
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/7D62DD7E840D11EFB275D662C4F9AE02.roa
File: 7D62DD7E840D11EFB275D662C4F9AE02.roa (raw, json)
Hash identifier: f/l+0wIw7kv3dSSRVcqGdg+Drb1QQ3/kIL6awWVju0M=
Subject key identifier: 39:82:AE:7A:83:A5:98:A5:52:3B:2B:96:3C:88:BA:84:CB:42:38:C9
Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial: 35C9
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/7D62DD7E840D11EFB275D662C4F9AE02.roa
Signing time: Thu 16 Jul 2026 15:10:41 +0000
ROA not before: Thu 16 Jul 2026 15:10:41 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 23923
IP address blocks: 116.68.192.0/20 maxlen: 24
119.148.0.0/18 maxlen: 24
182.252.64.0/20 maxlen: 24
182.252.80.0/21 maxlen: 24
182.252.88.0/22 maxlen: 24
182.252.92.0/24 maxlen: 24
202.53.160.0/20 maxlen: 24
2401:9c00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13769 (0x35c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Validity
Not Before: Jul 16 15:10:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a58f471-88a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:e9:68:6a:59:0a:88:e6:6c:c4:02:4b:02:
3d:d6:a1:67:5e:c3:59:9e:6c:e3:6d:b8:e0:33:2e:
f3:42:ee:83:0e:9d:cd:72:bf:26:19:40:dd:86:cc:
09:6e:50:95:df:bf:12:18:45:11:75:a3:32:0f:34:
a0:3c:f6:62:23:9f:9f:c9:cb:b0:31:3c:10:8b:e4:
7e:90:20:2d:3d:d6:ab:c1:ad:77:57:dd:54:82:19:
e7:c5:ce:c4:12:97:1a:7d:0b:4a:3d:b4:62:c4:9c:
d7:60:5c:da:e7:35:54:80:f5:b0:17:bb:2c:bb:7b:
ac:55:59:71:dd:0d:d8:26:28:b6:10:91:1b:e4:ff:
a6:88:13:89:a6:88:45:8e:e7:97:64:d7:83:ed:0d:
01:fe:0e:e6:53:02:34:9e:fa:56:92:04:c7:0e:55:
dd:86:6e:d7:bb:cb:ab:ef:f2:1c:ad:49:ea:0b:f7:
a0:92:9d:9f:d4:ec:ff:37:53:02:bd:1d:52:59:b5:
b8:cb:67:29:fd:a5:47:d8:47:36:76:96:fc:fa:cb:
42:1b:3b:c2:2c:33:19:5d:2f:2d:7d:e3:7f:cd:cf:
78:4f:9e:01:cc:a8:f5:3e:98:4a:a6:ee:fe:24:4a:
0e:db:b6:aa:25:b1:79:82:9f:49:5c:51:0a:0d:5c:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:82:AE:7A:83:A5:98:A5:52:3B:2B:96:3C:88:BA:84:CB:42:38:C9
X509v3 Authority Key Identifier:
keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/7D62DD7E840D11EFB275D662C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.68.192.0/20
119.148.0.0/18
182.252.64.0-182.252.92.255
202.53.160.0/20
IPv6:
2401:9c00::/32
Signature Algorithm: sha256WithRSAEncryption
78:b9:ca:ee:45:6f:92:9c:ea:1e:ce:44:f8:b1:f3:0c:f5:3e:
4c:5a:ef:66:83:f1:f9:cd:94:6f:51:02:88:de:e0:3b:04:77:
f7:28:05:24:10:34:ca:3a:80:b9:41:bf:9f:e6:56:d5:39:f7:
bb:03:9a:3d:ae:d4:d7:38:7d:db:0f:0d:27:a7:93:83:73:c1:
80:80:f7:28:4e:b3:c2:ee:49:84:e7:40:5e:09:51:24:42:61:
32:95:2a:de:e5:f8:57:a8:1b:e4:ed:a4:1d:07:34:ef:6c:1d:
a6:24:b2:09:75:87:54:78:b1:8f:f0:df:cb:9f:b6:d6:72:4c:
fa:09:45:0d:2f:53:d6:c7:51:3a:94:6f:03:5b:2b:54:13:10:
00:7c:b2:d0:7a:72:31:59:99:2e:b8:3f:c9:88:47:2a:9e:d5:
56:1d:c5:8d:9e:e6:46:45:fa:6d:eb:17:8e:dc:34:84:07:ec:
ee:20:01:84:92:69:ba:d7:3b:c3:48:a8:d4:33:dd:14:48:a1:
22:c3:4c:6a:e3:81:6b:d2:32:14:85:f9:64:58:d6:d6:05:65:
7e:4a:44:90:31:8f:09:e1:b0:63:5b:83:2e:b9:d8:c1:af:9a:
e1:3e:59:01:d5:d6:b5:f9:20:eb:ae:d4:99:69:a7:78:eb:c9:
1d:72:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:56 2026 by rpki-client