
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/98ADC3467FBF11ECBBD2EE30C4F9AE02.roa
File: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (raw, json)
Hash identifier: soU8spy1SsGT8VPgKICd+/JpZTj62l4zjzZzU7s5+fQ=
Subject key identifier: D7:FB:89:DA:A5:D4:F0:85:F0:80:D1:4C:3C:E8:B3:21:F2:96:8E:A8
Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Certificate serial: 051F
Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/98ADC3467FBF11ECBBD2EE30C4F9AE02.roa
Signing time: Wed 01 Jul 2026 01:25:14 +0000
ROA not before: Wed 01 Jul 2026 01:25:14 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 4049
IP address blocks: 202.21.130.0/24 maxlen: 24
202.50.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1311 (0x51f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Validity
Not Before: Jul 1 01:25:14 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a446c7a-6a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:a4:8c:0f:12:00:3c:68:96:97:a7:ed:5f:
c2:14:94:52:27:b7:ad:81:ac:ca:85:bf:78:fe:7d:
31:06:cf:9e:7b:dc:18:34:bd:8f:63:7c:06:29:c0:
2b:2d:6d:ff:45:8b:29:8b:bf:ba:e9:4c:d0:64:20:
e4:10:c8:f6:29:ca:64:09:d3:0c:ab:5f:b6:de:ac:
bb:36:09:23:16:9b:06:8c:6c:60:42:33:20:e2:44:
37:0f:ba:6b:6d:e5:75:09:7b:b3:69:d0:04:79:13:
08:fc:a0:4b:1f:82:c6:c5:61:af:7f:1d:ea:74:f7:
ea:b8:13:3f:f8:2d:ed:84:2f:1e:aa:c5:09:e8:8f:
1a:4e:5e:53:43:8c:cf:2e:3e:d6:88:e9:e7:c4:9a:
b9:d6:cf:b2:1f:2e:12:6c:6b:b5:af:13:d0:3d:4d:
72:43:c7:83:53:4f:9c:08:ea:d0:26:57:f4:58:44:
f3:d2:11:cf:5b:af:20:e6:ea:32:fa:13:ca:6e:e1:
94:af:86:92:e6:27:8f:04:f9:8d:fb:81:17:b7:78:
4f:eb:2f:77:eb:6e:69:38:69:76:26:75:76:fc:27:
6a:97:de:39:99:43:11:8f:00:02:52:b1:f6:4a:77:
3c:93:ee:66:c8:a8:54:4a:52:78:a3:c8:28:60:db:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FB:89:DA:A5:D4:F0:85:F0:80:D1:4C:3C:E8:B3:21:F2:96:8E:A8
X509v3 Authority Key Identifier:
keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/98ADC3467FBF11ECBBD2EE30C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.21.130.0/24
202.50.192.0/22
Signature Algorithm: sha256WithRSAEncryption
28:65:2b:32:12:70:19:86:12:12:98:85:76:24:7d:6b:2f:5e:
74:ac:19:e9:2c:0e:c2:93:a4:6e:04:78:cc:75:95:26:58:cf:
68:5e:47:cd:2c:a2:89:be:9f:34:5a:6b:dc:bb:51:20:14:98:
fc:02:87:19:bb:96:61:79:4b:ec:e7:2b:b9:88:df:08:80:44:
d0:6d:14:14:6e:99:70:3f:44:fe:c8:60:93:83:a2:e1:80:1b:
67:a7:73:ff:d2:ac:f2:e3:d4:5c:b3:bc:90:61:55:a6:44:92:
94:2f:e1:60:f3:35:7f:14:61:f8:3c:47:c7:e2:70:74:77:e1:
b7:dd:1d:15:0a:59:06:00:bc:12:31:4d:c5:e3:80:fd:15:f3:
65:b5:48:e3:fb:12:52:74:9b:ab:a9:cc:d5:10:29:a8:ea:8f:
1f:a9:15:b6:cb:7a:73:00:f6:52:9e:2f:b8:a9:db:ed:7a:16:
9f:69:a7:6b:b9:c1:b9:36:f9:92:7b:7d:f9:88:d5:e7:9e:0c:
9d:7c:76:be:a6:4e:f0:7e:3a:c4:b7:bd:35:5b:f6:4a:2f:88:
03:58:d6:98:9f:8a:43:8d:e9:30:1b:69:7c:ba:1c:9e:e4:60:
02:b8:72:7b:84:8c:a9:7b:ff:41:40:97:3b:07:66:5e:22:7c:
15:f7:4d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:22:45 2026 by rpki-client