
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/18317928083911F0A2909A72C4F9AE02.roa
File: 18317928083911F0A2909A72C4F9AE02.roa (raw, json)
Hash identifier: mmIU8UeudAKZrTx8s6Nxy2r+SAdWHS9FcLl5he11RrQ=
Subject key identifier: CE:AC:37:53:A8:03:98:94:A3:B4:E3:66:E5:C4:02:ED:54:F7:0C:11
Certificate issuer: /CN=A91EDBB0/serialNumber=FED84E9FE0159A9937A2193A0B7DBA23B6C265B8
Certificate serial: B2
Authority key identifier: FE:D8:4E:9F:E0:15:9A:99:37:A2:19:3A:0B:7D:BA:23:B6:C2:65:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/18317928083911F0A2909A72C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:06:17 +0000
ROA not before: Sun 23 Mar 2025 22:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153691
IP address blocks: 163.223.90.0/23 maxlen: 23
2401:f520::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.crl
rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDBB0, serialNumber=FED84E9FE0159A9937A2193A0B7DBA23B6C265B8
Validity
Not Before: Mar 23 22:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3f378-0e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:f7:8a:47:f5:73:22:f8:9e:24:67:2d:8e:
f2:84:01:0c:0f:9a:c2:f5:39:11:c0:cc:25:6b:72:
e9:1f:aa:f2:c4:bf:2d:13:aa:f8:d4:ec:31:0c:fd:
ed:d8:c6:a7:9f:ac:25:b9:f5:d9:ee:f4:79:a9:cd:
8b:dd:a6:b1:0a:27:e1:c2:ff:7b:dc:94:97:d5:49:
9e:49:7f:dd:f3:4b:88:e8:3d:d7:d1:b7:46:4a:28:
68:d3:b0:c5:ea:fb:0d:7f:a5:e2:8f:3b:19:5c:1e:
fd:74:b8:a9:0c:fd:66:e1:0f:58:d4:71:94:67:cc:
eb:0e:45:42:6c:04:65:be:01:fe:75:d1:ae:ef:37:
26:dc:a3:be:bc:93:b2:13:cb:68:f7:b1:a0:45:89:
68:ba:b5:78:72:95:65:a7:de:8a:36:7d:0d:6a:7f:
8d:e6:51:51:d5:a0:1a:39:a2:db:73:e7:53:d0:a5:
9b:93:3c:12:47:34:ea:02:94:79:ab:06:98:7a:fa:
cf:92:48:34:67:0e:94:b3:63:c7:21:01:11:ec:ba:
2d:5a:53:f4:67:ef:38:f7:a3:11:f3:3d:3d:b3:d1:
e4:91:b2:e4:d7:09:78:9b:ad:2c:9b:de:77:38:12:
0d:d5:cf:94:f5:3f:2b:95:6f:ae:90:5e:28:0a:ca:
fe:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AC:37:53:A8:03:98:94:A3:B4:E3:66:E5:C4:02:ED:54:F7:0C:11
X509v3 Authority Key Identifier:
keyid:FE:D8:4E:9F:E0:15:9A:99:37:A2:19:3A:0B:7D:BA:23:B6:C2:65:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/18317928083911F0A2909A72C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.90.0/23
IPv6:
2401:f520::/32
Signature Algorithm: sha256WithRSAEncryption
5f:e6:b0:07:41:42:33:06:15:6c:27:71:f2:2d:2a:89:fd:df:
