
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/7656BF722DF911F1BA96C6D6BD833773.roa
File: 7656BF722DF911F1BA96C6D6BD833773.roa (raw, json)
Hash identifier: iR7Kdiz0oZDEZo38JiQAMAm9JRzy6cWra24N0sBArps=
Subject key identifier: 35:F7:F4:C2:5B:36:37:FF:C3:83:CA:9A:FD:78:69:FC:24:C3:8C:5F
Certificate issuer: /CN=A9184FC8/serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858
Certificate serial: 08
Authority key identifier: 96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/7656BF722DF911F1BA96C6D6BD833773.roa
Signing time: Wed 01 Apr 2026 18:34:48 +0000
ROA not before: Wed 01 Apr 2026 18:34:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 163.128.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl
rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184FC8, serialNumber=96897CCD71C9BD4315AF815A62FA7A222D6D7858
Validity
Not Before: Apr 1 18:34:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69cd6548-0a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:04:84:00:2a:bd:47:01:c5:d3:88:1a:ff:
2d:f0:de:9e:d2:2f:0f:72:9a:04:21:e4:da:fd:88:
69:d9:f3:eb:99:3f:0b:ea:4e:e9:48:4e:3c:1d:5d:
e4:46:e8:65:c4:0b:39:3e:2f:5e:7b:a0:ed:af:65:
41:88:10:f3:f6:aa:fa:41:8c:d7:17:67:a8:38:f7:
3d:66:35:8d:3d:bc:2b:ee:fe:b2:f5:a6:66:fa:e8:
d5:1b:85:a3:c3:13:8a:8e:e3:0c:d7:95:0f:b3:0e:
2e:16:5b:3e:ab:0b:7f:a2:42:58:56:5c:ea:ba:2f:
43:02:10:2e:ec:b5:fc:67:e7:14:c6:3f:97:5c:02:
9d:66:91:bc:f5:96:59:1d:61:25:62:0d:f7:2a:db:
ca:f3:9b:38:fa:bb:90:1d:51:1f:9d:70:d8:66:b1:
3e:f6:09:20:85:f8:54:92:0f:6d:d6:05:7b:26:bd:
90:2c:c7:73:6c:78:a4:e0:b9:6b:3f:0b:4f:ff:08:
0e:f8:c1:f5:3a:d8:5e:00:8a:cb:15:cd:db:59:24:
73:e3:16:bb:11:82:e3:77:4b:c5:0e:1e:0b:d9:01:
ed:a6:2b:2b:23:88:6f:09:ef:a2:11:2c:4e:5a:e2:
b6:10:ca:f1:81:8e:dd:5a:ba:ef:3f:45:e4:ca:30:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F7:F4:C2:5B:36:37:FF:C3:83:CA:9A:FD:78:69:FC:24:C3:8C:5F
X509v3 Authority Key Identifier:
keyid:96:89:7C:CD:71:C9:BD:43:15:AF:81:5A:62:FA:7A:22:2D:6D:78:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/lol8zXHJvUMVr4FaYvp6Ii1teFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lol8zXHJvUMVr4FaYvp6Ii1teFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184FC8/B3DCF1B62D9711F1B0078E519D833773/7656BF722DF911F1BA96C6D6BD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.141.0/24
Signature Algorithm: sha256WithRSAEncryption
02:14:66:65:f4:1b:dd:57:56:be:43:c9:e2:44:f7:a4:7d:4a:
15:48:b8:a0:86:61:f0:10:64:80:a9:1c:f6:bc:6b:08:6d:a0:
f6:f1:95:ea:80:bc:08:bc:9f:aa:83:ce:fb:1b:bf:43:0e:02:
f8:44:b3:0c:75:25:e4:19:ad:9a:74:f0:3c:15:b9:1e:2d:f8:
fc:01:ed:58:75:de:04:77:ad:b5:24:ab:16:f9:1a:fc:45:96:
64:cc:ea:74:01:10:c9:9c:4d:f8:a8:55:bc:ee:4a:c0:e2:bf:
0b:1a:ca:eb:cb:00:3c:f8:2e:86:6b:48:06:c1:56:9a:21:2e:
cd:a2:ed:70:d8:71:70:a4:ce:41:d5:d0:4e:98:81:13:35:3f:
f4:64:b2:cb:cb:67:05:2d:d5:e3:96:d3:33:f1:f8:5e:c7:89:
77:63:73:1f:e1:83:f5:2e:0f:9a:be:ce:83:f3:c9:bd:9c:72:
50:7f:e0:c4:44:80:b8:05:cc:c2:c2:30:6f:d9:da:34:ab:27:
e1:a5:a7:72:94:a3:13:4c:90:6c:cd:d6:17:ac:d9:1b:c4:3f:
66:f7:51:ad:a7:a4:b6:f2:5d:7a:f1:86:bf:22:b1:ee:c3:d2:
12:ff:4d:59:e6:72:22:fb:39:f3:d8:5e:30:13:82:f3:0d:0c:
06:7f:cc:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:23 2026 by rpki-client