
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/7FB5CBF097DB11EE8E67BA41C4F9AE02.roa
File: 7FB5CBF097DB11EE8E67BA41C4F9AE02.roa (raw, json)
Hash identifier: rxO58g4ckfnjnAl8Td7NyVk2cfGa6poPhda8R1ciKog=
Subject key identifier: 02:5F:D4:4B:B4:0B:07:43:A4:BB:B7:DC:BE:4A:16:AA:12:16:43:70
Certificate issuer: /CN=A9163EDF/serialNumber=7723D856E5208224F2BC89A3809777F5283312FC
Certificate serial: 01A6
Authority key identifier: 77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/7FB5CBF097DB11EE8E67BA41C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:28:13 +0000
ROA not before: Thu 09 Oct 2025 05:03:47 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152126
IP address blocks: 36.50.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl
rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163EDF, serialNumber=7723D856E5208224F2BC89A3809777F5283312FC
Validity
Not Before: Oct 9 05:03:47 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a414bd-27d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:76:53:73:95:fa:82:49:7e:b8:e6:ee:f3:
e9:17:1e:bd:ff:4b:8f:e0:8b:7d:1c:ab:8f:85:1a:
df:e2:8e:b7:83:e0:63:a0:54:7b:04:f3:14:f7:64:
53:62:27:c1:7b:3a:87:e7:3d:9c:91:11:3a:85:ac:
eb:37:84:fa:59:c3:82:48:9f:3b:ed:22:dd:e7:2e:
f7:4a:37:59:30:fd:f2:ed:ca:ba:34:64:e0:48:c2:
a2:e2:2d:8e:63:e0:fb:45:22:ad:e2:97:d6:a5:8e:
e1:33:67:74:be:b7:89:fc:af:ae:bb:92:44:71:c5:
54:49:c2:9b:03:a7:3d:14:3c:b1:d3:7c:ad:20:67:
fc:e4:d6:97:6a:a9:77:85:95:45:12:6f:08:1b:51:
28:a9:98:e4:eb:a0:7f:eb:a5:b4:f2:37:1b:b8:a2:
4e:b8:d5:fd:58:00:da:72:55:85:37:a0:54:8e:54:
fb:08:c5:0f:18:e9:f8:20:6d:f6:e6:96:ff:2d:a8:
c1:42:98:e0:2c:1f:95:83:c8:70:7b:1c:31:56:86:
58:e3:00:7d:2d:5c:49:4c:c8:a5:7d:74:df:93:48:
9d:50:d0:4b:dc:22:d7:50:02:43:0f:e8:1f:27:d1:
ff:f1:25:ac:71:b5:05:ab:62:ff:64:8b:5a:f6:42:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5F:D4:4B:B4:0B:07:43:A4:BB:B7:DC:BE:4A:16:AA:12:16:43:70
X509v3 Authority Key Identifier:
keyid:77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/7FB5CBF097DB11EE8E67BA41C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.20.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a5:d3:f3:c5:2c:6e:d7:ab:0f:44:6c:2d:51:c3:0e:6f:00:
6b:7d:8c:36:ed:f2:c1:82:32:cf:be:37:51:be:54:80:49:be:
6c:5d:59:7e:88:ad:0d:79:97:cf:ad:de:df:6f:15:d5:ae:38:
b7:00:f5:32:84:38:98:16:7f:de:bd:64:49:d9:3f:08:dd:f4:
f4:a9:10:5e:bb:6e:27:0d:9e:4f:dd:06:9d:8e:5c:5c:90:a5:
bd:ba:fc:be:5b:9e:95:93:3d:ae:73:f9:ff:73:5f:db:92:07:
2a:30:a7:e1:eb:b6:c5:b1:c4:e7:1f:90:1f:a3:eb:0e:6d:59:
19:0d:37:b9:60:a1:11:65:bd:c8:c5:d0:24:9f:25:78:11:a4:
1a:a6:50:60:b7:e8:94:cd:3e:f1:04:0f:e9:08:df:ef:4e:da:
60:16:43:a6:86:20:db:43:b3:69:b2:b2:75:87:07:59:03:e9:
f2:5c:cc:49:86:02:46:a7:f9:56:1c:c0:8b:bb:f4:2c:74:9c:
8d:05:fe:ef:23:13:2d:bf:08:3c:ee:ae:9b:14:ad:09:1a:bf:
3a:f7:0d:5c:1c:9d:ed:85:5a:45:df:6d:9f:3f:1b:94:1d:4b:
5d:c5:42:b7:9d:86:35:16:c6:c6:d8:e0:53:6c:39:75:d3:95:
30:42:e3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:54:45 2026 by rpki-client