
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/3A63E0587B3811F1B145FA7A90A30FBC.roa
File: 3A63E0587B3811F1B145FA7A90A30FBC.roa (raw, json)
Hash identifier: D6CqpvXjHKtJoDkgVXf1XqX7i1a7t5xANjRIRt/3rMY=
Subject key identifier: 9B:86:CC:19:60:D7:90:A1:05:39:31:A4:47:2B:2F:D3:18:76:88:5C
Certificate issuer: /CN=A9142F59/serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106
Certificate serial: CF
Authority key identifier: 1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/3A63E0587B3811F1B145FA7A90A30FBC.roa
Signing time: Thu 09 Jul 2026 01:48:05 +0000
ROA not before: Thu 09 Jul 2026 01:48:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153689
IP address blocks: 163.223.80.0/23 maxlen: 24
2001:df5:3840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl
rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142F59, serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106
Validity
Not Before: Jul 9 01:48:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4efdd5-28e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:e6:34:cc:43:67:f4:c0:03:ed:98:94:57:
cc:c7:1e:74:02:a1:31:6f:46:4b:74:72:58:ef:1e:
0f:27:9e:47:98:8b:cc:7f:d7:cf:42:4c:62:c7:00:
03:3d:39:30:83:49:29:72:70:b7:a3:2a:2e:d6:0b:
1e:75:77:36:1d:b5:a7:89:14:85:b5:e3:89:14:8c:
91:f5:41:0d:52:6f:55:81:8e:16:e8:1e:60:93:ab:
c0:b7:b0:8d:20:5b:b0:47:17:b8:35:06:dc:5b:37:
ec:56:a3:ee:03:98:69:f3:c1:8d:35:d2:16:3b:69:
89:be:c1:cf:c3:da:d2:ea:59:fa:93:fe:50:65:cf:
3f:2a:99:dd:84:9c:b2:c7:6c:65:59:9f:d2:32:9f:
d1:01:a1:ac:db:19:62:9b:2d:c3:a9:4f:c9:91:48:
d0:a4:f9:f5:2f:ee:b6:67:98:65:3c:a6:f2:2a:27:
63:c4:f4:1d:dd:91:c5:4b:9d:5e:73:25:be:4a:1c:
a3:91:1b:9f:3a:e6:63:02:47:7f:e7:fa:12:5d:8f:
2d:bc:ed:e8:e1:e1:9c:c3:90:b6:cf:2c:7e:b1:bd:
90:e7:3d:4c:97:bd:32:4b:5e:63:94:9c:ee:c4:bc:
1d:df:d6:aa:bf:e3:a3:31:1d:38:6e:e2:9d:6e:1f:
b9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:86:CC:19:60:D7:90:A1:05:39:31:A4:47:2B:2F:D3:18:76:88:5C
X509v3 Authority Key Identifier:
keyid:1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/3A63E0587B3811F1B145FA7A90A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.80.0/23
IPv6:
2001:df5:3840::/48
Signature Algorithm: sha256WithRSAEncryption
69:b1:36:c0:e4:3a:a8:36:47:19:d9:9f:89:fe:a4:79:54:30:
6a:7b:f4:4c:0c:c7:15:c0:06:f3:1a:96:df:f0:2a:1b:0c:41:
d7:dd:fe:71:ca:d2:ea:6a:05:80:ab:b7:a7:68:d0:fb:37:80:
5d:f3:f5:19:bd:19:98:a1:20:be:ea:8f:60:9d:cb:5e:e2:d7:
8f:4b:80:19:85:8e:93:f3:ea:cc:45:9e:4c:d7:3b:f3:de:75:
e3:d3:aa:4a:47:ad:e0:be:b9:ff:f6:3c:98:c9:ac:95:00:9c:
d1:7b:33:aa:92:9d:7f:79:be:b8:61:a4:00:a6:c0:55:3e:0e:
00:eb:bd:2e:a5:e4:8b:6f:cc:37:55:b1:d6:39:1e:ac:3c:f2:
ae:05:a1:b5:51:33:50:6a:1a:87:7d:4a:af:a1:70:41:91:c6:
37:d1:a4:59:2c:68:41:96:e0:e8:6e:d6:cf:4a:f0:08:2b:c0:
3a:11:37:f4:a9:bc:de:68:9e:1c:94:e5:4b:f2:22:ee:01:5a:
d2:6e:5c:de:5e:af:81:23:ff:28:6e:2c:d2:cc:a9:66:c8:eb:
bb:e6:b8:5f:d1:26:f4:b0:14:f3:32:0b:99:00:23:2b:b3:03:
84:ed:de:52:c1:3d:db:34:a4:93:d8:e6:56:6e:99:6c:34:6f:
36:cd:eb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:47:40 2026 by rpki-client