
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/7BC3290E9CEA11F197F53AEC3211F970.roa
File: 7BC3290E9CEA11F197F53AEC3211F970.roa (raw, json)
Hash identifier: z1RqV05AbVoae8OdZTcRSinQNhmkFt8NpWWY9cI3ywM=
Subject key identifier: BE:EA:59:BE:BB:9A:63:19:DB:0D:31:58:38:AF:17:FB:BF:8B:69:F6
Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial: 1B39
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/7BC3290E9CEA11F197F53AEC3211F970.roa
Signing time: Thu 20 Aug 2026 22:57:14 +0000
ROA not before: Thu 20 Aug 2026 22:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17435
IP address blocks: 58.28.0.0/16 maxlen: 16
118.90.0.0/16 maxlen: 16
182.154.0.0/16 maxlen: 16
2001:e20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6969 (0x1b39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Validity
Not Before: Aug 20 22:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a87864a-5f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:f3:61:ad:8a:9f:bb:64:1d:7d:86:75:d9:
36:52:42:77:95:7a:30:55:41:b4:f8:b5:bb:40:36:
6c:34:6c:81:d0:98:fa:e7:07:44:f8:b6:b4:20:91:
d5:62:fd:3d:b3:dc:f6:92:bc:dd:29:10:e3:a7:7d:
41:25:60:6d:20:bb:c4:92:f8:25:31:ff:bc:9b:7d:
de:af:13:7f:1a:8e:65:6c:1a:01:a8:05:1a:03:35:
78:bc:f6:13:d5:47:9e:2b:d3:4b:3e:e3:d2:37:6f:
e7:f4:f3:1e:b1:72:5b:06:bc:af:bd:b0:ba:fb:5a:
85:87:08:aa:10:cc:89:e1:79:9a:54:75:da:fe:47:
57:5f:a4:4a:cf:8a:b5:ea:59:a6:5d:1e:d7:1a:90:
63:94:fc:bd:ef:f7:97:e2:cd:a2:35:6e:a7:c8:bb:
7f:66:9c:e6:ea:71:c4:41:62:da:e8:73:25:85:f7:
0f:04:9c:ea:9a:f4:35:db:82:ea:1e:cb:25:9d:67:
09:4d:07:58:6b:87:63:8b:d2:8e:b6:7e:36:80:bd:
02:3f:2b:81:81:ec:ed:56:8d:f6:77:50:09:11:0e:
20:83:99:f1:e4:44:06:df:5a:54:59:0b:34:ae:47:
5b:45:4e:2b:68:bf:a3:58:df:c3:4f:81:2c:de:10:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EA:59:BE:BB:9A:63:19:DB:0D:31:58:38:AF:17:FB:BF:8B:69:F6
X509v3 Authority Key Identifier:
keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/7BC3290E9CEA11F197F53AEC3211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
58.28.0.0/16
118.90.0.0/16
182.154.0.0/16
IPv6:
2001:e20::/32
Signature Algorithm: sha256WithRSAEncryption
2a:06:c0:db:9e:63:23:88:59:40:cc:e9:cc:d8:ea:bd:ae:da:
43:80:ab:1d:b8:7a:0f:0c:8f:5a:1e:61:74:e0:f7:71:77:f5:
5b:a7:e2:77:d5:d2:16:d0:37:25:85:b1:ff:3f:ef:7f:14:8a:
a8:be:d5:2a:65:79:43:7e:91:e9:df:5e:fd:95:29:5b:dd:53:
40:46:be:5d:bd:53:8d:bf:47:68:ff:ac:f2:02:ad:d4:ea:7f:
8d:44:84:16:36:cd:d2:8b:07:dd:cb:34:c3:ef:46:82:6f:20:
10:83:66:a5:7b:bf:1b:71:94:24:4a:e5:1a:a3:be:75:2d:3a:
09:d5:3c:f1:24:46:cc:01:95:e6:e7:bf:6c:ea:61:c3:6f:62:
8c:c8:e4:94:63:4c:a1:b6:94:8a:d8:72:48:86:07:29:96:f6:
46:32:e6:a2:3a:82:82:6d:eb:a2:13:76:34:a5:70:9e:6e:94:
31:d0:b3:b6:2f:a6:2f:3b:e3:4e:cd:82:eb:85:c8:cf:14:79:
88:cd:c1:67:51:1b:e6:f9:b4:43:53:71:16:ac:c9:6c:d1:cb:
9d:b5:4b:28:a8:0a:a7:2c:6b:15:2e:04:fd:3c:0c:25:7e:cc:
e8:fa:c7:5d:4c:35:e0:64:a9:96:f7:39:6b:60:d7:e1:6b:bb:
fd:b7:c1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:11:45 2026 by rpki-client