
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/7D2C0290103011F08606D714C4F9AE02.roa
File: 7D2C0290103011F08606D714C4F9AE02.roa (raw, json)
Hash identifier: czjHGIizBAYHoiaMrZtXZ1tnYWZR3jdE8JOiA9yPJiI=
Subject key identifier: 0A:53:77:57:F4:D5:56:45:F1:27:CC:FA:F7:D1:0A:EE:55:F4:B3:08
Certificate issuer: /CN=A9189396/serialNumber=EF85AEFC7B0814DF3F410DA01CA34BE4D66BB1A3
Certificate serial: BB
Authority key identifier: EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/7D2C0290103011F08606D714C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:04:21 +0000
ROA not before: Thu 21 Aug 2025 07:45:05 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 7575
IP address blocks: 152.98.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl
rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189396, serialNumber=EF85AEFC7B0814DF3F410DA01CA34BE4D66BB1A3
Validity
Not Before: Aug 21 07:45:05 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a58ad5-9ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:22:ab:c6:a5:86:de:9c:4f:85:f7:a9:b9:
21:8e:54:1d:b8:b8:5b:c0:6f:68:51:9c:d6:cf:af:
76:90:81:58:b9:73:cd:89:62:b9:d8:8c:76:96:be:
be:a8:97:e8:43:b2:e3:83:ae:72:70:00:48:61:b3:
96:68:ec:2c:fe:c9:e6:8c:39:4f:18:7b:74:75:b1:
5d:96:5e:cf:9e:60:f3:c4:81:a3:d8:0a:e8:18:28:
cc:82:a0:59:11:04:2f:87:29:12:6b:ae:b3:02:5a:
9e:e3:a2:31:25:1f:2c:ff:04:ea:a2:02:34:b3:8e:
b9:92:62:1d:51:aa:e1:99:75:3c:d3:63:2b:87:2d:
97:77:00:34:56:8c:af:f8:8b:f9:7a:af:7b:dc:da:
04:fa:1d:dc:ab:45:71:b4:2a:c1:85:6f:af:99:fc:
0c:fc:90:1d:23:85:05:e9:6c:d3:37:aa:94:d4:0c:
01:cc:50:76:cd:97:80:6d:e1:c9:dc:e8:54:8b:5a:
78:04:78:0f:0e:d2:c8:a0:c7:2d:44:2d:e1:3a:fb:
40:63:d8:d0:df:de:9d:73:02:72:c9:bc:ba:cc:0e:
68:7e:fe:34:44:3c:da:be:7f:a1:04:fe:28:f7:64:
92:64:ee:99:c9:df:0a:f7:04:ec:e7:c3:c3:cb:cb:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:53:77:57:F4:D5:56:45:F1:27:CC:FA:F7:D1:0A:EE:55:F4:B3:08
X509v3 Authority Key Identifier:
keyid:EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/7D2C0290103011F08606D714C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
152.98.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:1a:8d:6d:14:58:89:50:58:5d:9e:0e:8f:8a:9b:ce:7f:e5:
9b:3e:1f:08:d2:c7:f9:38:3d:bc:fc:75:9b:7c:cf:28:43:82:
45:4c:09:91:e3:41:42:e3:e2:0d:0e:1f:cd:85:30:76:29:73:
f5:a0:48:20:ac:e4:55:df:58:a5:8d:fe:02:6b:b0:eb:c8:c3:
37:5e:00:97:f0:48:a5:71:44:70:4b:5a:05:1a:89:e7:b0:86:
5b:8b:e5:ea:de:36:f1:a5:b7:a3:c6:b7:18:8b:51:db:33:dd:
b3:fd:a5:e2:18:7b:08:a4:dc:3f:bb:79:11:3b:81:95:bb:5a:
fb:6f:e0:89:ad:24:45:27:b6:f3:42:07:7c:8e:a4:df:50:c5:
46:10:a8:e4:ae:37:52:4f:38:5c:30:f2:ca:b6:af:9c:5f:fb:
09:93:62:89:d0:57:18:64:c3:6e:89:6c:e8:47:5b:b6:43:22:
5a:f0:0e:5e:73:02:b3:36:b0:30:7f:ff:0e:10:48:d0:2e:47:
dc:4a:5e:30:f2:df:c7:e4:a0:4e:49:5a:bf:3e:03:96:19:4c:
50:16:30:c6:75:0b:f2:64:7e:ef:06:b4:bb:6e:40:1b:02:1f:
24:8c:04:7b:92:db:9e:12:1b:80:b4:18:ea:de:16:d4:18:02:
98:50:64:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:24:12 2026 by rpki-client