
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/7C487C522AD711F0889A9C4CC4F9AE02.roa
File: 7C487C522AD711F0889A9C4CC4F9AE02.roa (raw, json)
Hash identifier: LrgZlKmCBJJsSbfhjuUNZPTEV7fzfSNz0zBjR7IdJII=
Subject key identifier: 48:1D:E6:3F:C9:E8:2F:7C:E8:32:35:25:24:6E:7E:1D:90:0A:72:73
Certificate issuer: /CN=A9157B93/serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913
Certificate serial: 9E
Authority key identifier: 7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/7C487C522AD711F0889A9C4CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:36:50 +0000
ROA not before: Fri 27 Jun 2025 08:12:22 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 152681
IP address blocks: 202.36.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl
rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 12:36:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B93, serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913
Validity
Not Before: Jun 27 08:12:22 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a58462-1f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:2e:93:68:ca:9b:20:ca:87:55:50:7b:4d:
9f:33:58:4b:62:57:d6:a2:78:94:18:68:05:18:2c:
0f:61:dd:99:9c:2e:77:98:17:91:d7:d6:4b:49:8b:
90:16:6a:22:02:b0:1b:b3:5a:94:2a:87:89:db:62:
12:8e:e8:a4:46:a1:c4:e9:12:b9:52:4c:67:25:43:
ec:5f:87:cd:2b:5e:ea:78:25:4c:fc:3a:ce:b3:4e:
17:c1:0e:7d:9c:b2:c3:3f:3f:5c:a5:7c:c2:cd:bf:
72:73:08:79:13:48:29:18:6e:92:43:32:65:ad:be:
d1:e9:13:74:88:13:78:77:a1:a8:0f:1f:5d:c0:9b:
1d:d9:f2:13:44:6c:28:42:69:66:ff:68:65:61:df:
36:81:82:d2:b4:8b:84:ab:c2:b4:11:dd:be:43:4e:
d8:45:65:27:56:09:e9:8f:45:55:b1:d5:af:b0:51:
61:99:25:de:98:9a:c3:04:25:6f:38:85:5b:57:b9:
95:a7:93:86:92:e7:11:4e:fc:5e:30:80:a0:21:ed:
42:d5:d4:24:5d:8f:55:2a:61:08:92:fd:67:d9:99:
a8:85:ac:d6:a3:09:b4:f3:03:18:28:60:aa:e4:aa:
73:d0:07:20:91:a6:19:8b:52:5c:14:b8:1b:f1:2f:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1D:E6:3F:C9:E8:2F:7C:E8:32:35:25:24:6E:7E:1D:90:0A:72:73
X509v3 Authority Key Identifier:
keyid:7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/7C487C522AD711F0889A9C4CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.36.28.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e4:97:b3:1b:02:ac:05:bd:8e:1b:78:ca:d3:f6:d3:47:71:
61:6c:17:4c:54:48:88:de:0e:c5:67:99:fe:52:31:41:f8:ca:
bd:a2:d4:75:29:f8:96:10:2c:49:4f:83:32:12:fc:c4:2a:84:
d6:c0:0f:c1:ac:23:cd:25:e1:b5:ac:1d:f4:29:8d:97:da:bd:
16:07:b0:ad:54:44:45:ab:0c:b8:91:a4:c7:9e:5d:a9:24:1b:
58:81:47:69:45:d6:8b:10:42:4b:45:ed:7e:7e:63:39:cf:c6:
c2:98:c5:05:be:31:61:93:ae:21:ed:21:5b:cf:29:12:f7:f4:
dc:82:c6:49:66:f8:b4:7c:94:69:2b:1a:71:ee:5d:ff:3e:aa:
f0:89:e7:d4:03:23:ee:b1:df:e2:96:74:51:db:83:72:61:ae:
bd:f6:d3:f0:91:28:49:56:8b:c2:22:69:14:27:eb:78:ad:7d:
62:c3:49:15:b8:bc:75:88:3c:fc:65:a4:ea:8e:fc:58:4f:2d:
73:24:1c:df:1e:2f:0c:9e:2c:20:16:18:18:50:59:38:27:08:
88:9c:e9:1c:d1:de:fa:61:20:d5:80:86:10:9f:08:b4:d2:87:
fa:e2:28:c5:cc:33:69:d5:52:91:70:2d:48:42:46:ab:e7:be:
18:af:c0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:24 2026 by rpki-client