
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/848534FA2DDD11F1A9BF730FB5833773.roa
File: 848534FA2DDD11F1A9BF730FB5833773.roa (raw, json)
Hash identifier: u9lltteytbvuVpGg0w+umKh20ZrbZ7O7QXSvCeg3ijQ=
Subject key identifier: AB:C3:19:2C:B3:59:3C:61:27:ED:A3:47:3A:71:07:B4:68:0A:13:0E
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: E2
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/848534FA2DDD11F1A9BF730FB5833773.roa
Signing time: Wed 01 Apr 2026 15:14:46 +0000
ROA not before: Wed 01 Apr 2026 15:14:46 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 23713
IP address blocks: 63.221.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Apr 1 15:14:46 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69cd3666-0834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d4:08:2f:77:df:91:00:09:6e:c8:c6:71:c4:
2e:a3:57:4c:1b:c1:8b:89:e0:ce:32:56:ee:65:4e:
b6:e6:a0:ea:66:52:4e:49:04:c9:25:d1:41:1c:96:
5c:81:da:28:e9:c6:d3:d7:1a:b2:bf:03:ff:33:80:
37:5d:8f:a1:51:ca:0c:8d:1d:f9:0d:9c:6b:57:aa:
9f:1c:92:40:e9:83:19:c5:e6:d5:b7:90:55:fe:85:
60:56:75:0d:42:a2:3b:78:c1:33:94:7c:a0:b0:dc:
5f:52:21:3c:8a:3c:96:ab:82:89:c5:0d:cf:ba:15:
30:9c:bf:d4:48:7f:e5:c8:59:08:bd:9a:68:e9:4b:
78:6d:e8:16:1b:2a:b7:4a:6b:73:b3:c0:70:dc:7a:
49:3c:a1:26:b3:51:16:2e:63:f3:0b:ad:64:8f:34:
91:65:fd:fc:48:cc:5b:40:3a:d1:95:a7:7f:6b:03:
29:37:b7:1c:ba:bb:d2:50:a8:e1:20:5a:a9:41:1a:
0f:82:0e:02:65:19:9d:9a:7d:09:88:66:ca:07:86:
dd:e5:9f:73:db:43:a5:b6:c2:31:e7:e6:7f:73:98:
75:89:32:28:5c:45:d4:f8:85:ed:70:14:02:75:65:
cc:9e:98:d5:a6:e1:a7:97:81:97:a1:14:4c:90:2f:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C3:19:2C:B3:59:3C:61:27:ED:A3:47:3A:71:07:B4:68:0A:13:0E
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/848534FA2DDD11F1A9BF730FB5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
63.221.169.0/24
Signature Algorithm: sha256WithRSAEncryption
87:dd:f2:24:f2:6c:3c:31:99:22:72:48:6b:6f:c0:1d:47:99:
e8:10:b7:bb:8d:a9:07:6d:83:aa:47:05:97:4e:68:49:7a:11:
c6:cf:56:1a:47:df:c6:9a:98:3f:1a:5b:2c:d2:b2:66:09:c8:
21:ab:41:02:31:64:2c:ff:c0:a0:4c:73:34:94:03:67:a5:c3:
a4:59:6f:c8:49:63:62:ec:d1:9e:33:d1:66:1a:5a:9b:3b:fe:
d0:aa:70:5a:d1:aa:c1:cc:23:34:47:2c:94:99:2b:8b:fd:0b:
1a:9e:99:08:c0:ea:f1:e0:2a:bf:da:63:d1:9e:a4:9e:65:c8:
06:99:2a:22:a6:11:08:6c:fd:25:8d:25:2c:c6:1c:7e:c7:d2:
71:38:f5:e0:d8:d9:02:e9:b0:1d:a4:8d:4c:a4:3f:11:e9:aa:
85:f1:0e:af:2d:4f:0d:58:0f:1f:d5:73:e3:9d:e2:46:ad:a0:
42:49:61:02:18:4d:e2:04:4f:47:10:cf:65:b3:fd:66:a9:69:
3c:46:45:96:72:9f:0d:9d:34:25:9e:ec:47:38:fb:4a:50:03:
85:ca:8c:bb:19:56:1d:0b:15:26:f0:0c:81:be:ea:9c:ff:0c:
73:2e:f1:7b:1d:bf:23:78:14:98:ae:e8:85:31:94:4e:eb:4c:
e7:b1:34:18
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5
MjkxRTY4M0EwHhcNMjYwNDAxMTUxNDQ2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNkMzY2Ni0wODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA59QIL3ffkQAJbsjGccQuo1dMG8GLieDOMlbuZU625qDqZlJOSQTJJdFBHJZc
gdoo6cbT1xqyvwP/M4A3XY+hUcoMjR35DZxrV6qfHJJA6YMZxebVt5BV/oVgVnUN
QqI7eMEzlHygsNxfUiE8ijyWq4KJxQ3PuhUwnL/USH/lyFkIvZpo6Ut4begWGyq3
Smtzs8Bw3HpJPKEms1EWLmPzC61kjzSRZf38SMxbQDrRlad/awMpN7ccurvSUKjh
IFqpQRoPgg4CZRmdmn0JiGbKB4bd5Z9z20OltsIx5+Z/c5h1iTIoXEXU+IXtcBQC
dWXMnpjVpuGnl4GXoRRMkC9cQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKvDGSyz
WTxhJ+2jRzpxB7RoChMOMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5
NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvODQ4NTM0RkEy
REREMTFGMUE5QkY3MzBGQjU4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAP92pMA0GCSqGSIb3DQEBCwUAA4IBAQCH3fIk8mw8MZkickhrb8Ad
R5noELe7jakHbYOqRwWXTmhJehHGz1YaR9/Gmpg/Glss0rJmCcghq0ECMWQs/8Cg
THM0lANnpcOkWW/ISWNi7NGeM9FmGlqbO/7QqnBa0arBzCM0RyyUmSuL/QsanpkI
wOrx4Cq/2mPRnqSeZcgGmSoiphEIbP0ljSUsxhx+x9JxOPXg2NkC6bAdpI1MpD8R
6aqF8Q6vLU8NWA8f1XPjneJGraBCSWECGE3iBE9HEM9ls/1mqWk8RkWWcp8NnTQl
nuxHOPtKUAOFyoy7GVYdCxUm8AyBvuqc/wxzLvF7Hb8jeBSYruiFMZRO60znsTQY
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:27 2026 by rpki-client