
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/F7277FE412D611F18C2C8EDD083D8C67.roa
File: F7277FE412D611F18C2C8EDD083D8C67.roa (raw, json)
Hash identifier: gI9WWBFQv25QPeKOZgESpHWxIt5z7rgTPKFMhN/VASU=
Subject key identifier: C0:35:E0:E1:B9:EB:FF:70:CA:7E:D2:AF:9C:70:C5:07:5E:FA:85:0B
Certificate issuer: /CN=A9196F7C/serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
Certificate serial: AB
Authority key identifier: 6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/F7277FE412D611F18C2C8EDD083D8C67.roa
Signing time: Fri 17 Jul 2026 04:28:25 +0000
ROA not before: Fri 17 Jul 2026 04:28:25 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 7979
IP address blocks: 157.85.86.0/24 maxlen: 24
157.85.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl
rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
Validity
Not Before: Jul 17 04:28:25 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a59af69-502d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:49:17:6c:91:39:b5:33:f3:8c:cc:df:c8:
40:ef:56:23:39:b3:d8:87:4c:3f:40:7c:c0:c2:1a:
86:b5:54:b0:f2:03:9f:8a:e5:73:c8:c5:0d:65:37:
0f:ae:19:c2:32:2d:02:1b:1f:ad:7b:03:3b:7f:c1:
9f:bb:10:df:74:8e:ba:b6:71:e5:1a:6d:9c:23:bb:
b4:71:e4:16:de:4a:c8:a9:b2:bb:fb:24:17:3d:7c:
b4:25:6b:53:a0:05:6a:6d:d8:d4:01:81:c5:ff:34:
81:93:4b:f9:ff:e5:a7:68:9e:97:3f:47:7b:62:71:
ec:bb:5e:8d:f1:31:99:84:30:0c:7f:81:b7:ef:1b:
e4:c8:a7:1d:ee:42:50:56:34:f1:5c:70:3a:a9:d5:
c3:79:dd:43:e5:db:17:7e:0d:77:ff:73:23:72:50:
76:2c:8d:9d:3f:5a:c1:14:a7:6b:f5:8b:b8:bf:95:
0d:a6:25:12:17:a8:49:8b:c8:16:e5:8f:8b:8f:62:
29:a5:25:47:09:93:c9:a5:48:9f:11:84:24:b7:0e:
a4:20:56:6a:a2:e2:a5:6d:9b:23:43:eb:79:7f:19:
c8:60:f0:ec:2d:3d:3a:f1:d8:d1:27:39:99:66:81:
c1:f0:2b:f2:48:f5:f2:4e:12:35:a0:49:d6:85:07:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:35:E0:E1:B9:EB:FF:70:CA:7E:D2:AF:9C:70:C5:07:5E:FA:85:0B
X509v3 Authority Key Identifier:
keyid:6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/F7277FE412D611F18C2C8EDD083D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
157.85.86.0/23
Signature Algorithm: sha256WithRSAEncryption
58:f1:a4:c4:48:bb:35:e0:ce:48:b6:ab:54:49:22:cc:64:7e:
1f:16:e7:d6:54:ad:e8:bd:07:5b:25:ea:f6:72:71:84:6c:1d:
de:37:c5:7f:80:94:a0:c9:c1:c7:22:b3:08:aa:67:ba:3b:3f:
b8:04:5a:74:62:4a:66:23:ff:ba:96:37:bf:8d:8b:07:29:6d:
65:29:85:a3:50:14:62:80:bd:04:02:a0:f7:87:52:2c:ac:0b:
5f:8a:ba:e5:53:b4:9a:e2:0a:81:5a:65:eb:f7:51:6c:2b:d4:
45:22:48:9a:c9:f8:b3:b2:34:a6:ef:2f:38:f3:ed:e8:38:da:
1b:69:83:22:10:b4:49:a5:c4:00:37:20:f6:52:0f:03:97:3b:
92:c7:37:f9:c6:7f:07:39:e9:56:07:ea:cb:eb:90:5a:52:ff:
e2:a5:4d:54:c9:f8:af:00:ba:20:2f:80:05:c2:d7:0f:41:51:
08:8d:55:cb:be:a2:13:c1:47:ba:4b:7d:6b:92:3d:27:a0:27:
7d:8d:78:59:ab:ed:04:43:bc:1e:dd:36:15:d0:c7:a4:83:fc:
80:51:5d:82:f9:52:94:ca:94:34:0d:ec:4d:93:11:99:50:ff:
aa:96:b3:16:94:64:18:b0:6a:d1:dc:37:d3:47:76:1d:0c:2c:
67:ec:86:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:18 2026 by rpki-client