
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/7E7B632E8D6611EDB7F20B1FC4F9AE02.roa
File: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (raw, json)
Hash identifier: 8+Ic42DDpm+gCqgWvnh0TXwsiANCVNuehMizJwv4Ko4=
Subject key identifier: 0E:38:2B:BA:A3:A7:19:01:8E:1E:99:8A:D2:D2:B7:28:29:15:6D:B1
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 02B0
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/7E7B632E8D6611EDB7F20B1FC4F9AE02.roa
Signing time: Wed 01 Apr 2026 02:34:09 +0000
ROA not before: Wed 01 Apr 2026 02:34:09 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 138687
IP address blocks: 103.86.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 01:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 688 (0x2b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Apr 1 02:34:09 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cc8420-383a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:fd:14:26:cc:65:f0:d6:b1:49:96:da:c7:
9a:7e:71:fb:f7:18:0f:b6:aa:00:39:60:65:b7:33:
70:f5:84:77:87:78:b2:5d:99:11:c7:6c:3c:54:03:
44:7c:14:8c:6f:67:10:99:c0:53:51:40:ca:90:4a:
58:44:06:0f:fc:f8:32:31:8b:9c:1a:76:b6:2a:a2:
84:19:f8:a3:f7:76:58:30:a7:c4:98:d4:3d:1e:dd:
5d:e4:0e:a6:9e:3f:e1:5f:cb:be:3a:5c:de:3a:b3:
f4:12:e8:02:fd:a3:65:56:fd:a1:d2:52:9a:c5:a4:
5e:7a:25:be:8b:d0:e4:3a:48:28:ca:64:d0:db:9f:
87:c3:67:6d:7b:13:ac:02:0a:66:9f:fd:84:d6:e3:
73:c2:40:85:b6:57:d1:97:80:0b:8c:a6:0b:b2:51:
b0:de:cf:04:ae:14:7f:13:c7:a6:9f:b9:75:8c:6a:
bc:10:74:cc:48:ad:d2:3b:b4:d9:24:5b:20:f2:f0:
58:3d:35:fd:ca:95:6d:42:3b:c4:1f:f8:02:80:ab:
37:81:8e:0e:64:1e:5e:4f:e3:e7:74:03:76:83:97:
6a:5d:b6:29:49:b0:09:c4:88:e8:5a:5f:81:97:cd:
8a:5f:de:d0:ab:71:02:dd:ac:bb:cc:f3:97:a6:79:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:38:2B:BA:A3:A7:19:01:8E:1E:99:8A:D2:D2:B7:28:29:15:6D:B1
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/7E7B632E8D6611EDB7F20B1FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.123.0/24
Signature Algorithm: sha256WithRSAEncryption
96:57:1c:88:c1:2c:14:5e:08:ad:28:af:0c:af:69:5d:92:db:
f8:1b:75:f7:b5:59:6f:7f:b9:56:6f:ff:76:d3:7a:f1:36:1b:
90:7a:ca:3f:2f:42:8c:65:dc:7a:b5:76:5f:d3:be:b9:a1:19:
0f:39:55:96:03:3b:31:61:48:f5:c6:ad:4f:8b:13:ea:e3:62:
4e:dd:f6:29:4c:af:6e:26:c1:ae:5c:4b:9e:52:ea:88:b2:cf:
5a:da:c2:1e:73:8d:d3:b0:85:d7:92:7d:17:38:11:46:15:62:
27:e7:e3:e2:8a:db:e9:58:32:87:1d:b3:b0:4d:f9:a6:c4:12:
6a:93:0b:f6:eb:22:7d:87:19:16:15:76:e2:4a:1b:56:91:07:
a1:c0:9a:aa:a6:7c:0b:05:30:14:3f:b8:a6:d0:48:df:b0:b0:
82:ac:a7:df:81:46:9f:18:b6:80:c5:cf:15:de:b5:c3:51:27:
fe:09:a8:d9:38:a3:37:70:41:3c:26:e4:3a:3c:92:74:7a:40:
1c:78:a8:f6:b8:24:b6:c3:d1:5d:91:ae:83:de:20:d7:d7:2b:
22:23:fd:f1:0c:2d:73:42:23:82:fb:bb:76:72:61:fe:43:fa:
b4:91:f3:b9:03:09:4d:67:83:63:37:84:24:3b:bf:16:e7:bc:
cd:bd:38:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:16:43 2026 by rpki-client