
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/7F5C2CFA1A1B11EEBC083487C4F9AE02.roa
File: 7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (raw, json)
Hash identifier: aUTODXmHjpUGfT0IQJUqRgH5Oj/V0H1MlRKYULxxhWU=
Subject key identifier: 7B:D5:E1:7B:B8:D5:F1:EE:3F:9C:3C:37:92:B4:8A:1C:0D:4D:F0:12
Certificate issuer: /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5
Certificate serial: 01FE
Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/7F5C2CFA1A1B11EEBC083487C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:33:41 +0000
ROA not before: Thu 03 Jul 2025 04:08:13 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 151413
IP address blocks: 103.149.218.0/24 maxlen: 24
163.223.212.0/24 maxlen: 24
2001:df2:9940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl
rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187208, serialNumber=16144C8235B4519F50EDD555368118844D1711A5
Validity
Not Before: Jul 3 04:08:13 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3ebd5-c48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:72:12:e7:4b:61:7f:79:92:ee:1f:db:4b:6b:
61:cf:4d:f9:20:fc:26:84:34:03:69:46:1c:5c:c9:
2b:00:3e:80:6a:b2:bd:be:3a:fc:bf:7d:14:57:cd:
c7:1b:23:b9:ee:af:ad:2c:7a:80:6a:df:3c:a3:f3:
4c:ec:68:59:6e:8e:86:01:fc:35:ea:ca:5e:11:2d:
8c:e7:96:8c:ba:b5:87:51:80:e8:a3:df:f5:33:4a:
5e:f7:ad:38:c2:a3:91:6a:ec:2d:24:c3:90:98:92:
18:c8:ab:ee:39:f4:91:88:37:54:0f:5c:1c:ac:f3:
23:03:ad:6a:79:38:3a:a5:4d:a6:4a:84:95:68:0c:
00:15:b1:88:0c:28:ba:2b:e5:66:d5:02:53:70:4a:
1c:9b:2c:c2:91:d6:c5:b1:65:6b:c1:86:fb:8d:54:
0f:8c:97:80:fc:35:3c:3d:88:4d:3e:87:f6:72:bb:
4c:50:d2:46:be:76:a7:c7:8c:84:49:61:b4:bf:66:
cf:ea:29:9c:02:3f:87:60:94:86:7b:de:74:f0:66:
e4:db:ac:fb:26:4f:07:4a:a8:83:26:a0:92:be:01:
22:45:a9:f8:4f:74:bc:0f:0d:53:f4:cb:6c:27:55:
c7:6c:6e:b9:77:75:f2:8e:b1:bb:79:97:38:00:e6:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D5:E1:7B:B8:D5:F1:EE:3F:9C:3C:37:92:B4:8A:1C:0D:4D:F0:12
X509v3 Authority Key Identifier:
keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/7F5C2CFA1A1B11EEBC083487C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.218.0/24
163.223.212.0/24
IPv6:
2001:df2:9940::/48
Signature Algorithm: sha256WithRSAEncryption
2a:f4:0a:a3:d2:51:01:fc:33:64:1a:27:9d:3a:6a:05:83:02:
bd:42:7a:df:a4:3e:62:2c:ff:b8:bb:7f:ea:8a:fd:93:b9:43:
cc:a0:0f:91:e7:c4:42:e5:70:46:ff:6a:a5:e1:76:7c:78:7b:
0e:50:ef:32:a5:5e:3c:da:4e:57:fa:5c:c1:b4:0c:03:38:f2:
e3:57:99:f0:96:ed:a2:fe:f0:d7:2e:af:9b:a3:2b:11:cd:40:
04:ef:58:3a:27:b3:2a:ce:d3:eb:57:f4:11:bc:2c:6a:06:48:
05:94:2c:da:85:6c:82:1f:0d:04:b6:95:82:ef:87:c6:71:03:
cf:a1:1a:15:11:6f:86:55:ab:22:57:f2:6d:c9:ef:06:6e:5b:
78:98:31:69:d3:bc:1f:ce:19:9a:c6:f4:2a:14:d7:2f:21:93:
21:03:d4:92:33:47:59:23:37:b5:2a:db:22:9d:da:5f:e7:4b:
29:9e:44:b4:45:c8:35:ae:80:ef:59:3e:5a:a5:d1:14:05:62:
43:e7:f3:31:d4:45:a7:b2:85:b6:77:31:9e:c7:7b:41:82:cb:
c1:d5:c0:57:66:72:e8:49:fa:69:2f:58:c9:e7:8d:0c:d7:10:
12:da:d9:b1:cd:dd:30:17:1b:52:ac:3b:42:ef:3f:bf:ee:de:
7d:ed:f2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:57 2026 by rpki-client