
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/078FA91C44EA11F09EB11858C4F9AE02.roa
File: 078FA91C44EA11F09EB11858C4F9AE02.roa (raw, json)
Hash identifier: 0SuulOZroh5YKmFDmSJwtaMeguYZYVtHHGTdUFtkVFs=
Subject key identifier: C3:7C:52:8B:0E:67:73:88:29:FB:35:B6:87:85:D9:14:D9:2C:2A:E5
Certificate issuer: /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Certificate serial: 89
Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/078FA91C44EA11F09EB11858C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:08:01 +0000
ROA not before: Mon 09 Jun 2025 04:27:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 163.223.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Validity
Not Before: Jun 9 04:27:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3e5d1-044d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:ee:27:46:11:a5:40:db:51:3d:5d:fe:40:
e7:6d:dc:41:a0:0d:22:f4:7f:b1:b2:fc:4b:36:69:
23:be:3e:e0:16:d0:21:6a:e0:61:da:84:39:2b:02:
e2:0f:5e:51:9a:c1:f6:ba:00:cb:7c:c4:e9:59:9e:
87:a4:5f:de:11:f1:b7:3a:a4:6d:29:84:fe:77:c1:
e6:e7:13:f5:6b:ab:5b:b5:10:1d:70:ba:7a:30:9e:
ac:33:76:08:6a:b8:07:d1:35:7e:d5:dd:2a:b1:be:
9d:b3:94:9d:8c:2a:cf:bc:76:42:a5:37:55:ef:dd:
4f:b3:ae:cb:98:a5:38:92:ed:26:6b:2a:ce:05:0d:
d9:c9:a4:d4:29:2a:0c:cc:5d:6d:70:4d:12:1e:e0:
94:2c:be:12:20:d0:47:15:ef:87:2c:a9:d1:5f:21:
64:64:12:40:ec:91:21:0b:02:12:05:a5:1a:a2:5d:
0a:44:1e:c5:5d:e8:56:55:75:d8:cc:c5:be:08:25:
a2:fd:62:e2:84:a5:15:bf:45:ad:13:fe:e1:09:80:
05:7f:bb:74:c3:9b:e3:7d:31:db:0e:d9:b2:2c:f9:
04:c6:18:70:51:c7:03:c7:aa:89:22:a6:c3:a8:0f:
49:0d:9c:8c:5f:73:c7:46:79:02:29:2c:77:26:e6:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:52:8B:0E:67:73:88:29:FB:35:B6:87:85:D9:14:D9:2C:2A:E5
X509v3 Authority Key Identifier:
keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/078FA91C44EA11F09EB11858C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.140.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b7:b4:d2:08:98:02:fb:2e:de:b7:87:23:cb:7d:aa:9b:80:
99:f3:2c:eb:3e:56:7f:78:46:ac:ee:e5:ce:b1:df:53:bf:a8:
2e:66:99:c9:67:e5:68:4d:2b:de:a1:d8:33:c7:65:e5:29:24:
85:fc:84:81:02:7d:9a:0b:00:a0:77:94:31:54:b9:34:df:b0:
8b:84:90:af:18:2f:d1:7f:fa:eb:17:62:d1:b6:ae:7c:93:99:
22:89:18:d3:9a:7a:43:b4:21:34:57:44:2b:26:6e:f9:12:12:
3c:49:34:fa:bd:dc:fa:db:cd:f4:83:1f:02:cf:04:db:aa:3e:
6b:c1:60:a4:b4:87:2b:0c:8b:0c:30:35:37:53:2d:5a:5a:6a:
99:a7:6c:c1:5b:c2:f3:96:bc:0d:de:26:ee:5d:cf:48:81:ba:
e0:da:c5:93:ac:35:49:4c:b3:43:eb:0a:ed:38:e1:06:e9:3d:
c1:8d:43:b7:32:91:f8:cd:2e:40:82:b7:02:11:a1:e9:e0:a7:
8e:3a:43:19:6b:75:ad:ab:33:84:94:cb:ad:b3:1c:6d:cf:b0:
3d:42:dc:6e:2c:9a:58:9f:bb:5c:9e:ad:1e:d1:01:10:a7:c5:
39:6a:5a:3b:6a:42:cc:f9:cc:aa:36:47:3a:94:5e:77:e8:6b:
d3:e2:22:fd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ3OTAxMTAvBgNVBAUTKERCQzEyODQ1RjFGQUEzNUIzMkZFQ0RGNkEwRUQ0RDE0
NDI5MkM4Q0MwHhcNMjUwNjA5MDQyNzE5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZTVkMS0wNDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyXruJ0YRpUDbUT1d/kDnbdxBoA0i9H+xsvxLNmkjvj7gFtAhauBh2oQ5KwLi
D15RmsH2ugDLfMTpWZ6HpF/eEfG3OqRtKYT+d8Hm5xP1a6tbtRAdcLp6MJ6sM3YI
argH0TV+1d0qsb6ds5SdjCrPvHZCpTdV791Ps67LmKU4ku0mayrOBQ3ZyaTUKSoM
zF1tcE0SHuCULL4SINBHFe+HLKnRXyFkZBJA7JEhCwISBaUaol0KRB7FXehWVXXY
zMW+CCWi/WLihKUVv0WtE/7hCYAFf7t0w5vjfTHbDtmyLPkExhhwUccDx6qJIqbD
qA9JDZyMX3PHRnkCKSx3JuZcOwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMN8UosO
Z3OIKfs1toeF2RTZLCrlMB8GA1UdIwQYMBaAFNvBKEXx+qNbMv7N9qDtTRRCksjM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDc5MC81MTMzRkVBQzQ0
RTkxMUYwOTFBOTZFNTNDNEY5QUUwMi8yOEVvUmZINm8xc3lfczMyb08xTkZFS1N5
TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI4RW9SZkg2bzFzeV9zMzJvTzFORkVLU3lNdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQ3OTAvNTEzM0ZFQUM0NEU5MTFGMDkxQTk2RTUzQzRGOUFFMDIvMDc4RkE5MUM0
NEVBMTFGMDlFQjExODU4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAo9+MMA0GCSqGSIb3DQEBCwUAA4IBAQAjt7TSCJgC+y7et4cjy32q
m4CZ8yzrPlZ/eEas7uXOsd9Tv6guZpnJZ+VoTSveodgzx2XlKSSF/ISBAn2aCwCg
d5QxVLk037CLhJCvGC/Rf/rrF2LRtq58k5kiiRjTmnpDtCE0V0QrJm75EhI8STT6
vdz62830gx8CzwTbqj5rwWCktIcrDIsMMDU3Uy1aWmqZp2zBW8LzlrwN3ibuXc9I
gbrg2sWTrDVJTLND6wrtOOEG6T3BjUO3MpH4zS5AgrcCEaHp4KeOOkMZa3WtqzOE
lMutsxxtz7A9QtxuLJpYn7tcnq0e0QEQp8U5alo7akLM+cyqNkc6lF536GvT4iL9
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:25 2026 by rpki-client