
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/7F77220A143811EE97A64D19C4F9AE02.roa
File: 7F77220A143811EE97A64D19C4F9AE02.roa (raw, json)
Hash identifier: UaUfBSgIdj9KKGl52SHu3L34u8bPrTfYu+3DtVvRz+c=
Subject key identifier: 6E:FB:F0:6C:E6:C8:4D:B1:C8:44:35:B3:09:E7:D1:1C:03:BE:69:8E
Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial: 195C
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/7F77220A143811EE97A64D19C4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:32:44 +0000
ROA not before: Sun 30 Aug 2026 16:32:44 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38551
IP address blocks: 2407:e500:c::/47 maxlen: 47
2407:e500:e::/47 maxlen: 47
2407:e500:10::/47 maxlen: 47
2407:e500:12::/47 maxlen: 47
2407:e500:80::/47 maxlen: 47
2407:e500:90::/47 maxlen: 47
2407:e500:a0::/47 maxlen: 47
2407:e500:b0::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 16:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6492 (0x195c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Validity
Not Before: Aug 30 16:32:44 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a945b2c-dbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:67:55:38:13:43:42:64:cd:85:41:d5:3d:
54:30:31:18:eb:41:51:e3:e2:ba:48:14:41:80:19:
f8:a4:b7:9c:a1:c1:12:a0:67:c6:ff:dc:55:e1:05:
1a:43:ab:18:1c:75:0b:c7:35:ef:0f:3d:fd:4c:bf:
61:76:83:0d:93:3b:03:cd:b6:53:e6:e7:76:52:39:
4e:92:40:5c:c6:7c:e6:27:c1:7e:fb:14:ad:81:26:
1e:fc:ee:9e:d0:53:e4:db:49:17:7e:ff:f8:cd:ca:
86:e7:5c:7b:e9:28:e8:fc:09:a3:13:45:cf:46:44:
97:3b:78:81:6b:18:60:41:d5:25:1a:3a:bb:23:0e:
f6:0d:88:86:fa:67:ab:5e:92:14:fe:2f:88:0f:fa:
e0:31:db:39:90:4e:33:4d:11:69:8e:3e:02:6d:20:
8f:17:df:84:90:14:a1:9e:68:18:a4:f9:1d:c5:de:
a4:04:c9:88:6d:2b:69:26:39:54:52:3c:67:5e:45:
f0:ed:cf:28:15:dd:36:25:68:7a:6d:17:74:5e:bd:
ac:90:bd:f5:9f:47:ef:2e:60:fe:ce:25:0e:93:3b:
21:9d:29:31:e2:75:8e:7a:8c:2a:a3:54:d3:e1:d4:
d8:a5:14:f6:14:0f:30:52:10:53:62:63:40:1a:e3:
6e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FB:F0:6C:E6:C8:4D:B1:C8:44:35:B3:09:E7:D1:1C:03:BE:69:8E
X509v3 Authority Key Identifier:
keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/7F77220A143811EE97A64D19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:e500:c::-2407:e500:13:ffff:ffff:ffff:ffff:ffff
2407:e500:80::/47
2407:e500:90::/47
2407:e500:a0::/47
2407:e500:b0::/47
Signature Algorithm: sha256WithRSAEncryption
82:5c:7b:05:d9:a0:40:5c:29:8f:e7:fa:8b:4f:4e:16:a2:e6:
b1:ac:77:14:6f:46:1e:9b:55:3d:2b:d5:13:31:70:13:eb:cf:
fc:55:9d:ff:a1:ee:f6:d5:bb:55:fd:20:9a:24:d1:85:2b:e4:
c1:8b:ff:fe:75:30:10:b9:4f:05:2e:52:f7:0a:3d:ba:0e:1c:
b3:8b:fa:8f:dc:e5:5b:ef:f9:e4:a6:32:5b:96:d2:5b:30:07:
25:7b:de:65:45:6a:34:c6:30:d1:cb:ea:55:61:e9:f4:0d:e8:
5e:58:83:1f:c7:84:c4:7f:01:f1:9b:b5:9c:a3:09:d3:40:5c:
e3:47:ba:b1:a6:c4:7b:0b:f9:00:42:fa:5a:40:af:4e:54:52:
8c:0d:c7:b6:18:c7:ca:9d:26:97:e5:16:98:0e:0e:d8:07:b9:
0a:b8:51:60:b3:d6:7a:72:11:e2:cd:da:6b:06:0f:e5:85:a3:
1c:55:a6:e5:64:2b:47:c4:5f:88:7e:d8:a6:5d:2e:5f:a2:95:
a7:05:44:c8:bc:5c:66:a7:32:7e:78:c0:71:a4:d5:65:9e:37:
71:f3:2d:c0:55:39:2e:c5:03:bb:f3:a9:15:31:ec:19:1a:41:
a3:95:ed:b7:5a:80:2f:14:cd:37:ba:fd:91:49:14:4e:2a:31:
12:d3:75:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:49:12 2026 by rpki-client