
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/605C88EC362811F08A82E10DC4F9AE02.roa
File: 605C88EC362811F08A82E10DC4F9AE02.roa (raw, json)
Hash identifier: CGs40+aol+xWoOZNaUP5JXbvindhbNJ3rxtLBcaqmRw=
Subject key identifier: 27:74:F3:77:97:D5:1F:8B:18:D3:0B:F2:7F:3F:D0:30:4A:55:48:96
Certificate issuer: /CN=A9120832/serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9
Certificate serial: AB
Authority key identifier: A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/605C88EC362811F08A82E10DC4F9AE02.roa
Signing time: Fri 03 Apr 2026 07:40:53 +0000
ROA not before: Fri 03 Apr 2026 07:40:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153715
IP address blocks: 163.223.174.0/23 maxlen: 23
163.223.174.0/24 maxlen: 24
163.223.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl
rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120832, serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9
Validity
Not Before: Apr 3 07:40:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69cf6f05-2d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:f2:f7:1c:38:bd:2c:2a:66:93:75:37:cc:
5e:46:7e:70:09:03:a5:6d:2d:4b:08:9f:bc:f9:cf:
0c:87:a1:cf:57:e3:21:c5:52:1e:9d:3b:bc:b7:42:
0d:1f:cc:62:2c:0b:af:94:d5:1c:39:9c:3c:61:4e:
41:c7:19:a8:4c:4e:fc:17:74:46:f5:58:1e:0a:a0:
89:5d:a4:21:72:c1:8d:41:3f:17:aa:f7:f3:b1:ca:
96:66:2e:6b:8a:76:b7:78:3a:47:57:22:77:04:c5:
a4:4a:98:63:57:d1:4f:ab:4a:a4:a6:a6:e9:84:b4:
b3:95:04:10:de:93:f3:1c:15:47:39:74:16:39:b3:
54:b3:3d:5f:fa:33:72:1c:bb:6a:81:8b:95:43:55:
2f:f6:40:bd:6c:e9:70:04:7a:ed:f2:29:4b:78:fd:
4c:6f:b2:d9:ca:3c:9f:b6:73:57:f5:d2:5d:fb:d8:
7f:ba:db:6c:ba:43:7e:4b:00:f8:fe:f1:7b:22:13:
49:82:be:76:99:80:da:a8:68:c5:bb:52:86:2d:ab:
df:04:0e:40:1b:4c:00:3f:83:ce:0e:5a:33:25:61:
32:ad:6a:30:3d:b9:0d:01:a8:14:6d:c9:41:97:42:
08:3e:96:95:4e:ef:46:b8:dc:5e:31:da:65:82:b2:
e5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:74:F3:77:97:D5:1F:8B:18:D3:0B:F2:7F:3F:D0:30:4A:55:48:96
X509v3 Authority Key Identifier:
keyid:A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/605C88EC362811F08A82E10DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.174.0/23
Signature Algorithm: sha256WithRSAEncryption
61:97:54:8e:7d:65:39:12:a3:3a:7a:29:27:e7:c5:77:24:33:
fd:b2:e2:c6:e2:8a:b7:45:33:cb:12:9c:d8:4b:51:51:c6:a6:
9a:6e:84:b8:6d:bf:3a:86:cd:7b:0c:d8:57:19:5e:cc:6f:81:
89:b8:2c:06:93:5c:91:a1:6e:43:7c:8d:32:90:82:6b:ef:a0:
4d:9d:17:d4:38:24:ff:14:30:f8:43:9e:67:91:af:ad:e9:ac:
da:4b:fc:ea:b8:ef:9d:62:db:ab:d3:b4:9a:6c:be:4f:f4:ae:
c2:24:40:8e:07:33:0c:f8:70:93:49:e4:f0:ad:a7:76:7e:ba:
0e:1d:7c:2c:b2:00:3f:46:7b:96:ea:49:08:69:32:d4:26:cd:
6d:76:a3:31:1b:9a:b8:c3:d8:35:da:d0:89:87:87:2d:d5:35:
26:bb:3e:cf:a7:ef:7a:90:e6:6a:dd:0f:7b:3c:1f:fe:62:9f:
b4:80:71:95:c0:b0:d8:49:fa:9a:ef:a7:a9:ac:da:93:5c:f7:
b8:f7:be:f3:21:83:9a:4c:b2:7a:37:c7:d2:fd:47:e3:1d:e0:
0e:50:0f:c4:33:40:a6:25:d1:a1:6e:50:6b:d0:7d:1b:d0:31:
52:6a:7e:fc:90:20:9c:5c:cc:26:31:4d:aa:fe:2b:8e:02:fd:
2d:6f:73:0b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA4MzIxMTAvBgNVBAUTKEE5MzhFRkZCOTYzQUUyQUVCNkYwQjI2NjU5NkI4QTQx
MjM3N0M5RDkwHhcNMjYwNDAzMDc0MDUzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNmNmYwNS0yZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp73y9xw4vSwqZpN1N8xeRn5wCQOlbS1LCJ+8+c8Mh6HPV+MhxVIenTu8t0IN
H8xiLAuvlNUcOZw8YU5BxxmoTE78F3RG9VgeCqCJXaQhcsGNQT8XqvfzscqWZi5r
ina3eDpHVyJ3BMWkSphjV9FPq0qkpqbphLSzlQQQ3pPzHBVHOXQWObNUsz1f+jNy
HLtqgYuVQ1Uv9kC9bOlwBHrt8ilLeP1Mb7LZyjyftnNX9dJd+9h/uttsukN+SwD4
/vF7IhNJgr52mYDaqGjFu1KGLavfBA5AG0wAP4PODlozJWEyrWowPbkNAagUbclB
l0IIPpaVTu9GuNxeMdplgrLlZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCd083eX
1R+LGNML8n8/0DBKVUiWMB8GA1UdIwQYMBaAFKk47/uWOuKutvCyZllrikEjd8nZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDgzMi9DMjU5RjZCMjM2
MjYxMUYwQjM1QUZBODZDNEY5QUUwMi9xVGp2LTVZNjRxNjI4TEptV1d1S1FTTjN5
ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FUanYtNVk2NHE2MjhMSm1XV3VLUVNOM3lkay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjA4MzIvQzI1OUY2QjIzNjI2MTFGMEIzNUFGQTg2QzRGOUFFMDIvNjA1Qzg4RUMz
NjI4MTFGMDhBODJFMTBEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBo9+uMA0GCSqGSIb3DQEBCwUAA4IBAQBhl1SOfWU5EqM6eikn58V3
JDP9suLG4oq3RTPLEpzYS1FRxqaaboS4bb86hs17DNhXGV7Mb4GJuCwGk1yRoW5D
fI0ykIJr76BNnRfUOCT/FDD4Q55nka+t6azaS/zquO+dYtur07SabL5P9K7CJECO
BzMM+HCTSeTwrad2froOHXwssgA/RnuW6kkIaTLUJs1tdqMxG5q4w9g12tCJh4ct
1TUmuz7Pp+96kOZq3Q97PB/+Yp+0gHGVwLDYSfqa76eprNqTXPe4977zIYOaTLJ6
N8fS/UfjHeAOUA/EM0CmJdGhblBr0H0b0DFSan78kCCcXMwmMU2q/iuOAv0tb3ML
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:46:05 2026 by rpki-client