
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/CB08B0C019C811F0958CB24EC4F9AE02.roa
File: CB08B0C019C811F0958CB24EC4F9AE02.roa (raw, json)
Hash identifier: oU1YzucoXB7KyIdRvg/07TuDKK4MCzNm2V2SoNLMLi0=
Subject key identifier: 26:33:0D:CB:56:3C:32:6D:70:09:27:66:8B:FE:2B:1B:71:78:78:88
Certificate issuer: /CN=A9125532/serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
Certificate serial: AB
Authority key identifier: 94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/CB08B0C019C811F0958CB24EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:02:52 +0000
ROA not before: Tue 15 Apr 2025 07:13:51 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153775
IP address blocks: 163.227.62.0/23 maxlen: 23
163.227.62.0/24 maxlen: 24
163.227.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl
rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125532, serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
Validity
Not Before: Apr 15 07:13:51 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3e49c-7398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:0e:8e:b7:dd:8d:12:a3:35:8d:16:23:c8:
9d:22:54:46:32:c7:79:6d:90:c0:65:37:9c:5d:e2:
7c:ef:d7:19:90:91:f2:70:b6:aa:32:eb:f8:e8:29:
25:e0:47:95:e2:60:4b:f9:c8:dd:ae:a0:9c:9f:32:
94:78:dd:5c:8f:95:e5:e0:f3:14:19:0f:37:61:5d:
35:e1:4c:79:27:aa:18:fe:5a:dd:3f:a3:34:32:53:
1b:3a:8a:8f:45:18:74:4e:81:52:aa:57:5d:58:26:
6f:a3:2e:35:26:a6:1b:bb:fd:f5:5e:b6:96:ed:ae:
4e:fc:06:50:b4:81:30:24:dd:90:97:f8:c8:f9:2c:
5c:f2:a2:65:ed:de:68:79:4a:30:3e:d9:6f:29:97:
e4:16:34:66:83:ef:37:ee:5f:18:fb:b9:22:aa:a6:
15:79:0a:ca:1a:11:e2:6a:50:1b:23:f2:5a:77:af:
72:d7:a9:0f:5d:92:b5:1a:b8:e6:e6:8b:4a:57:93:
cf:ae:59:9d:34:bf:ac:6a:e1:9d:ba:4e:d6:d9:0c:
9e:19:78:51:98:cd:a5:58:b5:c2:80:2e:1a:bd:ba:
2d:91:fc:16:4a:16:34:86:23:2e:72:17:2b:46:5b:
b4:e5:71:4a:ce:40:e7:fe:6c:9a:d9:cf:e8:5b:b2:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:33:0D:CB:56:3C:32:6D:70:09:27:66:8B:FE:2B:1B:71:78:78:88
X509v3 Authority Key Identifier:
keyid:94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/CB08B0C019C811F0958CB24EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.62.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:d6:aa:25:3d:d4:df:c3:95:cd:2d:08:b6:18:af:4d:1a:a7:
20:5e:a9:e2:38:88:36:b7:e8:69:6d:a4:21:87:5c:36:43:40:
da:7a:fe:c1:90:11:f2:b9:c5:f1:6d:8e:92:c3:f3:2e:4f:dc:
e0:92:6f:b4:a9:08:95:40:da:6c:6e:df:31:2a:bf:a2:95:93:
ea:6a:78:7d:79:27:e4:9f:94:6b:6a:7d:98:2b:94:dc:e7:92:
f9:ea:b4:77:0b:1b:b9:0e:37:c4:c0:9f:f6:84:94:99:c2:a3:
a2:e7:11:ca:4d:bf:ce:ee:36:75:dc:fd:39:bd:aa:61:51:c3:
67:bb:4d:c7:66:03:f1:12:e1:c9:ee:28:36:f0:a4:3e:85:cc:
18:8a:f4:a0:0f:cc:dd:40:79:8b:d7:86:d7:0d:36:3a:a6:df:
e3:26:e0:26:df:1d:70:c6:74:2b:99:5f:5d:42:6f:c9:af:c5:
44:b1:93:dc:6b:ac:37:4f:e3:7a:9b:9e:3d:e8:f7:43:51:a1:
8b:da:80:5c:79:a8:6d:09:a2:7e:95:d5:04:72:eb:6c:aa:07:
2e:43:cc:ab:bf:71:c6:2b:73:77:4e:24:cd:83:c1:d3:fe:77:
5c:b1:e8:2d:84:50:95:3b:fe:3f:d5:60:1d:0b:96:45:85:8b:
53:47:b2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:57 2026 by rpki-client