
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/3051CA240FBB11F0B9C1D274C4F9AE02.roa
File: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (raw, json)
Hash identifier: nvz8XbFcLxgkpfB237Lbtk4e08aqr9uFKNDJJLY0z/U=
Subject key identifier: 8C:67:18:30:1D:5A:3C:83:27:ED:D5:E6:D2:9D:8D:B4:C2:D9:F7:F6
Certificate issuer: /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Certificate serial: AB
Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/3051CA240FBB11F0B9C1D274C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:02:18 +0000
ROA not before: Wed 02 Apr 2025 12:08:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199695
IP address blocks: 163.223.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Validity
Not Before: Apr 2 12:08:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3e47a-3182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:16:10:48:b8:0f:eb:5c:2b:5f:a5:1c:37:
db:9c:2a:4e:6b:54:81:6c:f2:e1:3a:02:82:8a:c1:
af:7a:6a:35:ea:c7:2e:c5:dd:45:1d:65:b0:a7:81:
de:04:75:5c:60:7d:4d:5e:1d:61:87:b4:ab:27:9f:
3c:06:b9:4c:a5:f7:31:10:0f:7f:4b:89:6c:5b:27:
fa:80:22:7d:21:53:81:5c:37:05:92:fb:45:e8:99:
0f:45:c7:a5:af:35:7f:f8:f7:31:13:81:a3:e9:46:
bd:31:d5:99:a7:02:49:fc:76:a3:e9:bd:65:90:62:
03:af:4a:cc:b2:ae:25:c6:7a:80:e7:32:c3:d7:fc:
d4:1e:36:16:92:b7:a8:81:5c:60:b9:ea:95:24:59:
30:79:bf:e1:8d:c4:58:73:13:c1:15:e0:7f:ec:e9:
cd:dc:a0:9f:91:99:1d:31:b4:1c:8c:55:28:b9:79:
7c:d7:fa:27:16:a6:c7:e5:bb:fe:41:d6:e5:1d:12:
dd:98:4d:7d:6e:37:1d:ed:04:57:ed:f2:e6:8f:79:
7e:91:e2:f7:8f:8d:e2:e4:7b:92:55:e7:bf:b4:6a:
64:9d:ee:4f:94:60:92:85:f8:3d:60:ce:07:49:b3:
07:53:30:16:c8:d6:ca:e9:3c:33:73:2a:b2:f3:90:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:67:18:30:1D:5A:3C:83:27:ED:D5:E6:D2:9D:8D:B4:C2:D9:F7:F6
X509v3 Authority Key Identifier:
keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/3051CA240FBB11F0B9C1D274C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.227.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5f:1b:ba:43:ea:6d:fe:a0:61:b9:63:4a:06:a2:92:a6:22:
19:8e:cd:f9:d6:94:34:c1:fa:f7:bb:6b:32:95:53:48:4c:f6:
e4:3c:81:2a:df:35:36:a4:87:e4:1f:25:d9:73:23:46:20:de:
53:58:f3:d1:58:a5:d6:74:1d:42:48:4a:5d:66:40:e6:1d:e6:
67:4d:f1:91:82:a0:89:7b:42:c6:fc:1c:36:35:40:bd:b2:a0:
c3:79:79:0a:7f:50:6b:3c:16:67:ea:9c:c8:53:e6:d6:b2:48:
18:42:3e:ac:f7:bf:fc:1b:03:41:83:67:a5:8e:4e:ec:61:67:
16:ed:90:12:ed:20:e6:59:bc:83:0f:d5:84:1d:95:94:ed:6b:
de:09:4e:2f:db:36:a3:d1:ee:ad:07:c1:23:93:50:e7:cd:f5:
1d:00:16:36:b3:b2:67:90:27:47:a8:bd:75:21:03:35:31:60:
85:dd:ba:df:b3:60:55:3c:b5:33:37:3d:13:75:50:d0:d3:e7:
aa:29:6f:82:e0:c7:90:28:82:ef:71:ed:79:af:2d:e8:34:7b:
f1:58:bb:10:1a:b4:21:86:37:fe:fe:6d:73:c2:07:65:22:8b:
54:c6:f8:ea:94:ea:a6:45:d2:a2:36:51:0f:b9:6e:2d:a2:34:
b1:b1:94:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:59:45 2026 by rpki-client