
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa
File: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (raw, json)
Hash identifier: q11CNL+t4x5Vwq5rP/tYmXtfqpTGYiz7uq25DLAZUOc=
Subject key identifier: EC:73:F3:7B:02:FB:B9:8A:26:55:A1:2F:B9:EA:CA:3E:35:B0:64:59
Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702
Certificate serial: C6
Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:16:58 +0000
ROA not before: Fri 27 Feb 2026 06:25:13 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 9825
IP address blocks: 163.61.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl
rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702
Validity
Not Before: Feb 27 06:25:13 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a43c4a-6605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:2c:cd:f4:00:73:a9:9a:a3:ed:50:8e:6c:
83:42:ff:b3:cb:f1:ea:95:2e:3d:93:63:f3:a8:05:
c3:3b:82:b4:c7:15:fe:0d:d5:e5:cc:dd:34:56:7d:
3f:72:d2:e0:39:2e:40:40:22:5c:4c:eb:d3:b4:3c:
7b:78:cf:5d:fa:53:ed:f1:76:71:83:a5:07:79:62:
bd:c6:25:b9:3b:c3:c0:a1:9c:90:be:2a:5e:99:31:
49:2b:ac:87:23:42:50:75:44:67:cb:aa:64:b2:9c:
4a:5f:22:2f:25:7f:69:00:9b:6d:be:a8:cf:d2:ed:
f2:6c:9b:17:82:66:e1:6f:37:1b:44:1b:19:d4:47:
7d:9d:00:ac:c9:dc:a0:a6:ae:d7:63:2c:5f:65:b5:
ef:47:72:f0:19:7b:8a:e7:38:e8:4b:51:4c:5f:1c:
ce:89:5a:9d:11:25:fb:36:7d:76:48:4d:96:b6:7a:
00:3b:60:f2:0d:86:a2:9c:3c:44:f9:c9:59:fd:3b:
69:94:5a:2c:3b:c3:a5:09:1e:65:09:ff:cc:1e:f7:
03:0e:8b:b4:de:21:ba:10:97:0c:cb:88:fe:6d:ee:
1e:ad:9b:29:1c:32:9c:0d:c9:4b:e0:09:0e:5e:ba:
b4:79:52:c6:e7:78:30:1b:cc:4d:54:dc:b6:13:c2:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:73:F3:7B:02:FB:B9:8A:26:55:A1:2F:B9:EA:CA:3E:35:B0:64:59
X509v3 Authority Key Identifier:
keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.27.0/24
Signature Algorithm: sha256WithRSAEncryption
75:0c:ca:7c:7a:07:6c:3e:f9:82:a2:32:87:06:35:89:77:bf:
20:28:cb:25:98:13:33:f8:77:3a:7f:cb:90:bb:54:c0:05:4b:
77:d6:92:cd:43:12:7f:67:48:23:83:c9:09:5e:a0:c2:81:9c:
59:40:8c:92:d3:3b:5a:a6:34:5f:ba:21:90:96:c7:38:c6:dd:
90:b8:68:85:25:5e:80:8b:84:86:56:96:4c:69:9d:09:99:d1:
14:90:58:21:cc:5a:08:b3:1b:2b:9f:45:e4:06:88:9e:da:58:
cf:5f:99:eb:30:48:fc:ab:6c:dd:09:48:c6:e9:21:f5:65:0b:
8b:5a:8e:b4:88:33:bd:65:3b:13:b3:1a:ed:61:8a:53:5d:c7:
23:06:ff:10:b7:3f:b5:2f:ae:ec:aa:26:ef:d9:52:8e:fd:1a:
eb:57:00:7c:73:6d:06:4b:0d:4c:c8:4d:60:6c:dd:c5:a0:c8:
71:e6:ae:ae:0d:f6:80:3f:06:e7:9a:6a:f5:90:26:ef:3d:72:
7a:ca:34:8c:ae:ba:1a:ae:0f:5b:18:8d:1c:65:95:15:8f:fa:
d0:54:53:11:a8:af:84:d2:41:c7:91:dc:40:44:17:31:37:f4:
eb:28:c7:12:56:d3:16:de:d9:00:72:bb:d6:42:71:f5:44:f7:
93:e1:eb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:16 2026 by rpki-client