
$ rpki-client -vvf rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/F7C02BF6885911F1B22A50DC5811F970.roa
File: F7C02BF6885911F1B22A50DC5811F970.roa (raw, json)
Hash identifier: /wR6FGdhOPqF6g3hYPb/kar7/EqNQG1KP1NPSwyZHb0=
Subject key identifier: 9A:F5:E2:8F:72:A7:18:AA:F7:36:BB:61:7A:F6:46:C8:98:4F:C7:F7
Certificate issuer: /CN=A917049A/serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8
Certificate serial: 5A
Authority key identifier: 2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/F7C02BF6885911F1B22A50DC5811F970.roa
Signing time: Sat 25 Jul 2026 18:52:22 +0000
ROA not before: Sat 25 Jul 2026 18:52:21 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 154482
IP address blocks: 198.15.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl
rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 08:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917049A, serialNumber=2E567CB4D6656BEE0CF9DC28AF0DE7215B7F67E8
Validity
Not Before: Jul 25 18:52:21 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a6505e5-3352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7b:be:5e:bd:ed:32:41:57:ef:9c:ab:7e:ee:
86:c5:8b:64:3c:29:58:a8:80:fc:d8:fb:21:28:19:
0d:ba:07:71:c1:56:06:9d:7e:92:af:42:d0:98:98:
71:3e:c1:c6:c4:55:3b:ee:12:46:6e:85:fb:0b:f8:
83:2b:2a:9a:28:14:5b:b3:b1:e9:ef:6e:65:b8:8e:
8b:f6:21:fc:6c:da:ca:f4:33:7a:0a:4d:db:c4:af:
f6:1f:d9:f6:ea:17:99:ac:34:c0:1e:56:03:c3:4c:
b3:b3:9a:59:4e:70:74:9b:04:f8:cb:b0:c5:8d:aa:
07:30:53:c9:48:16:19:ed:4a:57:10:de:35:1e:13:
6b:78:25:3c:62:0b:b5:a8:4c:35:c2:43:16:84:6e:
d5:14:10:2f:2a:08:53:79:64:db:9d:47:e8:38:45:
5d:90:ac:88:26:31:47:c3:67:90:f7:fc:5b:b5:4d:
d9:8d:48:0f:68:44:2e:f8:7a:46:c7:0d:80:c3:6f:
9d:8a:75:7f:09:c9:8b:07:64:7c:ca:96:59:02:51:
68:5d:c4:c3:04:fc:19:20:99:1a:50:9e:96:18:cd:
a7:07:fb:45:9e:4e:38:e7:58:77:78:be:34:97:6d:
1d:7d:fc:3e:25:a7:10:fe:eb:24:4b:2a:c4:f5:d2:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F5:E2:8F:72:A7:18:AA:F7:36:BB:61:7A:F6:46:C8:98:4F:C7:F7
X509v3 Authority Key Identifier:
keyid:2E:56:7C:B4:D6:65:6B:EE:0C:F9:DC:28:AF:0D:E7:21:5B:7F:67:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/LlZ8tNZla-4M-dworw3nIVt_Z-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LlZ8tNZla-4M-dworw3nIVt_Z-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/1A758C1A02CA11F1AD2D2749043D8C67/F7C02BF6885911F1B22A50DC5811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
198.15.29.0/24
Signature Algorithm: sha256WithRSAEncryption
59:8f:09:cd:e0:df:aa:15:12:c0:28:38:55:db:60:db:2c:71:
3d:89:82:f0:ff:57:b2:68:74:7f:f1:f9:2b:3a:83:4d:40:0a:
44:ea:ad:24:bb:3a:66:71:93:23:d9:0a:d6:ba:6f:c9:e7:f5:
24:0a:af:af:7b:e4:0b:b1:1a:e2:19:03:51:71:e3:7f:75:41:
3c:eb:d6:7a:32:29:90:67:90:1d:c2:cc:6e:86:12:2b:48:e3:
c8:5c:4b:b5:d4:ef:b7:cd:ed:1b:a2:3a:af:e9:63:14:c7:5a:
14:d2:3b:17:82:47:de:ab:39:93:0f:f9:33:c1:54:f1:5b:90:
51:5b:4c:30:31:68:8d:b4:fe:46:21:5d:fc:8c:7b:fd:72:65:
2b:b6:f0:14:d5:a1:83:60:47:4a:b0:59:2d:d2:d0:db:dd:ff:
0a:d0:e2:7d:4a:c9:6f:2e:61:32:3c:9b:d9:e8:7b:7c:91:c5:
39:de:7f:97:5e:f6:37:be:67:d1:db:2a:8e:47:c2:78:a9:45:
87:ec:1f:57:72:e4:05:c1:2f:69:08:56:83:b6:52:7b:ce:5a:
e1:38:23:36:06:03:42:d7:b5:52:b0:60:27:f9:11:79:55:06:
dc:7b:4b:a9:f5:b7:4e:e7:c0:8b:6a:e0:52:1f:5a:a3:3d:bb:
64:83:00:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:25:11 2026 by rpki-client