
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/A7B64E90EA7311EF83DF9312C4F9AE02.roa
File: A7B64E90EA7311EF83DF9312C4F9AE02.roa (raw, json)
Hash identifier: iN5ZyS8MFIpsPaY5Ugb/F++1o4RbnoAZ/BgHlSmsAPY=
Subject key identifier: 9D:E8:89:7B:F8:F7:21:18:4B:DD:06:FE:8F:CD:45:77:4F:37:6E:A9
Certificate issuer: /CN=A9147BCF/serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
Certificate serial: C3
Authority key identifier: 0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/A7B64E90EA7311EF83DF9312C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:58:48 +0000
ROA not before: Fri 14 Feb 2025 01:33:13 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 131476
IP address blocks: 163.61.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl
rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:06:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147BCF, serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
Validity
Not Before: Feb 14 01:33:13 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3e3a8-bff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:8a:75:e4:6a:94:4f:22:e5:b6:f0:f4:e6:
a3:8f:b9:0c:67:db:21:0c:5e:00:25:bd:eb:f1:1f:
f7:0d:f1:16:33:01:78:4f:a5:d4:a3:d6:cd:80:40:
77:e5:63:e9:b0:b1:06:b2:41:55:8e:f1:cd:b4:88:
1c:9e:57:b9:7c:01:2a:8c:c6:f3:6f:fe:b0:26:3f:
2c:6a:cb:ed:97:bd:41:ea:cd:5a:78:15:1e:42:82:
45:6d:b1:27:a9:e3:fc:1d:14:8f:dd:fc:cf:94:bb:
37:92:17:ac:2c:ef:f8:63:91:25:b5:e7:e0:7b:3d:
c8:36:2f:ea:78:35:cf:36:8b:21:48:35:f5:ff:9f:
57:17:22:99:78:ff:bb:29:84:be:67:2f:26:80:a8:
7c:2b:39:1f:82:fe:e5:e7:05:3b:a8:dd:b2:2a:09:
d4:b1:da:73:04:56:a8:65:f4:42:00:bd:25:6c:7f:
5e:ba:19:20:03:d5:be:eb:2a:c9:37:22:c2:e6:7b:
a2:0a:17:f8:8a:10:12:43:29:a5:fb:9e:7f:de:cc:
a0:7f:1b:6f:66:e1:01:fa:35:3e:49:88:ab:10:aa:
e0:a9:cf:72:9a:c4:ac:88:86:7a:78:60:64:51:6f:
1f:a1:74:5a:57:51:4a:b2:55:a9:ef:78:ab:ae:aa:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E8:89:7B:F8:F7:21:18:4B:DD:06:FE:8F:CD:45:77:4F:37:6E:A9
X509v3 Authority Key Identifier:
keyid:0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/A7B64E90EA7311EF83DF9312C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.84.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e9:cd:3d:a1:9d:b0:de:dc:30:17:19:1a:4f:e1:07:aa:5b:
1e:ad:cb:7a:ca:9f:94:80:d7:c5:1c:59:77:f1:6c:67:cb:74:
4e:bb:07:99:23:48:ce:53:65:32:3e:d4:c0:be:cb:a5:c8:be:
2b:2b:d0:ad:6f:fb:02:53:a3:93:02:c0:04:16:80:40:56:e4:
7b:1f:f7:04:ed:7b:62:2d:c2:19:01:b4:8d:f7:1e:17:b8:f8:
55:ea:16:5a:18:31:ee:33:4d:dc:58:f9:09:84:e0:17:fb:b7:
87:8f:e5:62:79:d8:96:a1:f3:f3:45:c5:7a:4b:01:f7:91:34:
18:6e:62:c6:e9:60:04:30:b0:c9:8a:35:2d:90:c0:07:2d:5a:
17:f9:46:5d:b2:4a:b5:55:8f:24:c2:ac:4e:9e:19:7f:72:d0:
f4:ce:e6:24:7a:75:d4:3b:11:91:d7:db:34:ce:79:fa:10:40:
5f:7b:e8:07:fa:86:95:51:65:ad:a6:7d:eb:b6:50:c6:16:4b:
f2:23:5e:e8:52:35:65:fe:4e:34:7d:5f:3b:ca:6a:3e:48:c2:
a0:7a:35:b5:49:03:89:f0:f2:51:f4:58:75:21:08:8b:ed:01:
f4:51:0f:8c:19:87:8a:1e:99:5a:99:1f:eb:ab:9d:ad:3e:ac:
b6:64:ab:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:35 2026 by rpki-client