c2:f0:15:06:c4:
36:22:50:48:fd:d0:91:e7:b7:8f:3d:16:7e:8f:83:94:c1:99:
cd:13:28:50:b9:c2:cb:6e:fd:f9:63:bb:18:16:13:ca:de:ac:
e8:ac:e1:ed:56:46:99:d0:cc:64:d3:c9:21:2e:69:87:ba:ce:
1e:7d:d4:78
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICH6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEEwQ0IxMTAvBgNVBAUTKDE4MDU2REVCNTgwRTM1NzRGMTQ4M0U2NjlDNUFBNDJF
NTg0RUNFQkIwHhcNMjYwMTAyMTYxNDUyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjEyNy0xM2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt1mLH8Xj4kqHEokROvFbpmcxbQU9pXjSuLYNborLtSs4M6GxrILERc/LB2aW
vm+hR+UqHOizxXJriWo2Ga4Q1BjFxObIM66T4MDEAH9lDZ804HtCopk0aqSerBLV
isbitWhKS0HiWbUb8HHcjoAAAge6v+8jShLbGWLofuDWLCyzb1HsOpE4qLw4uwwt
X0C5EItMQkgg1/FaT3EWGZWisR+nIgm7uWfLt0HUA8XCiyF4vkY6pRnHZCbdbrRN
gQkjsgP34i8l3QQvo7JbDTV/sODcPGKMlmbQaGJXkHk8l0Hn+0M+xKKQr5S5+t0w
s3p2WTcC4nQKUwNW665XcZooNQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFImLV+Kf
xKAH/dkImnl5irc+fxP7MB8GA1UdIwQYMBaAFBgFbetYDjV08Ug+ZpxapC5YTs67
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTBDQi9FNUMzQUU5QzVB
MTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05YVHhTRDVtbkZxa0xsaE96
cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dBVnQ2MWdPTlhUeFNENW1uRnFrTGxoT3pycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEEwQ0IvRTVDM0FFOUM1QTE5MTFFNjgxQjhDMTBGQzRGOUFFMDIvN0NCNDhGQjBF
QTk0MTFFQUI3N0IxQzY5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyoN/MA0GCSqGSIb3DQEBCwUAA4IBAQBXTX3UD/g+MJsOo7Hv2DBt
0tyLY/1Fyi9N0jomoEm3Qw2eXecyEKw80E4k/JekwLzz+Fe7YoNqbDiG8ySKtDkk
dWcbYYJfMbsPDkGVu0tVENByhDmEj10SZDYNnbMC65KDMYoChr9bZBzLObHOjfCx
xEb/HoGyjz5IiAeoYTC/NgSKuXxFONnAabo6tdzdJdrIXij/eiPjRFL+oUiT2ics
7ZAcB8mVqHitariudLfssUOwViEq9ymkvuLe7nS/1vI2wvAVBsQ2IlBI/dCR57eP
PRZ+j4OUwZnNEyhQucLLbv35Y7sYFhPK3qzorOHtVkaZ0Mxk08khLmmHus4efdR4
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:09 2026 by rpki-client