69:f8:7e:24:20:27:a9:f9:ad:8d:12:6e:9b:94:eb:db:dd:e8:
23:b0:ea:ba:8f:b1:51:a2:70:8e:6f:f3:a7:5a:e5:f2:35:60:
7f:3e:99:b8:9b:83:1c:90:21:c4:c0:ba:e2:dd:13:e1:da:9e:
d5:e5:29:aa:9a:b1:8d:67:a9:6b:28:99:23:d2:7b:ad:01:16:
4a:36:b5:eb:fd:cb:4b:2c:f1:33:45:9d:ca:57:69:ee:5c:1f:
09:42:f4:b2:ef:24:7e:66:2e:c8:db:72:09:3a:5a:08:59:ab:
08:ba:40:90:38:2a:e1:fc:20:ab:e8:d5:91:10:ee:55:5c:f1:
ab:6c:20:1a:a8:5c:2c:f7:fd:7a:ba:e5:53:e7:c5:74:62:e7:
4d:d8:79:12:ba:66:1e:6b:a2:f4:3a:83:0f:6c:bb:5b:af:79:
94:14:b4:7d:17:7f:ac:d6:32:65:e5:51:a4:b9:1a:9d:a6:fa:
0e:ed:03:00:f1:73:12:cc:a8:cb:89:8a:79:09:26:f6:56:ef:
8a:3f:4b:fb:87:7d:e6:2a:22:bc:2d:8c:be:bc:3f:23:f1:f3:
4c:87:33:d6:83:73:ae:3c:e6:05:7d:33:58:40:45:02:3a:78:
52:6b:c0:9f
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURCQjAxMTAvBgNVBAUTKEZFRDg0RTlGRTAxNTlBOTkzN0EyMTkzQTBCN0RCQTIz
QjZDMjY1QjgwHhcNMjUwMzIzMjI0OTM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZjM3OC0wZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArf73ikf1cyL4niRnLY7yhAEMD5rC9TkRwMwla3LpH6ryxL8tE6r41OwxDP3t
2Mann6wlufXZ7vR5qc2L3aaxCifhwv973JSX1UmeSX/d80uI6D3X0bdGSiho07DF
6vsNf6XijzsZXB79dLipDP1m4Q9Y1HGUZ8zrDkVCbARlvgH+ddGu7zcm3KO+vJOy
E8to97GgRYlourV4cpVlp96KNn0Nan+N5lFR1aAaOaLbc+dT0KWbkzwSRzTqApR5
qwaYevrPkkg0Zw6Us2PHIQER7LotWlP0Z+8496MR8z09s9HkkbLk1wl4m60sm953
OBIN1c+U9T8rlW+ukF4oCsr+GQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFM6sN1Oo
A5iUo7TjZuXEAu1U9wwRMB8GA1UdIwQYMBaAFP7YTp/gFZqZN6IZOgt9uiO2wmW4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREJCMC9FNjUzRTUxMjA3
RUQxMUYwQjBBNjg3NjRDNEY5QUUwMi9fdGhPbi1BVm1wazNvaGs2QzMyNkk3YkNa
YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL190aE9uLUFWbXBrM29oazZDMzI2STdiQ1piZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RURCQjAvRTY1M0U1MTIwN0VEMTFGMEIwQTY4NzY0QzRGOUFFMDIvMTgzMTc5Mjgw
ODM5MTFGMEEyOTA5QTcyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBo99aMA0EAgACMAcDBQAkAfUgMA0GCSqGSIb3DQEBCwUAA4IBAQBf
5rAHQUIzBhVsJ3HyLSqJ/d9p+H4kICep+a2NEm6blOvb3egjsOq6j7FRonCOb/On
WuXyNWB/Ppm4m4MckCHEwLri3RPh2p7V5SmqmrGNZ6lrKJkj0nutARZKNrXr/ctL
LPEzRZ3KV2nuXB8JQvSy7yR+Zi7I23IJOloIWasIukCQOCrh/CCr6NWREO5VXPGr
bCAaqFws9/16uuVT58V0YudN2HkSumYea6L0OoMPbLtbr3mUFLR9F3+s1jJl5VGk
uRqdpvoO7QMA8XMSzKjLiYp5CSb2Vu+KP0v7h33mKiK8LYy+vD8j8fNMhzPWg3Ou
POYFfTNYQEUCOnhSa8Cf
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:19 2026 by rpki-client