
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/96E040E063B211F09B18DA38C4F9AE02.roa
File: 96E040E063B211F09B18DA38C4F9AE02.roa (raw, json)
Hash identifier: O/ttwvSwFeVGz348mgWAK4NKEaNPGiiCj0Dett+ARNE=
Subject key identifier: 73:1E:AC:A6:94:18:35:A9:1D:34:07:8F:88:42:27:97:07:8B:BD:9C
Certificate issuer: /CN=A9142EA4/serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC
Certificate serial: 7A
Authority key identifier: 1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/96E040E063B211F09B18DA38C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:11:55 +0000
ROA not before: Fri 18 Jul 2025 08:38:33 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 153710
IP address blocks: 163.223.158.0/23 maxlen: 27
2001:df5:4540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl
rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142EA4, serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC
Validity
Not Before: Jul 18 08:38:33 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3e6bb-ad0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:e3:6f:e1:4f:78:d0:70:18:6a:da:c8:d6:
b7:5e:84:ca:36:55:4e:fd:cc:e3:45:0b:e9:2d:7c:
43:76:a9:27:3c:23:0a:51:b9:73:95:53:7b:0c:87:
99:57:df:9c:f5:60:ff:a5:a4:6e:97:e7:5b:23:25:
09:70:85:66:36:33:65:4c:00:24:28:fb:39:ce:ff:
48:2c:a5:92:be:86:9c:f2:af:f9:a2:cb:d9:cc:6f:
0f:12:5a:78:2e:3c:ae:af:b0:ce:dd:64:5d:98:7b:
d6:c5:1e:40:79:69:96:ec:e9:ef:f2:bf:09:dd:7f:
58:f8:0b:2a:0a:23:eb:0f:89:83:83:52:bd:c4:f8:
40:03:a7:18:9f:60:74:53:9e:fc:77:28:af:a0:c3:
b4:c2:36:7a:0a:ce:7f:b4:07:65:b8:71:36:6b:e4:
b0:9f:26:37:13:f9:8c:02:e0:e6:33:d2:0f:16:af:
ba:a7:50:70:7b:e9:ce:4d:69:5b:16:74:0f:67:f5:
c2:85:7e:de:b9:25:1c:c7:37:c4:94:45:88:3b:d5:
91:6d:d1:22:58:45:8f:6d:73:db:0f:02:40:b0:86:
26:5a:54:e6:5e:ac:20:f5:73:18:91:b7:07:cb:69:
55:b9:b0:a6:b7:a6:0b:7b:86:89:ef:03:04:94:54:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1E:AC:A6:94:18:35:A9:1D:34:07:8F:88:42:27:97:07:8B:BD:9C
X509v3 Authority Key Identifier:
keyid:1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/96E040E063B211F09B18DA38C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.158.0/23
IPv6:
2001:df5:4540::/48
Signature Algorithm: sha256WithRSAEncryption
2c:1e:75:bd:64:01:d5:9b:21:12:8b:a1:4b:25:fc:91:55:3e:
6c:02:ee:71:22:21:2d:6f:ee:6f:20:5a:f4:e2:3d:21:37:03:
09:c5:c3:9e:8f:bc:3c:99:fe:4b:30:5c:ce:ef:af:23:ff:aa:
ab:2b:b4:d6:77:86:7c:0a:83:cf:c7:ab:24:0e:d6:3e:ae:f3:
e1:8e:f1:18:4f:01:de:b7:0c:28:a5:8d:a8:f4:17:d3:aa:16:
c6:a7:a7:54:de:b8:af:e3:cb:a9:4b:da:9d:15:a6:2b:a6:f8:
84:e5:20:df:18:c2:ac:bc:e5:11:cc:58:d7:c3:2a:18:52:d2:
08:73:61:55:b3:8e:81:78:4b:1a:62:cd:46:fb:49:d9:f6:8e:
2a:3a:64:e8:d8:36:f7:a9:81:6b:18:2f:2a:d8:6e:5b:b1:ed:
19:13:fd:28:4e:98:12:ba:17:87:a5:92:32:3f:2d:75:77:b1:
00:5f:73:9d:1c:f9:29:f3:d0:90:bf:b4:22:c9:bf:72:8c:ba:
b2:8f:8f:f4:3a:75:4a:fd:f7:81:52:c9:f1:c4:7e:bf:c9:3a:
17:88:56:78:f2:86:36:3f:ef:4f:20:82:d7:31:c8:f4:e0:0c:
ad:89:c5:dd:0e:03:25:ef:c5:fe:ac:1b:ed:90:59:96:2f:28:
c3:a0:e4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:07 2026 by rpki-client