
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/B754B304107A11F19C5931212E3D8C67.roa
File: B754B304107A11F19C5931212E3D8C67.roa (raw, json)
Hash identifier: huCm1mBmBIglhSBRl6UnmkwQvjS11VKDaF0YxEP0qiI=
Subject key identifier: 86:DD:F2:FF:4E:4B:2F:41:CF:DE:F2:B6:1B:61:7F:B7:1A:4A:ED:42
Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Certificate serial: D9
Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/B754B304107A11F19C5931212E3D8C67.roa
Signing time: Mon 13 Apr 2026 06:40:59 +0000
ROA not before: Mon 13 Apr 2026 06:40:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400618
IP address blocks: 163.223.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Validity
Not Before: Apr 13 06:40:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69dc8ffb-bcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:12:8d:cb:94:7f:73:7a:c6:8a:5d:d2:75:
2d:4f:29:de:c7:8b:50:70:c9:25:92:4a:7d:49:1e:
f7:07:b4:d9:6a:a9:5e:ba:72:b2:8e:71:6b:25:9b:
c1:b3:57:94:20:72:ad:a0:81:a7:c0:56:66:05:71:
25:52:9b:4e:da:b8:50:ad:9f:73:71:e4:80:71:b9:
24:21:09:fa:fa:1e:ac:cf:6b:71:65:3c:27:eb:2e:
bc:e7:b3:f4:86:ac:7e:4d:69:53:0b:1e:6c:a2:4e:
a8:54:02:ea:0f:b2:8f:f4:04:7a:ad:ea:c0:8e:4a:
de:a8:21:87:0a:b9:a8:a8:d7:a9:a8:d4:bf:8f:96:
d8:6c:1e:4b:d1:37:43:54:2a:c6:a2:92:5a:7e:30:
0a:76:4f:bb:95:0b:9f:cc:97:3d:10:41:03:83:0d:
c7:c8:46:51:35:dd:e3:f6:56:22:88:b1:95:13:f2:
9f:98:15:8a:92:84:cb:66:39:43:dc:c5:e6:d5:8d:
9e:24:cf:c7:8b:d1:98:25:72:17:17:36:71:27:04:
1e:be:38:83:c0:b5:b4:9d:6f:7d:67:af:bf:22:91:
f2:84:25:1c:04:5b:9a:44:54:fc:6a:f5:37:3d:45:
3f:b5:c1:38:96:63:5b:6a:0f:34:82:65:90:99:bf:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DD:F2:FF:4E:4B:2F:41:CF:DE:F2:B6:1B:61:7F:B7:1A:4A:ED:42
X509v3 Authority Key Identifier:
keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/B754B304107A11F19C5931212E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.216.0/23
Signature Algorithm: sha256WithRSAEncryption
48:62:5e:af:6e:2c:cb:a7:3e:f2:16:27:01:2c:bb:c5:0f:4e:
5c:9b:43:fe:25:9b:66:c5:24:86:35:3a:16:ac:3e:b7:14:c0:
04:8e:6c:77:10:36:b7:fb:1b:e2:f0:f9:f1:19:22:06:8b:8d:
de:fe:10:14:1f:f4:1c:14:74:df:62:9f:c6:6a:bc:99:26:1c:
98:c1:94:4b:1c:a1:58:ee:e4:ff:fb:bd:e3:a7:65:43:dc:03:
f1:07:85:66:cc:d5:08:e8:17:4a:ba:dc:bd:05:f3:ac:41:9f:
f9:ee:85:c5:23:df:5f:49:68:d6:a7:25:fa:5d:70:a4:6f:70:
cd:30:f3:7c:48:ed:a1:70:b0:71:11:d6:bb:70:97:48:8a:76:
a4:ad:d5:c5:7e:71:4b:44:ed:b4:53:3e:e8:e2:a9:0b:52:85:
8c:ad:11:6e:56:0e:4f:59:0e:63:a3:98:7a:67:3b:02:50:5d:
47:d6:2a:8a:71:98:18:4b:53:42:1f:a7:21:d8:a1:06:fc:2a:
b9:45:ce:77:da:52:5f:0c:85:1a:c2:97:80:f6:b2:89:39:fa:
0b:69:20:d3:6e:47:39:36:0d:bc:9e:1c:8b:61:33:c8:5c:33:
0d:e7:c3:48:53:f2:dd:2a:fe:6d:2a:cc:3c:52:01:03:72:8a:
38:d9:c9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:30:07 2026 by rpki-client