
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/C163B1881A4711EDA547FE24C4F9AE02.roa
File: C163B1881A4711EDA547FE24C4F9AE02.roa (raw, json)
Hash identifier: hQYRG8ncZ6CHxCWYK1hLhmfKl621jQSkzGCZnvGLqeQ=
Subject key identifier: 02:39:09:EA:E9:B3:7A:12:E7:DA:97:FC:A5:79:D9:65:A6:11:F2:03
Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Certificate serial: 155D
Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/C163B1881A4711EDA547FE24C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:12:55 +0000
ROA not before: Fri 28 Feb 2025 15:52:37 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9988
IP address blocks: 136.228.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5469 (0x155d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Validity
Not Before: Feb 28 15:52:37 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40317-574c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:bf:4d:e1:3c:24:4a:aa:92:50:27:20:32:
bb:78:24:64:7e:bc:fb:d7:b1:90:dd:ba:df:fe:bc:
54:c9:15:d8:b4:01:24:aa:93:3d:b8:0a:9d:95:fe:
36:af:64:04:20:94:00:88:93:10:fb:7e:a0:5f:7c:
dc:62:6c:83:2a:6c:18:de:c7:2a:b2:da:fd:d2:15:
35:9f:1c:c7:c7:18:45:ec:65:cd:96:57:bf:8f:67:
85:77:09:92:36:68:3f:68:1e:ee:c0:e6:9f:55:88:
d4:e9:28:91:7d:bb:24:f3:0b:df:12:51:55:b3:d0:
f4:39:3f:7c:5c:2c:6c:b1:5d:0d:c0:90:e7:ac:56:
d9:5c:f5:4d:81:80:6d:7e:99:58:2e:e1:73:39:7a:
7c:99:4d:d8:e4:ed:9f:fe:a1:d6:46:59:d4:89:bf:
f7:d7:9f:0f:58:69:8f:52:12:a8:0c:30:ae:4b:73:
b8:ba:0f:29:f0:3f:74:64:0c:02:37:39:11:62:eb:
d9:74:ad:e7:b7:8b:d7:0c:8c:cf:ad:24:46:09:bb:
5c:04:13:95:cc:1a:63:f1:e9:10:77:91:75:86:42:
25:8b:ee:a1:7f:66:d6:66:b7:dd:82:e2:2d:c9:e8:
44:a3:88:2e:c8:f8:0d:38:c0:9a:d7:34:83:a0:f7:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:39:09:EA:E9:B3:7A:12:E7:DA:97:FC:A5:79:D9:65:A6:11:F2:03
X509v3 Authority Key Identifier:
keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/C163B1881A4711EDA547FE24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
136.228.160.0/20
Signature Algorithm: sha256WithRSAEncryption
65:d2:13:30:ab:4a:64:3c:2c:8f:5e:de:5d:6f:21:c3:23:f4:
64:e2:aa:ad:23:9c:43:11:e2:05:4e:bb:d0:41:28:3a:fb:31:
d6:96:c5:e4:cd:15:5d:3f:33:59:c4:ed:63:4e:2b:90:f6:b5:
4d:19:85:66:55:cb:fb:5d:04:19:33:51:8b:a3:18:66:96:ce:
90:1d:43:81:61:78:eb:f9:fe:9c:c7:a1:5d:5c:73:75:e9:14:
90:ca:e8:fb:0c:33:67:f8:94:9d:00:84:96:83:60:74:11:8b:
de:d1:b0:1a:f8:28:69:29:20:16:e6:00:9d:ae:78:9b:79:eb:
8d:90:bd:00:5d:97:cd:de:20:01:cc:0b:1b:11:2e:f6:32:14:
b7:fb:ac:3c:a4:fd:2b:2a:6b:5f:b6:f7:fb:c8:e2:8e:28:30:
b5:e2:62:d1:0e:e5:97:9b:e5:28:df:af:35:bd:f4:2d:d3:db:
0c:f2:4b:d4:11:97:6d:3f:d5:19:38:45:11:bb:b9:07:24:01:
f1:1d:81:f9:66:e1:43:e9:e8:ee:98:b7:f0:79:7c:ed:98:83:
81:fc:0a:74:4c:3d:a0:be:96:cd:0f:1b:38:26:a4:39:8a:23:
64:3d:ba:16:89:4b:b8:90:48:72:f4:1e:19:4e:0b:ff:24:21:
72:2d:3c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:07 2026 by rpki-client