
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/850105504F3D11F0A0960F7CC4F9AE02.roa
File: 850105504F3D11F0A0960F7CC4F9AE02.roa (raw, json)
Hash identifier: qNWHgfJsoNs5L5U5kNXNpJEP/6NUawEmBu4riDVc1MI=
Subject key identifier: AB:DB:8C:D0:7B:FF:92:D8:37:A9:59:9F:5D:C7:38:50:D7:CE:60:31
Certificate issuer: /CN=A916156D/serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
Certificate serial: ED
Authority key identifier: 49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/850105504F3D11F0A0960F7CC4F9AE02.roa
Signing time: Thu 03 Sep 2026 06:56:49 +0000
ROA not before: Thu 03 Sep 2026 06:56:49 +0000
ROA not after: Fri 01 Jan 2027 00:00:00 +0000
asID: 153777
IP address blocks: 163.227.61.0/24 maxlen: 24
2001:df5:5b40::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl
rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916156D, serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
Validity
Not Before: Sep 3 06:56:49 2026 GMT
Not After : Jan 1 00:00:00 2027 GMT
Subject: CN=6a991a31-17cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:1d:ea:21:21:7c:dc:37:2d:90:03:2e:8a:
1b:59:36:a7:92:d1:e7:04:8c:18:ad:c4:03:e6:59:
e1:93:37:a6:d7:96:0a:1b:45:18:c3:c0:d2:fc:e3:
f0:ea:89:be:37:43:6a:98:55:64:c7:33:64:e2:35:
ee:0d:7a:0e:ab:5f:8c:e5:18:ee:2f:98:0e:2c:70:
c3:b0:c8:97:71:8a:47:76:d6:6b:5f:86:d6:9f:cf:
06:a6:ab:f9:c3:5e:42:1d:0a:f4:25:65:0d:ff:9e:
e7:4b:67:af:67:07:0e:95:a9:9f:7f:fc:00:9c:6b:
86:33:3f:39:28:79:c9:7f:8c:d7:25:83:23:f3:76:
3f:89:85:ad:b0:ed:f5:a1:d2:2d:91:c5:6a:df:28:
66:6d:75:a3:59:c9:32:f3:48:4e:a9:5c:ca:f8:5e:
70:49:a7:11:e3:a8:13:6a:e9:47:6f:53:a9:48:6a:
f7:77:90:8e:a5:03:0e:cd:00:81:a4:ce:39:7f:16:
b1:98:8d:3c:fc:aa:3a:30:c6:8a:05:21:db:75:21:
38:70:e7:a0:47:1e:0f:e9:57:01:aa:4a:aa:c9:fe:
b8:1c:52:d3:5f:81:fc:59:80:e8:51:8d:53:de:a6:
1b:38:ba:b3:84:5d:6d:39:cc:84:03:07:fd:f9:aa:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DB:8C:D0:7B:FF:92:D8:37:A9:59:9F:5D:C7:38:50:D7:CE:60:31
X509v3 Authority Key Identifier:
keyid:49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/850105504F3D11F0A0960F7CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.61.0/24
IPv6:
2001:df5:5b40::/64
Signature Algorithm: sha256WithRSAEncryption
57:4c:52:04:7d:93:66:0f:fe:bc:69:9a:4e:35:f5:67:06:69:
04:82:90:13:30:ae:44:c3:a9:1d:1f:ac:3f:be:b0:ae:b4:95:
4c:92:8d:d4:f0:43:d7:d2:3a:26:bd:7a:6f:e1:60:64:42:73:
50:78:ae:47:99:52:f5:df:aa:98:c5:ab:8f:92:38:36:be:bf:
08:9c:c0:39:2c:ee:33:ef:3d:e8:02:d6:5d:78:e5:24:ab:2e:
6f:cc:b6:c2:2c:49:e2:7c:9f:ff:a5:96:3b:46:cb:15:5e:84:
1c:0d:ed:84:59:d6:f1:a6:e2:d8:8f:0d:20:83:7b:7f:aa:95:
df:cf:13:f7:34:c3:0d:65:e1:15:70:08:f3:f0:93:0d:22:3b:
26:c3:50:6a:a4:16:32:da:ef:76:0d:5f:b7:15:69:87:45:e3:
33:28:95:ed:b2:40:75:0f:13:a1:a3:e4:66:fb:51:e2:6e:9a:
36:16:9f:32:af:7a:af:29:e6:28:86:74:69:41:dd:5e:65:66:
c5:b7:d8:76:f5:62:32:26:09:09:4f:2d:ed:2d:cb:ca:f8:cb:
40:bb:2b:9c:27:86:6a:f3:91:7c:5f:17:d6:6f:dc:0f:01:cb:
13:eb:25:30:8b:09:a7:0f:d1:d9:b9:06:f8:f6:f6:e6:21:80:
20:c1:32:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:28:14 2026 by rpki-client