
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/9BCD7C8E2FD311F0A93F2250C4F9AE02.roa
File: 9BCD7C8E2FD311F0A93F2250C4F9AE02.roa (raw, json)
Hash identifier: AqLmjH9rQIfWc4pDj/9l1XeaE5IDbCOjNUtl76LoxHc=
Subject key identifier: E0:99:BE:F1:E2:82:94:9B:11:FE:E8:1A:C5:43:11:8F:9C:0D:17:93
Certificate issuer: /CN=A91D8DD9/serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9
Certificate serial: 95
Authority key identifier: 7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/9BCD7C8E2FD311F0A93F2250C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:05:14 +0000
ROA not before: Tue 13 May 2025 08:23:55 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 142276
IP address blocks: 163.227.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl
rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8DD9, serialNumber=7FFC805650742CEA50986D11ABCB73E0F55058F9
Validity
Not Before: May 13 08:23:55 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3e52a-9159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:4a:4d:e9:d6:14:43:d6:ab:bc:b0:fa:34:
12:36:a1:47:ea:f6:20:c3:4f:16:45:bf:9a:92:ef:
b0:7b:f0:6a:0f:79:10:d2:37:04:4f:91:47:b0:68:
71:dc:06:36:f3:34:d4:7c:3c:4e:f1:d3:51:06:cc:
d7:5c:02:2f:39:f9:78:2d:ff:b7:a4:1d:45:7e:d8:
11:e0:15:ec:9e:84:94:c3:df:a4:0c:9f:c2:b1:b1:
32:31:86:7d:6f:1e:6e:b9:1a:72:d6:d4:97:5e:28:
1f:b3:dc:38:e5:09:09:eb:d4:51:17:a9:28:f5:bc:
94:a7:f6:16:3b:16:7c:da:29:a3:05:94:02:16:81:
d8:46:c0:65:87:3d:90:70:c0:34:cd:e6:54:9b:ac:
fc:cd:49:3f:b9:2d:43:65:36:c9:9d:94:60:9d:e1:
13:1e:e4:83:c0:1a:f6:21:81:c1:48:f4:68:e0:17:
57:66:0d:35:da:24:3c:d7:2e:29:64:e3:cc:b1:3e:
57:3f:62:8c:21:1b:1f:67:4a:a0:fb:b5:48:9e:49:
2b:4f:23:98:57:4a:e4:5e:4f:a1:73:87:74:d7:22:
87:8e:97:7d:61:26:8f:80:3a:14:aa:60:56:3c:39:
90:40:6b:4e:74:d0:19:77:49:09:2f:ed:c0:f3:cf:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:99:BE:F1:E2:82:94:9B:11:FE:E8:1A:C5:43:11:8F:9C:0D:17:93
X509v3 Authority Key Identifier:
keyid:7F:FC:80:56:50:74:2C:EA:50:98:6D:11:AB:CB:73:E0:F5:50:58:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_yAVlB0LOpQmG0Rq8tz4PVQWPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8DD9/A387CF8E2FD211F0A9AC5E2FC4F9AE02/9BCD7C8E2FD311F0A93F2250C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.208.0/24
Signature Algorithm: sha256WithRSAEncryption
54:4f:27:f0:99:8c:43:85:0e:0e:4e:42:8b:54:a5:77:8d:95:
0d:88:01:73:38:18:69:09:df:81:fe:23:45:13:28:6d:a5:24:
d3:66:a7:56:48:2c:77:41:53:ff:a9:81:20:40:14:e5:dc:65:
96:bb:7e:4d:64:0e:95:a6:cd:2a:1c:a6:f0:2c:5d:97:dd:b1:
a4:3a:e1:a1:aa:b1:34:35:13:7d:8b:a2:a2:04:d2:0f:0b:82:
ae:4b:0d:7d:c5:a2:5b:b9:7b:15:08:68:52:39:ad:20:07:97:
a4:a3:e7:13:e9:50:9e:99:62:4a:e1:89:b0:2d:06:63:1f:cd:
18:23:1c:78:46:c5:29:99:75:c3:c5:ca:e1:6a:b6:92:d0:79:
3f:4f:07:e9:10:6e:9b:3f:12:64:d7:ff:be:10:52:ee:d6:dc:
7a:df:78:3e:95:e0:c3:22:72:13:92:5b:96:d1:18:20:5a:f0:
31:5a:3f:41:87:99:1c:3e:bf:bb:d9:ca:b1:5d:d7:a1:a8:90:
bd:3d:87:8e:47:f9:6b:f0:57:d1:fd:fa:f4:7d:af:f6:81:e4:
45:92:2e:c0:25:c5:05:47:78:c0:86:38:b0:5a:7a:fb:b3:28:
d0:ba:05:e2:f1:0d:86:28:84:03:cc:3c:d3:77:64:c5:f1:3f:
72:bc:1b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:21 2026 by rpki-client