
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/7125C7DE611411ECBF66B385C4F9AE02.roa
File: 7125C7DE611411ECBF66B385C4F9AE02.roa (raw, json)
Hash identifier: tUTfuyMuhgZx3jWuyTrDSoXEGkf8qQG37s0/X/Mz58A=
Subject key identifier: B2:33:67:26:0A:12:CF:D6:96:75:17:2B:38:1C:9B:2B:22:4D:D3:03
Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Certificate serial: 051E
Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/7125C7DE611411ECBF66B385C4F9AE02.roa
Signing time: Wed 01 Jul 2026 01:25:12 +0000
ROA not before: Wed 01 Jul 2026 01:25:12 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 17792
IP address blocks: 202.21.130.0/24 maxlen: 24
202.50.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1310 (0x51e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Validity
Not Before: Jul 1 01:25:12 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a446c78-3648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:78:38:43:09:00:36:03:29:0c:5a:13:51:
ec:ce:05:3a:da:03:47:e3:c5:cf:18:e6:f2:4f:89:
96:e3:87:be:44:dc:c8:1f:04:54:06:ae:2c:7f:3c:
e0:2c:5c:2f:c0:6c:a3:fa:54:61:9f:75:9b:1d:76:
c9:4c:37:dc:20:59:99:69:59:80:07:ab:06:8b:4c:
63:b7:7a:6f:89:02:42:78:df:e6:c9:c3:bc:b3:62:
56:05:80:7d:fd:3a:5f:82:4c:96:3b:67:45:dc:ed:
16:0d:f8:6e:9b:2f:14:de:63:50:a4:20:7c:bd:f7:
61:5d:dc:67:7f:2f:af:5e:f2:ab:67:4d:ea:a1:d4:
4b:6a:14:13:ae:34:9c:61:eb:84:3e:3c:bc:3e:e2:
b6:28:50:c3:9a:46:65:7f:9d:d9:f5:da:cf:17:a4:
72:f8:9d:09:dc:3b:33:fa:df:a5:3b:95:b9:e5:dc:
98:44:28:a1:a1:64:68:e8:c1:06:28:db:d2:ec:b2:
37:50:de:30:3f:56:57:3b:b6:8e:8d:de:ac:d9:61:
37:81:9e:7c:25:42:95:f9:28:d9:b5:89:60:59:01:
f8:b1:38:64:5e:57:f9:fc:49:7a:ad:84:e0:81:3f:
fa:7b:80:fc:4e:fe:0d:42:fa:d4:f3:c9:bd:13:78:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:33:67:26:0A:12:CF:D6:96:75:17:2B:38:1C:9B:2B:22:4D:D3:03
X509v3 Authority Key Identifier:
keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/7125C7DE611411ECBF66B385C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.21.130.0/24
202.50.192.0/22
Signature Algorithm: sha256WithRSAEncryption
82:95:60:2d:2e:ca:cb:b2:d2:c3:e9:9d:de:9d:09:83:82:d4:
bf:08:70:53:02:96:b2:a7:5c:98:2e:72:5c:32:40:56:4c:52:
78:be:43:f7:3e:8a:8e:39:ee:52:72:fe:1e:5a:75:0a:5d:b9:
1f:25:09:59:14:c4:b3:a3:08:69:fd:92:5f:84:00:84:40:92:
a0:f3:db:74:63:85:01:70:2b:0c:4b:f1:a2:03:81:6a:0b:1a:
05:5d:2f:c5:a1:93:f3:c2:7c:6a:df:af:e7:6e:f7:4f:f9:d2:
56:4b:69:e7:f2:f7:83:71:85:d3:39:37:24:cf:98:88:02:ac:
5f:92:bd:34:41:5e:33:f1:70:27:1c:11:eb:25:d1:5d:4a:65:
28:0d:4d:46:28:96:29:05:43:78:72:e3:2e:0c:2f:7c:32:e2:
e2:44:8e:1e:75:b3:35:cc:44:2a:dd:f1:e2:60:b8:03:92:20:
2f:dd:6e:ad:8f:db:51:3b:28:51:ae:a5:90:a7:d3:e9:cf:cf:
d8:ca:53:8d:cd:f8:83:59:6d:a6:c6:52:cc:98:32:60:b2:d1:
cc:30:33:08:73:4c:f9:dd:a8:87:0f:e1:c8:20:d4:41:78:b6:
b4:de:e1:20:00:ae:d2:b2:21:39:aa:66:21:71:70:70:ad:96:
fe:7c:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:59:58 2026 by rpki-client