
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa
File: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (raw, json)
Hash identifier: tWcNAFc3bYDjPCom57BiBbJ1UpCRJsDuVZnnn3Eh+8c=
Subject key identifier: C7:4E:8D:C0:C7:CD:6B:02:D9:18:63:41:0E:0F:CD:9D:67:5E:ED:53
Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Certificate serial: A5
Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:03:02 +0000
ROA not before: Tue 13 May 2025 09:00:26 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 150044
IP address blocks: 163.227.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Validity
Not Before: May 13 09:00:26 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3e4a6-020f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:7a:81:12:54:9e:f7:2d:16:f7:80:9a:31:
b6:90:1c:1d:43:b8:54:29:ed:db:38:89:e7:6e:a9:
00:91:33:e3:82:1b:fe:ec:16:64:ea:25:48:ef:82:
d2:7e:d5:ca:0b:5a:0a:e4:ff:a4:62:27:5f:b5:49:
68:4d:a9:2c:e0:e0:36:ba:54:04:dc:33:7a:30:ca:
53:4b:2c:88:1a:99:a3:73:38:30:32:4f:41:24:a2:
3f:ea:3c:88:f4:cf:49:51:8b:00:3b:85:72:0c:7d:
2d:b0:4e:6d:31:d6:ea:fc:f1:38:83:3f:ff:16:2d:
9c:4d:ef:6a:c3:5a:66:fb:ff:e6:08:ff:bb:7a:a8:
ac:6a:99:66:e8:3a:33:22:78:56:4a:fe:d4:b2:ef:
01:c4:c8:15:12:84:d6:58:14:2a:da:a6:46:94:9c:
db:98:1e:3a:e4:10:5c:69:3b:23:2a:91:16:5e:dd:
74:99:e0:fc:5e:0a:e9:c4:34:32:50:22:54:be:bc:
9f:06:64:25:88:6c:1e:88:12:31:a1:64:ff:41:fa:
c1:ab:6c:8e:9c:44:bf:df:4f:cb:76:ab:39:5c:84:
38:0d:71:7d:59:16:c7:fd:fc:dd:d5:26:33:aa:43:
f0:af:bc:d7:f1:88:a4:d4:15:17:97:66:77:17:16:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4E:8D:C0:C7:CD:6B:02:D9:18:63:41:0E:0F:CD:9D:67:5E:ED:53
X509v3 Authority Key Identifier:
keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.92.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:a1:47:14:0b:d1:56:70:ac:90:65:e5:cc:4b:ac:fa:26:61:
f3:a0:c0:0b:92:1d:b9:ab:1a:80:6e:95:c5:69:7b:c6:35:46:
6c:06:2a:11:ef:a8:e7:48:3e:9c:f2:f7:20:78:6c:20:7b:60:
4e:74:be:ae:79:5f:7f:e5:6d:ee:75:0e:f7:7a:23:fb:4d:f9:
5a:97:46:b7:6a:03:ab:82:8b:53:ad:75:cb:d4:d8:f4:56:9c:
47:55:ed:e0:9a:32:cd:69:e5:1a:c3:40:c8:17:88:df:82:d1:
34:f7:df:9f:aa:f4:f3:38:47:0f:01:a9:c7:b3:3b:2c:26:d6:
e3:be:20:08:48:af:65:20:93:aa:ed:98:c1:d3:25:77:82:04:
6d:1e:67:ca:44:e9:44:c1:53:5b:6b:71:ae:4a:19:6d:6a:64:
3f:b3:92:f0:71:0e:d7:eb:6b:6b:b9:33:9c:74:4f:1b:2a:d2:
32:47:1c:67:75:10:9c:90:44:eb:77:39:b3:43:2b:90:a0:9b:
a2:8a:84:89:6d:1c:ab:5e:0c:d7:b2:87:a5:7c:86:96:bf:07:
3a:47:dd:19:42:36:a8:1a:72:bc:76:e4:5d:19:ee:a4:45:3c:
34:bc:61:0e:d0:a7:03:6c:d7:19:52:d1:c2:27:85:b5:c1:ff:
1e:9e:73:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:40 2026 by rpki-client