
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/E047F204A4CC11F0AE32440DC4F9AE02.roa
File: E047F204A4CC11F0AE32440DC4F9AE02.roa (raw, json)
Hash identifier: vWqM5ihwCk4XUU3cZitf0tZmykJ/UK7EMbnR432bGvM=
Subject key identifier: 96:DB:69:F1:D1:80:25:D2:F6:5F:80:FD:B0:B3:8B:0C:89:2B:37:44
Certificate issuer: /CN=A9196F7C/serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
Certificate serial: 5F
Authority key identifier: 6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/E047F204A4CC11F0AE32440DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:08:59 +0000
ROA not before: Fri 19 Dec 2025 06:24:47 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 152699
IP address blocks: 157.85.80.0/21 maxlen: 24
157.85.88.0/24 maxlen: 24
157.85.89.0/24 maxlen: 24
157.85.90.0/24 maxlen: 24
157.85.91.0/24 maxlen: 24
157.85.92.0/24 maxlen: 24
157.85.93.0/24 maxlen: 24
157.85.94.0/24 maxlen: 24
157.85.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl
rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:21:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
Validity
Not Before: Dec 19 06:24:47 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a43a6a-677d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:40:76:bf:7f:04:12:61:e8:b0:89:5c:ac:19:
ef:99:76:78:f2:36:eb:ca:b4:71:b9:6f:3b:8c:ac:
18:47:5c:17:0d:1b:90:14:d1:eb:06:55:bb:1b:70:
ae:9d:5f:f8:77:aa:97:2e:4a:1b:56:9e:37:d7:1a:
9f:62:bc:d8:a0:52:89:46:e7:25:06:3b:2f:70:8a:
f5:12:a8:e8:20:7c:54:84:32:df:90:7c:f7:9a:00:
dc:23:d9:f1:b1:fe:9d:cf:eb:d2:92:d0:1f:5a:39:
35:fb:9e:90:b4:ba:48:0e:69:c0:ca:80:cf:56:3b:
ae:df:5f:2d:ce:5f:dd:5e:d1:03:46:21:39:00:30:
30:0b:c6:1c:55:a4:e1:48:29:97:30:8d:5e:5a:e6:
c4:20:4c:14:88:aa:e0:c7:7e:ee:81:6f:a7:08:fd:
3c:5b:b1:aa:f6:5d:45:0a:c7:0e:61:01:aa:e8:c0:
ad:58:b4:0e:6a:64:d8:51:73:63:74:39:c5:f5:6b:
91:d6:0b:5c:85:d3:1c:62:7b:cd:8a:21:51:ff:92:
70:0f:05:8b:9c:32:aa:fd:75:12:f2:41:42:87:9d:
3e:24:aa:0d:bd:13:76:8a:2a:29:e5:f5:76:9e:a9:
84:59:1a:d8:13:6f:a7:85:33:b8:01:4b:46:ba:ae:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DB:69:F1:D1:80:25:D2:F6:5F:80:FD:B0:B3:8B:0C:89:2B:37:44
X509v3 Authority Key Identifier:
keyid:6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/E047F204A4CC11F0AE32440DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.85.80.0/20
Signature Algorithm: sha256WithRSAEncryption
bd:ff:61:17:2e:82:68:03:4c:5b:c0:b4:be:49:e8:a7:cb:c9:
eb:d2:61:94:3c:28:b3:64:ca:4e:b8:6c:28:80:92:ac:05:ca:
d3:84:15:10:cd:66:b5:56:bd:d8:98:52:d8:4f:bf:6e:53:4a:
c3:82:57:4f:9f:a4:1c:4f:3b:39:a4:51:ea:de:1e:29:fb:ce:
04:7f:95:05:9c:32:42:8c:fe:7d:68:8e:71:44:5a:be:25:48:
50:95:dd:ed:f6:8b:06:a4:f0:35:0f:a3:87:6f:39:ec:99:14:
28:4d:6e:cd:27:2f:a4:f4:91:26:76:a5:d3:a4:a0:f9:9d:42:
33:85:5a:3c:a2:ba:d6:57:83:e6:72:62:fb:7d:5e:a4:70:54:
3c:96:6c:69:4e:82:b6:00:75:76:6a:75:e7:24:c5:53:70:86:
c4:cc:83:8a:7c:9d:5c:e0:9b:25:0e:d5:55:a9:67:96:fe:4f:
53:5a:ba:96:8b:19:b4:a4:b7:c0:6e:6e:ae:7a:65:0b:15:7d:
a6:58:2f:1a:e6:4e:7e:f0:27:e9:f3:f8:03:62:54:41:61:94:
a3:ec:d2:52:7a:ac:77:57:a4:8d:67:fd:5c:56:b1:85:63:23:
a3:12:65:5a:c9:0d:fd:2e:09:22:7d:b5:71:92:10:82:5e:bb:
df:76:bc:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:42:09 2026 by rpki-client