
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/7D2C0290103011F08606D714C4F9AE02.roa
File: 7D2C0290103011F08606D714C4F9AE02.roa (raw, json)
Hash identifier: bPAEszzYNItPqRQdgfsn9IpwcO0PHiKv1MqwDce+c8M=
Subject key identifier: C6:11:37:D0:6A:32:CF:29:51:69:93:A1:E7:08:A7:48:9F:F8:1F:4A
Certificate issuer: /CN=A9189396/serialNumber=EF85AEFC7B0814DF3F410DA01CA34BE4D66BB1A3
Certificate serial: 0104
Authority key identifier: EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/7D2C0290103011F08606D714C4F9AE02.roa
Signing time: Fri 17 Jul 2026 07:34:42 +0000
ROA not before: Fri 17 Jul 2026 07:34:42 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 7575
IP address blocks: 152.98.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl
rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189396, serialNumber=EF85AEFC7B0814DF3F410DA01CA34BE4D66BB1A3
Validity
Not Before: Jul 17 07:34:42 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a59db12-da66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:6b:e9:8e:6c:1b:90:e6:79:d5:c5:ae:ab:
99:cb:2c:f8:49:91:e7:04:21:ed:28:38:73:2a:1d:
df:a5:25:83:f7:ed:9e:91:1c:53:a6:ab:42:01:9a:
53:43:90:7f:92:1c:ce:4c:5a:b9:2f:99:41:19:41:
f3:b7:f1:08:3c:42:a0:57:2a:74:e3:48:31:2b:1a:
52:94:2d:cc:55:7e:e3:de:12:78:ca:cc:bc:00:b9:
e2:c5:cd:cb:00:7a:56:97:eb:32:6f:98:88:8a:3e:
97:1a:24:63:5e:ce:07:a1:92:e3:54:62:96:9b:66:
1f:dd:56:9a:65:ee:25:e0:c6:d6:bd:0b:91:8d:ed:
36:d2:79:61:ed:7c:79:c8:48:49:86:7c:a3:25:1c:
aa:83:8f:61:f3:b2:89:b2:bc:e4:f6:6e:9a:26:5f:
49:8b:bd:01:fe:73:51:01:f4:68:d8:1a:2d:7a:da:
2e:9b:79:24:49:4c:15:99:66:37:06:f5:b4:2c:09:
1a:0e:4d:36:0a:e5:16:20:bc:ad:5f:e8:30:b8:16:
02:2c:24:dd:a0:c0:77:1a:98:5c:51:9f:77:9d:8e:
de:7f:9c:f4:c9:9b:31:09:96:c1:1c:1e:19:81:dd:
54:92:ac:0b:6d:4e:ae:5e:9f:19:d8:b5:ce:4d:15:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:11:37:D0:6A:32:CF:29:51:69:93:A1:E7:08:A7:48:9F:F8:1F:4A
X509v3 Authority Key Identifier:
keyid:EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/7D2C0290103011F08606D714C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
152.98.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:60:0f:77:59:89:8e:bf:92:09:52:a2:06:d2:20:21:14:ab:
41:d6:6c:71:6d:a4:89:48:c8:e0:2b:17:d6:12:6d:97:87:78:
c4:42:0f:e9:7c:5c:66:77:90:96:26:15:c4:94:fe:51:c4:6c:
0a:88:f9:56:f7:b1:a5:6f:4b:5d:cc:d6:bd:2e:dc:fb:62:51:
b4:f9:20:e1:40:2d:c1:82:7b:55:84:19:99:cf:75:9d:09:bb:
67:6d:64:ad:04:62:17:f0:9a:fe:55:e0:25:9c:2b:7f:90:a8:
7e:d9:d1:cb:2a:b0:5b:b4:b5:ad:8f:a7:3d:da:f4:3a:d6:4f:
37:2d:34:14:68:e3:81:91:4a:a9:4d:c9:69:bf:27:35:13:b1:
96:fe:e6:2f:96:c1:f4:33:0b:9a:1d:b0:b8:d8:81:cc:91:68:
53:60:4d:5c:4b:c6:1b:82:dc:09:e2:f7:63:c2:f7:ea:59:5b:
5b:f9:3a:50:b2:2b:43:a4:58:ed:01:0f:bd:0b:37:9c:d5:6f:
db:a1:e8:fc:e9:39:99:8f:e5:f0:e9:79:02:5a:d8:25:f8:16:
da:4e:63:e0:8b:db:e1:27:65:21:39:5a:8d:3a:34:14:0c:bf:
ea:d8:95:8d:bd:83:e7:8f:17:5d:61:0b:db:f5:ba:0f:37:09:
18:20:91:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:48:11 2026 by rpki-client