
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/7D62DD7E840D11EFB275D662C4F9AE02.roa
File: 7D62DD7E840D11EFB275D662C4F9AE02.roa (raw, json)
Hash identifier: +3K+UcyzRpSjy7Me7pL45IgAPVR5qIJimnF75OpLhyM=
Subject key identifier: 1B:EA:32:F6:2F:73:AD:7E:21:11:FB:1D:71:61:4E:22:75:1E:63:6D
Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial: 3567
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/7D62DD7E840D11EFB275D662C4F9AE02.roa
Signing time: Mon 02 Feb 2026 14:42:10 +0000
ROA not before: Mon 02 Feb 2026 14:42:10 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 23923
IP address blocks: 116.68.192.0/20 maxlen: 24
119.148.0.0/18 maxlen: 24
182.252.64.0/20 maxlen: 24
182.252.80.0/21 maxlen: 24
182.252.88.0/22 maxlen: 24
182.252.92.0/24 maxlen: 24
202.53.160.0/20 maxlen: 24
2401:9c00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13671 (0x3567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Validity
Not Before: Feb 2 14:42:10 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6980b7c2-8b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:34:3a:68:7c:c6:c0:db:ac:e2:68:c0:e7:
8f:14:de:a3:70:49:5d:2d:3f:db:c9:d3:25:01:c5:
f8:b6:44:4c:e7:13:b3:c8:cb:36:11:2d:0f:ba:ff:
36:0d:a4:ea:07:d9:b6:5c:b5:26:8c:21:27:f7:19:
da:71:fd:28:a2:94:70:e7:dd:7f:bc:f9:de:95:29:
8f:36:f3:de:ab:07:98:cb:39:04:c0:0c:72:96:f9:
d9:a2:a6:41:69:97:22:21:21:48:f4:e0:90:70:35:
84:aa:27:62:7b:e8:b8:16:56:2e:fb:be:e2:7c:49:
bf:ea:05:65:4c:f1:2f:98:2f:cf:8a:27:b3:c6:1a:
d7:13:26:49:b0:94:cc:c0:6b:c5:08:6b:16:ca:60:
31:51:fe:68:21:81:94:5e:60:98:45:24:f8:4f:4c:
bc:7d:ac:32:ec:b6:43:28:c3:f5:ac:72:de:b5:64:
ab:54:11:18:7a:b9:d6:d1:ef:1e:e2:68:9c:43:8c:
02:fa:de:02:dc:93:e6:7a:88:d1:5f:d2:38:1d:07:
a7:fb:87:21:29:fb:c1:4d:82:db:55:32:51:8f:d4:
2b:2d:c9:72:6c:e7:6b:97:b0:ed:6e:61:e5:1a:b3:
51:c5:56:a9:5f:24:46:83:0a:09:83:ba:d9:cb:e3:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EA:32:F6:2F:73:AD:7E:21:11:FB:1D:71:61:4E:22:75:1E:63:6D
X509v3 Authority Key Identifier:
keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/7D62DD7E840D11EFB275D662C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.68.192.0/20
119.148.0.0/18
182.252.64.0-182.252.92.255
202.53.160.0/20
IPv6:
2401:9c00::/32
Signature Algorithm: sha256WithRSAEncryption
52:f2:8e:ba:84:04:09:b5:36:36:b9:e3:ec:a3:1d:0d:e0:5c:
5e:04:83:88:0c:21:53:9c:6d:de:c3:9d:f3:48:fc:b2:21:72:
c9:ff:69:56:d5:bf:e5:b3:f8:b1:6b:e5:12:8e:47:67:23:24:
53:9e:d3:b1:5f:e9:26:d5:3a:93:e4:71:6d:9f:82:4a:b5:e3:
3d:86:e6:4d:4a:37:7b:f7:35:81:99:75:77:96:f8:3c:b9:35:
6c:03:c9:9f:bb:d6:ca:31:e1:7d:64:e6:6a:60:27:2e:3e:e0:
42:c0:07:59:41:13:d0:d3:35:f0:2d:45:77:9c:8a:73:4f:05:
9a:a5:a3:c3:e4:9f:62:71:60:0a:45:5b:9f:6c:ed:da:9c:83:
dc:99:fc:12:55:a0:6b:23:4d:f8:22:33:25:75:49:ef:d6:f3:
0e:9b:c8:66:54:78:c6:98:17:dd:f7:26:6d:c6:fd:ae:18:7e:
b7:7b:f6:05:36:5f:34:70:c1:16:9c:c8:00:47:63:1a:56:d7:
e3:61:96:9b:d2:f8:44:ca:34:cf:03:0b:8e:7c:66:4f:ca:a0:
d4:fd:f8:c5:e0:ee:83:b1:ee:37:86:d8:3a:6a:9a:bd:47:b3:
b1:24:5c:c3:c7:3e:77:fa:57:5a:f0:ad:e1:e3:64:89:50:04:
b5:dd:09:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:36:52 2026 by rpki-client