
$ rpki-client -vvf rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/B3AF09C0209D11F0B81D0B48C4F9AE02.roa
File: B3AF09C0209D11F0B81D0B48C4F9AE02.roa (raw, json)
Hash identifier: nWHUoa9vkhFGSYFzs6etU2+eRfNRWFgZ4uwCWfGuzx4=
Subject key identifier: CF:4C:AD:F4:B4:88:4C:04:42:6B:9D:44:2A:E4:6C:A8:3B:D4:E3:50
Certificate issuer: /CN=A91160BB/serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914
Certificate serial: C9
Authority key identifier: A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/B3AF09C0209D11F0B81D0B48C4F9AE02.roa
Signing time: Fri 15 May 2026 07:43:11 +0000
ROA not before: Fri 15 May 2026 07:43:11 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 153809
IP address blocks: 163.227.140.0/23 maxlen: 24
2401:ffa0::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl
rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91160BB, serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914
Validity
Not Before: May 15 07:43:11 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a06ce8e-5421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:5e:03:2c:b0:e6:3b:56:a6:45:04:25:f8:
10:3b:18:92:e5:93:26:e6:f7:e8:3b:f4:fb:69:76:
41:68:e0:a6:62:44:ae:ee:75:da:ed:f4:10:43:98:
c9:f8:35:bc:22:84:d2:46:d1:d5:36:71:72:96:18:
6b:f1:3a:1a:ba:ad:f0:35:1c:de:fd:5f:33:66:96:
49:bd:34:1a:b3:f0:2e:59:a3:ac:5e:3b:c7:03:f2:
ec:8b:03:1e:e8:aa:43:48:be:7a:5f:b1:92:f8:9d:
78:34:2f:7e:2d:69:63:f0:82:6c:c7:21:02:4b:37:
f5:d4:d7:20:8a:5f:de:96:e6:aa:2e:b6:b4:fc:5e:
81:e6:10:4f:21:8a:47:81:0d:69:72:2a:6c:4b:70:
1a:b2:76:2c:36:b6:ba:c9:31:c1:3f:57:5e:04:93:
bb:d4:16:46:47:46:24:30:7c:87:3f:5f:90:b9:42:
a4:eb:0b:aa:04:b4:f4:ac:3f:bd:94:71:6e:ee:f9:
9f:07:ff:aa:0d:a2:55:20:16:89:a9:89:90:3a:86:
ae:38:4b:83:d4:ac:39:d3:0b:4c:d2:46:97:86:15:
90:95:f5:81:6e:6b:4f:fa:68:0e:ca:fd:b3:7b:37:
8f:00:e3:a6:42:45:0b:af:90:cc:74:0c:14:48:19:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4C:AD:F4:B4:88:4C:04:42:6B:9D:44:2A:E4:6C:A8:3B:D4:E3:50
X509v3 Authority Key Identifier:
keyid:A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/B3AF09C0209D11F0B81D0B48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.140.0/23
IPv6:
2401:ffa0::/32
Signature Algorithm: sha256WithRSAEncryption
97:e2:2d:21:51:c0:a8:03:2f:b3:27:8f:f5:52:fa:54:59:90:
0a:91:c0:d6:9d:0c:68:8b:af:2e:f2:b2:a5:a4:b5:29:f8:11:
38:e8:21:af:3b:a8:e5:f8:fe:3d:0f:20:0b:f1:7e:56:21:aa:
5d:7a:49:d5:e1:5f:2e:cc:2e:55:5d:4f:6d:49:70:14:91:11:
94:3c:71:cc:c4:8c:75:0a:d3:2f:5d:e4:5f:d1:85:64:44:3e:
3a:57:20:fe:41:75:1a:37:99:4e:2c:5a:e4:63:e1:02:f8:43:
ea:b3:6a:82:ed:c4:7b:19:5f:65:bb:a4:03:41:98:e8:16:d8:
4f:79:b3:d8:67:0f:33:c8:d6:02:46:14:e2:d7:a7:a5:31:99:
8b:b2:20:5a:2f:ae:dc:38:82:58:9c:92:b9:a4:04:19:85:d8:
0e:ca:c4:d0:e5:0d:7b:c0:d5:5d:ac:e5:7e:01:ab:67:fb:29:
1b:9a:86:8b:4f:f3:a5:ad:7d:63:7f:69:13:5d:6e:a7:6f:04:
69:ba:e8:f6:a8:df:89:b7:6b:20:e1:11:7b:16:bd:73:c8:d0:
a0:74:3c:82:b4:5f:64:82:4f:03:5a:7c:fc:84:93:48:93:f6:
d3:fb:07:fa:39:16:e0:a8:e1:f6:7a:96:74:0d:93:28:0d:da:
86:e3:d4:d9
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYwQkIxMTAvBgNVBAUTKEE5QkJFRDJENzNCOEQ0QkUwMTE2MzczRDU3NDgzQTBC
MDE5OEU5MTQwHhcNMjYwNTE1MDc0MzExWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTA2Y2U4ZS01NDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnfReAyyw5jtWpkUEJfgQOxiS5ZMm5vfoO/T7aXZBaOCmYkSu7nXa7fQQQ5jJ
+DW8IoTSRtHVNnFylhhr8Toauq3wNRze/V8zZpZJvTQas/AuWaOsXjvHA/LsiwMe
6KpDSL56X7GS+J14NC9+LWlj8IJsxyECSzf11Ncgil/eluaqLra0/F6B5hBPIYpH
gQ1pcipsS3AasnYsNra6yTHBP1deBJO71BZGR0YkMHyHP1+QuUKk6wuqBLT0rD+9
lHFu7vmfB/+qDaJVIBaJqYmQOoauOEuD1Kw50wtM0kaXhhWQlfWBbmtP+mgOyv2z
ezePAOOmQkULr5DMdAwUSBkVrwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFM9MrfS0
iEwEQmudRCrkbKg71ONQMB8GA1UdIwQYMBaAFKm77S1zuNS+ARY3PVdIOgsBmOkU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjBCQi80MUNENUQ2NjIw
OUQxMUYwODIzRDQ4NDdDNEY5QUUwMi9xYnZ0TFhPNDFMNEJGamM5VjBnNkN3R1k2
UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FidnRMWE80MUw0QkZqYzlWMGc2Q3dHWTZSUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTYwQkIvNDFDRDVENjYyMDlEMTFGMDgyM0Q0ODQ3QzRGOUFFMDIvQjNBRjA5QzAy
MDlEMTFGMEI4MUQwQjQ4QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBo+OMMA0EAgACMAcDBQAkAf+gMA0GCSqGSIb3DQEBCwUAA4IBAQCX
4i0hUcCoAy+zJ4/1UvpUWZAKkcDWnQxoi68u8rKlpLUp+BE46CGvO6jl+P49DyAL
8X5WIapdeknV4V8uzC5VXU9tSXAUkRGUPHHMxIx1CtMvXeRf0YVkRD46VyD+QXUa
N5lOLFrkY+EC+EPqs2qC7cR7GV9lu6QDQZjoFthPebPYZw8zyNYCRhTi16elMZmL
siBaL67cOIJYnJK5pAQZhdgOysTQ5Q17wNVdrOV+Aatn+ykbmoaLT/OlrX1jf2kT
XW6nbwRpuuj2qN+Jt2sg4RF7Fr1zyNCgdDyCtF9kgk8DWnz8hJNIk/bT+wf6ORbg
qOH2epZ0DZMoDdqG49TZ
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:33:04 2026 by rpki-client