
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/874D690486F911F0AEE9D81BC4F9AE02.roa
File: 874D690486F911F0AEE9D81BC4F9AE02.roa (raw, json)
Hash identifier: IJZLUrMfxnjT6EPj2+SrYRY/5vKJ11sju7z8dB9bKk4=
Subject key identifier: 39:25:CD:14:01:69:71:0E:77:95:BC:D7:16:EA:23:95:A9:10:DE:B4
Certificate issuer: /CN=A9119B9D/serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
Certificate serial: A3
Authority key identifier: 22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/874D690486F911F0AEE9D81BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:07:57 +0000
ROA not before: Mon 01 Sep 2025 06:04:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17660
IP address blocks: 163.227.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl
rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119B9D, serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
Validity
Not Before: Sep 1 06:04:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3f3dd-487c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:76:07:10:18:27:a9:d5:8a:cf:1b:20:f4:
78:ef:93:31:25:57:33:f7:53:6f:c0:15:5d:b1:de:
bb:0f:53:b4:0a:31:47:c9:0a:33:e7:3d:94:65:5d:
a5:79:81:c2:35:52:6b:7d:31:6a:2f:53:e1:da:0f:
b9:43:08:ce:e0:fc:5d:9d:dd:d0:2a:c0:8b:03:ac:
a7:11:be:a5:a8:17:af:35:0f:50:23:05:f5:a6:4d:
01:10:b2:8f:55:d7:a1:c4:57:c0:5b:61:2a:e8:26:
a5:fa:2f:79:bf:b7:cd:c5:95:52:59:11:42:aa:73:
0f:01:d6:74:e8:1b:b4:73:28:ed:5d:7f:85:ef:35:
c5:85:dc:4c:64:a9:1c:8c:2e:59:87:60:e7:a3:6a:
92:a4:bf:22:57:c7:d1:82:87:23:88:74:ad:87:6b:
9a:49:46:b6:dd:04:73:51:2b:75:48:2e:30:34:56:
ff:b0:a8:c0:c7:b4:8b:df:06:7b:66:d6:4e:02:46:
d4:c9:58:06:ed:fc:d6:8e:fc:89:95:56:c0:f5:22:
f5:79:b5:6d:d3:8d:6c:f8:3f:fc:94:64:de:74:9d:
0e:55:93:22:c8:e8:1c:76:db:8a:97:82:71:90:8e:
d4:ec:74:df:38:f4:4d:85:59:8d:74:ef:1b:19:fe:
44:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:25:CD:14:01:69:71:0E:77:95:BC:D7:16:EA:23:95:A9:10:DE:B4
X509v3 Authority Key Identifier:
keyid:22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/874D690486F911F0AEE9D81BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.12.0/23
Signature Algorithm: sha256WithRSAEncryption
78:a8:28:bd:8a:d2:eb:6f:77:e6:71:62:9f:51:1d:15:db:51:
af:1f:00:5f:26:12:42:16:87:62:33:81:d1:83:c4:55:63:76:
eb:ba:e5:03:2a:f0:90:cc:80:e3:86:9e:ad:b1:20:03:34:e5:
46:35:ab:d6:26:7e:34:3e:8e:d7:44:74:b1:55:8b:07:f7:1a:
ba:08:4f:5e:62:49:82:13:b4:86:90:df:15:6b:24:04:16:ea:
f5:ce:c0:46:e2:e6:62:d2:50:49:11:02:34:17:e3:05:f7:8a:
44:02:f5:2d:07:a2:d3:8d:bf:4c:af:5d:b6:d2:08:47:e9:c7:
bc:51:11:be:aa:9e:e6:97:03:53:8a:ca:bb:2e:9a:3f:a9:65:
07:7a:a6:c7:9b:78:45:91:5f:a1:03:61:4d:d8:ba:96:c3:25:
68:93:86:e3:7d:06:c5:7e:53:65:0c:a3:ba:28:b0:ed:d8:f2:
72:16:92:db:62:4f:a3:1d:cb:4b:05:20:81:5d:21:9c:1b:92:
12:f1:e3:2d:a0:5c:13:82:42:ab:52:b7:6f:93:7a:59:cc:e2:
bd:e8:ef:cf:8e:a1:03:80:82:81:d2:84:f1:44:a1:af:ee:e8:
89:57:ba:95:f0:ac:a9:a0:02:1f:c4:ca:86:06:f3:4e:e8:b0:
7a:c3:1d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:24 2026 by rpki-client