
$ rpki-client -vvf rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/BF7A92E2FFC311EF9131D04AC4F9AE02.roa
File: BF7A92E2FFC311EF9131D04AC4F9AE02.roa (raw, json)
Hash identifier: J3DGY8juU3pcRJwZaQR0jzBRz3iKXp4A0M0KTR2lgY0=
Subject key identifier: 4B:ED:48:7F:ED:18:17:C3:33:14:5C:4D:36:6B:20:92:8C:A5:1E:C4
Certificate issuer: /CN=A918922D/serialNumber=456C60836584E90A28A29D028B5B27601A93D446
Certificate serial: B5
Authority key identifier: 45:6C:60:83:65:84:E9:0A:28:A2:9D:02:8B:5B:27:60:1A:93:D4:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/BF7A92E2FFC311EF9131D04AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:01:33 +0000
ROA not before: Thu 13 Mar 2025 04:29:27 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 153688
IP address blocks: 163.223.74.0/23 maxlen: 24
2001:df5:36c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.crl
rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918922D, serialNumber=456C60836584E90A28A29D028B5B27601A93D446
Validity
Not Before: Mar 13 04:29:27 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3e44d-dd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:00:f0:e1:80:65:f0:2e:c9:97:79:c4:a5:
3c:d1:a0:ca:7a:fb:f7:0a:0f:4c:bd:28:82:18:8b:
fb:f0:1d:a9:8f:b1:3b:f3:97:99:6e:0d:a2:83:83:
94:3d:e1:81:57:5f:00:b2:5c:49:df:05:28:29:f0:
44:f5:03:7d:72:a9:ed:33:27:6c:a1:17:2c:19:28:
8d:20:3b:9d:46:a0:1a:17:ac:75:c9:58:05:d6:e5:
55:fb:d3:44:bd:8c:b2:f8:88:84:dc:67:0a:5b:d6:
3b:11:8d:e2:33:08:ea:62:d9:3f:7c:12:e3:f2:f3:
ac:e1:82:5e:c8:13:3b:41:4b:8d:ca:9b:7d:3d:9a:
e5:10:58:1f:f8:6e:7e:71:ae:15:62:30:86:e8:59:
29:9d:7e:e4:db:9c:2d:7a:1a:a6:f4:b6:f8:fa:9a:
c2:dd:94:87:41:18:61:7e:68:f7:54:2e:85:37:d0:
5c:4e:3c:52:9b:bc:70:68:c9:52:ac:62:e1:47:72:
52:cf:a7:39:43:11:6c:f8:80:cc:f8:6c:5b:f8:b1:
c9:2b:2c:97:d9:28:40:d9:ff:a1:f9:5b:5d:cd:9d:
01:b4:c3:8a:fa:0b:78:b8:85:34:88:2b:18:f8:0c:
06:86:d0:86:cb:46:98:95:99:83:21:51:df:62:cc:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:ED:48:7F:ED:18:17:C3:33:14:5C:4D:36:6B:20:92:8C:A5:1E:C4
X509v3 Authority Key Identifier:
keyid:45:6C:60:83:65:84:E9:0A:28:A2:9D:02:8B:5B:27:60:1A:93:D4:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/BF7A92E2FFC311EF9131D04AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.74.0/23
IPv6:
2001:df5:36c0::/48
Signature Algorithm: sha256WithRSAEncryption
54:1e:ee:51:e2:7b:c9:63:ed:ae:71:c9:54:cf:d8:4e:8e:ef:
a4:f1:82:2e:0b:5a:3b:c4:ee:7c:3f:26:7a:8a:39:36:96:3d:
c0:e5:d8:41:c6:c1:fa:6c:a0:47:a1:8f:79:e4:09:6c:d5:ca:
c5:82:9e:e7:77:b3:89:d2:6f:fe:f4:51:76:f2:9b:1b:c7:93:
3a:81:b4:47:d0:12:48:ae:28:89:bd:60:ab:98:ad:1a:f7:52:
d7:09:57:10:1d:e6:8e:4d:f0:84:dd:7e:68:cc:df:3c:63:b2:
b4:0d:a6:fd:1b:cf:36:c8:d4:b7:d3:88:4b:15:4b:61:16:64:
f4:69:5b:ce:35:70:13:c1:83:83:2c:48:cb:57:f1:53:dd:f0:
73:a5:ea:e0:43:f8:a2:61:0f:1d:3e:a1:3b:67:67:2f:f0:9c:
a2:a9:32:3d:92:9d:47:09:41:ff:73:c3:84:61:14:9c:64:43:
8f:24:c6:cd:0d:72:ea:b1:13:b5:4a:52:e8:10:bd:68:85:46:
a2:0e:43:20:a2:ed:11:7e:7b:89:05:79:5a:66:82:9d:84:9f:
d4:09:3d:40:e6:b0:28:8e:7c:1e:50:c3:aa:fc:17:61:47:2d:
b1:ad:82:9c:56:06:4e:d8:e8:33:65:0c:43:9e:19:ee:97:58:
8a:3f:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:24 2026 by rpki-client