
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/CDD9D46EA82511F0A1B4386EC4F9AE02.roa
File: CDD9D46EA82511F0A1B4386EC4F9AE02.roa (raw, json)
Hash identifier: /fZtQO9WFWt4xEmvAMiAEgk560qzFG36sx+TD4RIiz4=
Subject key identifier: D0:48:0A:BB:1C:10:22:11:05:97:75:3F:6D:AE:B1:A9:93:B9:91:73
Certificate issuer: /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
Certificate serial: BB
Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/CDD9D46EA82511F0A1B4386EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:58:55 +0000
ROA not before: Mon 13 Oct 2025 11:17:02 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135495
IP address blocks: 163.227.240.0/24 maxlen: 24
2001:df3:7200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl
rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:58:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
Validity
Not Before: Oct 13 11:17:02 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a5979f-152f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:35:0d:4e:60:13:4e:61:a1:c2:5d:47:78:
03:dc:1a:3c:2c:7d:ac:0b:9d:70:a1:82:c1:7a:7b:
ed:fd:53:6f:d0:c2:b2:7c:fc:0a:61:03:2f:ee:b4:
61:34:d9:03:6c:42:36:e5:35:3e:91:d6:4b:c3:a1:
f9:25:3b:bf:6f:8d:df:16:2e:06:a3:48:50:18:30:
1e:9d:05:ba:3d:7f:07:dd:a6:ab:6e:a9:3d:85:d3:
45:72:d7:63:f3:37:44:72:7a:d9:ca:20:bd:b1:9a:
a4:9e:99:a5:36:0a:78:60:21:50:16:c0:25:9d:ab:
8f:53:d4:3f:52:23:a1:91:c3:82:32:68:10:eb:32:
c8:ff:ba:7a:e5:12:c0:34:e1:4e:a8:31:70:05:16:
4d:f9:db:6a:e2:a4:60:40:28:b3:b0:b6:45:d8:4a:
26:24:c5:49:e4:82:82:6e:54:28:57:7c:b1:53:1e:
4a:dc:8e:44:7d:29:5a:28:22:87:4d:40:3d:f7:b6:
a7:fd:e3:b1:f8:67:4f:1f:25:5e:75:e3:27:2e:5f:
f2:5e:ab:a6:dd:7a:83:24:b5:79:2a:74:a8:8f:bc:
10:18:73:ba:e6:ab:c0:6f:99:b8:e0:2c:ce:cc:e6:
69:82:c8:cb:4a:44:31:b7:db:44:9e:27:82:48:85:
d6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:48:0A:BB:1C:10:22:11:05:97:75:3F:6D:AE:B1:A9:93:B9:91:73
X509v3 Authority Key Identifier:
keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/CDD9D46EA82511F0A1B4386EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.240.0/24
IPv6:
2001:df3:7200::/48
Signature Algorithm: sha256WithRSAEncryption
46:54:bf:e0:b0:f4:9d:83:cf:f5:c6:21:38:f6:41:c4:0e:3e:
74:b3:c9:27:09:22:50:22:bc:52:5e:b5:83:da:98:09:4b:d9:
f2:70:80:5d:72:70:98:18:9e:6e:0d:2a:5a:c8:93:5e:21:32:
7e:ae:2f:f3:09:7f:ed:46:db:07:c2:66:3a:28:6f:17:e0:5e:
5c:a5:65:14:ca:ef:c3:2b:2d:b6:ed:cf:d7:11:b5:70:58:7e:
68:b6:9c:ba:8d:db:3c:ab:1a:ab:a2:e0:98:9b:0c:9d:35:64:
0b:64:dc:a1:30:bd:bd:03:33:ed:3a:34:db:14:bf:30:ab:66:
82:87:34:08:70:37:e2:f9:a4:b3:bf:f6:a7:c6:0a:72:99:be:
60:1d:b4:bc:bf:33:5a:e2:b4:40:df:fb:6e:d7:c3:4c:82:cc:
75:62:af:be:c3:b2:42:5f:e4:91:19:20:a0:f6:0a:18:d0:9c:
d0:c2:80:eb:5d:48:36:57:88:3a:f9:2d:39:17:d2:0f:79:51:
05:21:f9:1b:2c:9b:7f:41:89:32:13:a6:02:ca:10:89:1e:78:
5a:a8:29:8d:84:fc:32:8c:64:4f:24:fa:28:82:ff:e8:36:56:
9c:be:11:17:17:09:01:68:fc:b9:ae:7d:83:a9:a1:ee:c2:c3:
3f:1e:2f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:58 2026 by rpki-client