
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/6ADC3FDE1EA811F080D62E0EC4F9AE02.roa
File: 6ADC3FDE1EA811F080D62E0EC4F9AE02.roa (raw, json)
Hash identifier: eZIpW/uAc6VvUgj1mUM1+YMtbcurUKE2lt2tc7badCU=
Subject key identifier: CA:6E:C3:EE:36:16:FE:14:A0:9E:D0:C6:7A:85:53:A7:87:82:0F:BC
Certificate issuer: /CN=A917A19F/serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3
Certificate serial: 7C
Authority key identifier: 62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/6ADC3FDE1EA811F080D62E0EC4F9AE02.roa
Signing time: Wed 29 Oct 2025 08:24:40 +0000
ROA not before: Wed 29 Oct 2025 08:24:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153706
IP address blocks: 163.223.146.0/23 maxlen: 23
163.223.146.0/24 maxlen: 24
163.223.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl
rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A19F, serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3
Validity
Not Before: Oct 29 08:24:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6901cf47-a19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:67:a9:ea:6f:b5:be:4a:b0:f6:8c:ac:9e:
f6:b0:7f:98:c3:a8:4e:29:a6:48:6b:31:32:76:bb:
b1:32:3f:fc:30:3b:c4:ad:87:0d:5e:0f:09:f3:59:
a8:ba:64:aa:3c:47:ff:5f:24:7f:0f:1d:af:27:10:
a7:31:54:43:a2:f7:97:83:11:f6:39:d0:75:ae:60:
cc:26:ed:3e:d8:7b:f8:ba:c5:84:7d:00:ae:b4:9e:
69:10:1d:58:61:2a:35:b3:9b:a2:6d:0a:ce:39:9c:
27:6f:50:ef:80:da:14:1d:b3:a8:55:66:57:92:70:
ed:24:67:f0:6f:8d:7d:e1:23:9d:35:01:ab:4f:bf:
79:df:9f:1b:6f:94:bd:a7:0d:8b:40:7a:42:e0:1b:
58:ac:84:e0:f5:89:de:d7:73:b0:88:ec:91:d7:cc:
ec:d4:6c:7e:5d:ba:42:42:80:bc:23:bf:7e:9f:0b:
3a:ba:5b:ca:5f:3a:c6:63:d4:ed:1c:37:40:dd:61:
2b:29:48:ed:3b:94:3d:7f:02:c6:db:3b:06:f7:8c:
f2:0a:28:07:a9:73:10:cc:04:b2:08:09:92:f8:7a:
c4:26:5a:f1:d5:d8:89:a2:2a:20:dd:78:b2:7f:38:
90:f8:e5:4d:03:24:ec:8e:c4:73:94:0c:1f:91:45:
31:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6E:C3:EE:36:16:FE:14:A0:9E:D0:C6:7A:85:53:A7:87:82:0F:BC
X509v3 Authority Key Identifier:
keyid:62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/6ADC3FDE1EA811F080D62E0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.146.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:23:cd:cc:3e:fa:da:75:e3:76:6e:3f:8d:a8:41:1e:23:03:
a1:3a:04:29:34:08:a1:65:27:f8:e7:e1:6f:19:a6:ec:0b:66:
02:a0:bc:f0:d0:2e:38:38:75:2a:6d:8e:60:56:cf:af:76:42:
61:5a:68:8a:54:2e:2f:d4:af:0c:10:80:8a:63:15:a8:97:f5:
1d:6d:bc:75:d5:de:09:c6:b0:e9:f9:7e:7c:73:77:a0:ee:6f:
c7:43:95:4f:e2:13:09:f5:7f:45:b4:f2:d9:5a:63:75:85:09:
21:c3:38:fd:bc:13:b6:b9:2e:9a:16:01:51:0c:2d:60:4e:fe:
a4:34:15:b4:3a:17:7a:eb:b5:dc:aa:92:b0:40:f0:bc:84:69:
2c:91:80:90:4b:d0:72:36:cd:c1:58:c8:26:16:70:ab:e6:ac:
7a:b3:e2:0e:7d:16:66:6f:93:3e:41:2a:2c:65:da:33:7b:c9:
be:3e:5e:97:5f:47:75:c9:30:08:c2:be:8e:35:bc:e7:a6:e2:
dd:15:96:23:d4:c6:03:eb:11:5f:bb:e8:d3:8a:3a:e9:e6:78:
a3:d9:80:9e:a5:2c:81:05:15:36:4a:ca:f3:b3:02:9f:bf:c1:
f6:da:16:ff:89:2b:dc:8b:7a:c1:c4:18:9b:e5:6d:59:2c:ea:
1f:ec:53:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:17:00 2025 by rpki-client