
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/4210D4508CD711F0A2DFAA45C4F9AE02.roa
File: 4210D4508CD711F0A2DFAA45C4F9AE02.roa (raw, json)
Hash identifier: 3NSD584QPTE2VoYUm/1Xe+49n3Loa2OiOqOtqQcrZ6c=
Subject key identifier: B6:D7:07:9A:15:9F:91:F1:BC:62:F5:6A:50:BF:F3:29:39:9F:95:60
Certificate issuer: /CN=A91A7F6A/serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0
Certificate serial: C2
Authority key identifier: 95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/4210D4508CD711F0A2DFAA45C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:06:31 +0000
ROA not before: Mon 08 Sep 2025 17:14:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153737
IP address blocks: 163.223.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl
rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7F6A, serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0
Validity
Not Before: Sep 8 17:14:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3f387-6d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:58:e0:33:55:d2:40:2c:86:f9:3e:7a:28:
96:de:18:22:7b:05:da:78:83:8c:d9:95:33:70:af:
9a:98:fe:5e:13:7d:7b:fc:63:a0:f2:97:ff:69:4b:
a2:ec:b0:2d:c1:dc:fd:5f:0e:bf:82:0e:1e:14:e7:
8e:0f:ad:10:14:55:9d:58:4a:89:a3:df:48:a6:fb:
29:66:ca:ca:2d:32:88:47:19:80:2a:78:04:42:a8:
4a:52:34:7f:7c:ea:c7:07:6f:38:6c:37:37:c7:9a:
b5:6b:86:cf:d8:31:1d:c3:e9:47:8d:b9:ef:1c:24:
b9:aa:2b:5e:8b:23:21:e3:d7:e8:ee:a8:b6:6f:6e:
dd:87:2c:5e:5d:0e:3d:c9:ba:1b:03:19:ba:2b:b9:
4c:79:de:bd:c8:75:7b:67:76:b4:2e:9d:41:79:34:
34:e2:b5:45:47:4b:c2:9d:9e:20:38:4a:40:a5:7c:
54:49:8e:fd:d6:cd:aa:79:f4:c3:b2:58:78:26:90:
93:07:d1:d0:cc:87:3d:3f:6e:85:f6:2e:4d:44:fd:
ef:51:61:d7:58:8a:f5:3b:9c:c6:a9:7a:b5:65:3d:
83:30:b9:7a:02:d4:48:3c:41:d1:c0:7d:f8:c9:1d:
dd:8f:a6:76:35:b2:20:d3:57:42:64:15:6a:df:59:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D7:07:9A:15:9F:91:F1:BC:62:F5:6A:50:BF:F3:29:39:9F:95:60
X509v3 Authority Key Identifier:
keyid:95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/4210D4508CD711F0A2DFAA45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.204.0/24
Signature Algorithm: sha256WithRSAEncryption
65:27:00:d1:cf:db:6d:31:89:bc:1d:8e:50:33:c2:d0:e4:a0:
d8:8b:ad:a7:2d:8e:69:af:fb:65:16:92:2a:4f:ff:69:0f:fb:
0c:00:8c:4f:7d:07:62:1a:62:ae:16:42:e0:21:59:8c:61:1a:
d0:c8:be:8a:a7:5c:7c:0d:5b:6c:e6:1e:f6:4b:5a:7d:77:bc:
e4:a8:90:7e:6f:b0:38:dd:11:f5:8e:29:7f:71:b0:e2:0d:65:
45:56:2a:7b:a7:80:27:9d:20:44:74:fa:7d:0e:2c:08:0e:f9:
7e:22:c3:3e:1f:39:85:67:08:f2:db:59:17:d7:b5:c1:b1:c5:
2d:10:b8:d1:99:b6:3b:98:72:5b:e2:b9:85:ef:6d:ce:82:a0:
9a:07:1a:9f:6a:df:77:a0:7e:14:1b:a2:11:30:28:9b:d5:ef:
30:8b:ad:a5:34:f8:04:ba:d6:e1:c7:c5:f9:64:9b:b4:21:aa:
c5:f5:a1:f3:58:56:50:84:e9:33:5a:67:88:6b:56:87:b9:59:
69:bf:05:a1:12:1d:e8:69:06:ca:67:e4:ee:95:be:e1:dc:97:
3a:69:11:2f:20:a3:64:99:f4:9d:e9:90:dc:74:12:62:05:59:
3c:64:76:fc:fb:f9:0c:86:73:99:0c:55:f8:ec:49:77:de:d8:
1a:70:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:19 2026 by rpki-client