
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/7C487C522AD711F0889A9C4CC4F9AE02.roa
File: 7C487C522AD711F0889A9C4CC4F9AE02.roa (raw, json)
Hash identifier: P+12Cbb7HmIXsLzNnZ8X6T+8YK1+SwLv+E/f5KRxCV8=
Subject key identifier: 92:DD:07:69:AD:7B:B1:72:91:1C:45:8E:1A:04:27:D1:23:FB:DE:FC
Certificate issuer: /CN=A9157B93/serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913
Certificate serial: DE
Authority key identifier: 7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/7C487C522AD711F0889A9C4CC4F9AE02.roa
Signing time: Wed 01 Jul 2026 08:34:47 +0000
ROA not before: Wed 01 Jul 2026 08:34:47 +0000
ROA not after: Fri 30 Oct 2026 00:00:00 +0000
asID: 152681
IP address blocks: 202.36.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl
rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B93, serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913
Validity
Not Before: Jul 1 08:34:47 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=6a44d127-11ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:bd:1b:60:23:f9:49:85:d3:ca:6b:ab:0c:
87:c8:1c:e5:a1:2a:fa:9e:1e:2e:2f:78:33:90:90:
36:ae:3d:db:88:08:8b:54:72:5a:43:c0:da:2e:7a:
bc:4d:90:fc:c6:80:7d:0b:49:72:84:a6:08:db:8f:
45:c4:3e:da:4f:ed:06:74:74:e7:c8:ec:0c:f4:ca:
5b:40:b7:40:b0:34:4a:06:cf:32:75:49:25:80:de:
61:62:ab:89:f4:f5:ea:fc:6e:0d:e0:83:fd:66:3c:
3f:59:ee:dc:7c:5c:8c:66:32:80:ce:32:af:dd:96:
e7:6a:97:92:34:55:11:3c:a8:49:40:80:2b:32:ac:
44:67:9b:a9:83:0a:81:03:53:92:7b:e9:b0:6c:79:
7a:c6:22:01:f1:10:32:e5:ca:2b:9d:bb:24:02:29:
99:3a:bd:6c:04:d8:44:1a:68:07:24:e9:ab:5f:dd:
e7:98:31:c2:64:24:96:60:48:b3:e6:29:f6:2d:07:
0e:ca:93:f3:1c:a4:c5:e5:89:93:7b:0d:73:51:65:
ce:89:7c:9d:d3:c9:69:57:13:72:b6:60:5f:4d:80:
33:95:d4:6a:9b:e9:a1:e2:45:2f:99:2d:88:4b:4c:
37:44:4c:f4:fa:74:6a:ea:61:8b:68:69:09:a2:44:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DD:07:69:AD:7B:B1:72:91:1C:45:8E:1A:04:27:D1:23:FB:DE:FC
X509v3 Authority Key Identifier:
keyid:7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/7C487C522AD711F0889A9C4CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.36.28.0/24
Signature Algorithm: sha256WithRSAEncryption
89:17:f3:9f:3f:fa:df:81:c1:d5:29:5e:49:29:9c:d3:75:93:
1f:18:bd:c3:d7:1b:e7:2d:7b:03:37:2d:bf:c1:cc:53:ee:48:
aa:da:c6:12:f6:17:16:c8:5a:de:a4:10:31:5a:af:9b:ef:77:
5b:cb:1e:7c:40:56:f8:51:1b:bb:c2:3d:df:3d:da:ec:b5:b3:
c5:e6:d6:d7:72:ad:8d:28:d9:31:63:30:87:47:b2:75:9b:d2:
86:bd:be:d7:e2:8e:7b:7f:1c:87:01:4d:d9:94:dd:0e:c8:f5:
4b:50:2f:fa:34:cc:4b:ce:af:ab:13:8f:f2:95:9c:59:ff:e0:
91:8a:15:30:80:c8:db:d0:fe:27:ac:0b:84:d9:f0:00:2d:5e:
9e:45:31:88:7d:0a:1e:9a:07:2d:bb:0e:42:78:4f:80:7f:5d:
77:9d:a3:58:c5:9d:67:48:0e:35:69:28:0b:2c:05:ac:47:ba:
0a:b9:c4:b3:eb:7c:e2:a1:ca:f0:74:a5:6e:13:5b:e9:de:89:
8b:8e:bc:d9:60:ba:33:c4:72:82:7b:73:52:4d:ee:18:62:fa:
52:32:ac:8e:57:aa:6d:55:d6:b0:2b:f2:03:b6:00:5f:89:48:
23:5d:f1:00:a3:4c:5e:26:75:ff:96:be:f1:1c:39:6b:22:58:
94:ac:4f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:22:47 2026 by rpki-client