
$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/7E099DB21C5611EBB91D2683C4F9AE02.roa
File: 7E099DB21C5611EBB91D2683C4F9AE02.roa (raw, json)
Hash identifier: U6Px3+2UpSkVxzu/Qr8RX6ggWXcyYRot1wBwG96ExR8=
Subject key identifier: 06:4E:60:41:06:86:37:63:1E:90:73:4B:A3:8E:D6:E6:37:C2:F9:6E
Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial: 087F
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/7E099DB21C5611EBB91D2683C4F9AE02.roa
Signing time: Wed 08 Jul 2026 22:23:23 +0000
ROA not before: Wed 08 Jul 2026 22:23:23 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 45785
IP address blocks: 116.193.157.0/24 maxlen: 24
183.78.168.0/24 maxlen: 24
183.78.169.0/24 maxlen: 24
183.78.170.0/24 maxlen: 24
183.78.171.0/24 maxlen: 24
202.43.100.0/24 maxlen: 24
202.43.101.0/24 maxlen: 24
202.43.102.0/24 maxlen: 24
202.43.103.0/24 maxlen: 24
210.1.224.0/21 maxlen: 21
210.1.224.0/22 maxlen: 22
210.1.224.0/24 maxlen: 24
210.1.225.0/24 maxlen: 24
210.1.226.0/24 maxlen: 24
210.1.227.0/24 maxlen: 24
210.1.228.0/22 maxlen: 22
210.1.228.0/24 maxlen: 24
210.1.229.0/24 maxlen: 24
210.1.230.0/24 maxlen: 24
210.1.231.0/24 maxlen: 24
2401:c400::/32 maxlen: 32
2401:c400:1000::/48 maxlen: 48
2401:c400:2000::/48 maxlen: 48
2401:c400:3000::/48 maxlen: 48
2401:c400:4000::/48 maxlen: 48
2401:c400:5000::/48 maxlen: 48
2401:c400:6000::/48 maxlen: 48
2401:c400:7000::/48 maxlen: 48
2401:c400:8000::/48 maxlen: 48
2401:c400:9000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175 (0x87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Validity
Not Before: Jul 8 22:23:23 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4ecddb-50a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:a0:2a:c6:af:de:d2:1b:21:f7:ce:c0:30:
a5:ae:53:52:42:92:b0:c2:44:97:8f:22:1b:50:d6:
8c:e2:29:5d:e6:2c:ac:8c:e2:ba:d6:84:da:5a:e3:
3b:cf:16:a7:0a:45:68:8f:b4:77:e3:a0:21:c8:91:
6c:d6:b3:1e:db:60:ed:b1:43:46:ad:85:05:87:79:
af:dd:1a:6a:ca:74:e6:d9:ae:48:28:aa:61:12:d2:
8f:00:71:86:ab:e2:07:24:b3:54:3b:f6:d2:2b:ea:
26:81:43:28:f8:3d:09:29:61:e1:84:5f:f2:1b:49:
19:b6:88:19:d9:62:ef:aa:fe:6a:94:05:bc:a5:9b:
ed:de:5d:fc:2a:81:cf:9f:51:a2:71:99:be:1a:b9:
0b:80:5d:20:a5:bc:35:35:d6:39:13:f6:45:f6:93:
cc:1c:b9:bf:b1:6d:15:b0:69:9b:f2:2d:63:e9:52:
08:ae:99:6c:ac:9b:da:08:8a:99:72:d3:cc:eb:40:
aa:d4:6a:62:d2:dc:59:97:68:87:44:6a:bc:45:71:
10:c4:fb:59:54:3e:12:24:26:89:50:1a:62:db:dc:
85:82:19:f3:54:93:e9:37:66:b3:45:9e:84:1c:5b:
b2:82:78:96:a2:09:49:a3:a3:7f:4b:c4:18:75:8c:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4E:60:41:06:86:37:63:1E:90:73:4B:A3:8E:D6:E6:37:C2:F9:6E
X509v3 Authority Key Identifier:
keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/7E099DB21C5611EBB91D2683C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.193.157.0/24
183.78.168.0/22
202.43.100.0/22
210.1.224.0/21
IPv6:
2401:c400::/32
Signature Algorithm: sha256WithRSAEncryption
63:c9:84:ba:02:38:49:04:d2:04:6f:53:f8:cc:11:86:2c:7c:
b6:5a:cd:d4:68:c1:85:ad:3a:0d:b5:5e:41:8b:69:17:40:86:
41:73:31:30:ac:74:96:d1:4a:8d:54:86:f5:65:b9:90:ae:43:
c0:11:8b:72:dd:ec:27:2e:bf:bb:c6:eb:e5:ad:43:6c:25:96:
eb:82:99:8e:9a:13:e9:2b:70:76:ca:9c:ad:cf:45:94:f1:da:
13:e6:4d:ef:70:92:13:00:df:af:96:49:29:31:e9:8e:97:1a:
a9:54:19:4b:01:2f:81:70:44:34:fd:d5:87:e0:b5:62:be:70:
95:ba:2b:08:bd:3c:29:b2:5a:f4:f3:2e:ab:15:ba:4e:69:70:
ce:74:e9:e8:be:60:db:29:0e:5a:7e:1a:aa:e5:54:b8:00:bb:
0a:b0:f1:ad:49:24:ff:a3:46:2f:bb:9e:a1:f8:c9:c2:5c:81:
4d:3e:0b:2c:94:a6:c5:99:50:38:8d:25:9b:a1:5e:ea:b4:1b:
7a:03:10:c0:14:4f:fb:ec:ab:ec:be:a8:81:43:d8:57:3b:0f:
e3:e5:f5:08:9c:35:0e:da:98:f4:a2:79:f6:96:31:63:83:28:
ba:a4:db:39:23:d4:a1:50:b2:ce:a4:d9:dd:bd:e1:cb:85:c7:
7c:7a:af:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:46:27 2026 by rpki-client