
$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/7E8E2302014811F1B68E82C6516F56BC.roa
File: 7E8E2302014811F1B68E82C6516F56BC.roa (raw, json)
Hash identifier: JyYTZPQTpKVQMGLvtLCu1teNQOIfxLpgwbO6jQC+5uU=
Subject key identifier: 4D:E1:CF:9A:9A:58:A7:5A:5D:C4:FB:A0:16:9B:42:1C:A3:88:C8:1E
Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial: 03B6
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/7E8E2302014811F1B68E82C6516F56BC.roa
Signing time: Mon 29 Jun 2026 01:31:07 +0000
ROA not before: Mon 29 Jun 2026 01:31:07 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 152600
IP address blocks: 203.98.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950 (0x3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Validity
Not Before: Jun 29 01:31:07 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a41cadb-0d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e8:75:11:bd:08:db:f6:6b:b3:99:23:6f:7b:
9d:00:66:51:a9:77:34:37:b2:5e:9b:86:a4:7c:7e:
c3:55:97:70:3b:57:66:46:83:2b:3e:c0:06:91:54:
07:c6:16:c3:65:cb:ed:cc:fb:19:fa:b1:4e:8a:05:
9b:57:7f:8e:dd:9b:a7:ee:da:41:43:3f:38:e5:dc:
d3:8e:08:24:79:63:50:f6:a2:61:9a:2f:7f:de:d5:
fb:2c:02:c6:13:fe:c6:21:1c:c9:04:02:27:e8:da:
e1:f6:c1:8e:9c:23:a5:43:a0:85:a2:38:3e:00:b8:
06:f3:ac:43:d7:11:42:03:b0:b1:eb:ee:fa:af:da:
06:29:bd:f4:24:7d:d3:e9:cc:24:ed:b8:aa:da:08:
83:af:75:86:fc:2f:8f:cb:86:be:7a:66:b4:9b:1c:
86:bf:48:57:b6:0b:35:f8:08:3d:bc:bd:a1:99:43:
95:21:57:7a:6e:c0:b2:08:80:c6:1d:4f:0c:f6:cb:
c0:7b:6d:1f:b0:3a:e3:23:06:f2:b7:94:9c:f0:05:
5e:5f:5e:54:51:5f:66:91:97:ab:2e:22:37:92:7a:
06:49:98:f9:3e:6f:4c:90:a4:bd:b7:63:7e:c5:e6:
15:ac:7f:c3:bd:6c:09:6c:c2:39:25:40:6f:ad:ed:
6d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E1:CF:9A:9A:58:A7:5A:5D:C4:FB:A0:16:9B:42:1C:A3:88:C8:1E
X509v3 Authority Key Identifier:
keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/7E8E2302014811F1B68E82C6516F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.98.89.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:86:5f:da:7d:a1:68:48:14:e0:8f:56:c5:82:e8:91:8b:07:
45:34:d0:86:04:27:98:7f:c0:e9:15:09:c2:e0:d5:e1:f4:9c:
0b:9e:85:f1:01:d2:cf:6c:a2:af:b3:23:18:95:d6:c9:40:be:
55:55:df:82:a4:ee:32:fe:87:ca:0f:ab:90:7e:37:12:06:be:
e2:f4:ed:e7:e1:27:a9:00:3d:3f:9f:e2:ad:a7:76:53:69:7a:
65:a4:21:e7:4d:fe:67:f7:8f:8c:12:6e:f4:4d:bd:39:ac:fd:
e5:5c:6a:97:71:eb:37:60:ec:b1:2c:af:ad:5d:94:de:7d:1d:
92:d2:a6:c1:fc:97:f4:3f:73:f3:eb:94:d9:c2:2c:ac:16:a7:
87:85:40:1e:db:bb:40:9a:3b:a9:67:e7:47:1e:b3:6f:51:fb:
3b:d2:3e:57:0c:3d:b3:e5:89:c3:84:62:68:7f:1d:63:41:2a:
67:22:79:e3:d1:94:35:ac:23:bf:8c:69:4e:a3:7a:2c:39:97:
1e:a9:6c:e8:a1:f7:99:03:d4:89:08:95:8c:96:26:f3:06:c6:
1f:26:c8:88:e9:04:a1:f1:b2:1a:af:40:ab:8c:47:a5:91:f8:
5b:e5:e9:2f:0a:35:cc:b1:6c:6b:db:a6:4c:0c:05:8f:b3:c0:
b1:9d:30:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:39:24 2026 by rpki-client