
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/FA9003D2D76B11F095EF502678D3641D.roa
File: FA9003D2D76B11F095EF502678D3641D.roa (raw, json)
Hash identifier: lTioF3NNwOrm4Tz3PBkQrTdyGh1gsMsIDRrDa6o4vMk=
Subject key identifier: FF:E7:F0:2E:58:0D:EF:6A:9D:94:3A:07:B7:C9:6D:B7:D8:3C:B7:67
Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Certificate serial: BD
Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/FA9003D2D76B11F095EF502678D3641D.roa
Signing time: Sun 01 Mar 2026 16:19:33 +0000
ROA not before: Fri 12 Dec 2025 15:05:22 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153755
IP address blocks: 163.223.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl
rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Validity
Not Before: Dec 12 15:05:22 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a46715-171a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:43:c8:90:e3:60:29:fb:8e:a8:8e:ae:c3:
72:54:39:4f:d4:18:f2:be:6e:93:2a:95:73:8b:1c:
09:7d:7f:ee:29:ef:89:19:ad:ac:bd:cd:f8:e2:a6:
bd:82:e5:6c:ad:ba:91:37:88:05:f4:4e:6f:f1:dd:
e6:6a:78:5c:7d:b4:16:f1:94:df:13:99:d8:7c:85:
5e:eb:08:9f:c6:e1:07:a8:83:ae:71:58:e7:94:fc:
93:1a:11:db:07:a0:a9:e4:3c:ff:bc:be:87:7e:d5:
c0:c1:a3:50:a9:ea:8b:a3:b5:e7:31:73:3d:21:3c:
3c:d3:2d:c2:76:3f:d0:7f:9b:09:7d:6e:78:92:8e:
6b:fb:c5:f1:21:1c:51:d5:f4:6f:15:a7:cb:9b:3f:
72:8b:0a:bd:46:57:f5:23:ee:09:af:03:b6:ee:8a:
1b:c9:50:46:a5:63:28:36:19:5e:1e:4d:12:53:64:
a2:08:2c:e3:16:72:f3:a9:15:23:bd:17:18:f6:fb:
54:9a:f3:18:81:6b:2c:a6:89:23:72:e1:9d:f9:39:
aa:d4:d2:a2:6e:2b:cf:b2:c6:48:9a:88:8c:5a:15:
d1:c7:21:97:15:7a:86:84:c9:8d:b5:e7:eb:e6:b6:
82:0f:4d:04:d2:2d:e4:b6:d6:26:e6:89:20:5d:9c:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E7:F0:2E:58:0D:EF:6A:9D:94:3A:07:B7:C9:6D:B7:D8:3C:B7:67
X509v3 Authority Key Identifier:
keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/FA9003D2D76B11F095EF502678D3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.241.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:35:ba:13:ef:a4:1f:9a:96:47:49:18:2b:73:c0:67:f2:53:
0a:bb:c6:8a:01:d0:ab:87:d9:ec:a7:d3:e0:a1:f7:c8:0e:5b:
9d:c8:00:42:6a:a4:72:f7:42:81:43:cc:7a:4c:df:8a:d0:6c:
b6:de:82:db:ea:a1:aa:50:57:a6:97:f3:98:0a:fd:e1:83:4e:
b0:ae:f1:be:33:9d:ac:50:b6:0c:22:dd:c2:09:40:de:89:77:
cd:61:02:ca:6b:49:61:76:b9:89:f8:ba:1a:ea:73:4a:74:6e:
f6:23:ec:cf:e0:42:fc:5f:37:90:3f:12:c7:18:fd:72:a3:84:
25:fe:ba:32:a1:46:13:08:1c:e5:1c:67:98:d2:2b:f7:a5:9e:
16:ed:5b:59:08:37:44:b6:fb:f7:4d:80:cd:5f:c2:a4:8a:bb:
ff:29:f5:ff:75:da:50:ee:cc:be:5c:64:48:34:21:45:75:cf:
2d:d3:41:11:40:0a:67:c0:89:ba:21:4c:fd:8a:b2:f1:10:e0:
48:45:31:d1:d7:ff:7b:f2:5d:1c:80:a4:ce:9a:cb:3c:4e:fb:
7c:f5:30:70:f9:e7:6f:7c:48:1e:b6:b9:79:66:81:42:44:78:
4f:1c:85:4c:4a:f0:f8:13:0b:df:cb:9c:df:48:d2:80:4e:62:
3f:f5:a4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:56 2026 by rpki-client