
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/DA700744185511F09304D972C4F9AE02.roa
File: DA700744185511F09304D972C4F9AE02.roa (raw, json)
Hash identifier: xEV8fhHLEIKGrI5YTOsWxn19pEc9YJdRhWQdUmLp4HI=
Subject key identifier: 3E:E6:73:A2:D8:86:BB:1D:67:7F:3E:16:D6:E8:11:10:8A:5B:26:2E
Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Certificate serial: D8
Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/DA700744185511F09304D972C4F9AE02.roa
Signing time: Mon 13 Apr 2026 06:40:57 +0000
ROA not before: Mon 13 Apr 2026 06:40:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151964
IP address blocks: 163.223.216.0/24 maxlen: 24
163.223.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Validity
Not Before: Apr 13 06:40:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69dc8ff9-cd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:1b:ce:6b:08:00:42:9a:38:bc:b0:af:83:
d7:e0:58:c5:c2:4b:68:49:40:b5:f9:35:ff:cc:9f:
4f:8a:29:d6:0f:db:65:e9:89:37:2a:98:0f:8f:81:
5e:06:1e:f9:50:a4:b8:72:da:b1:65:b9:4c:e7:88:
b7:23:a1:20:9c:af:2b:fa:75:86:ed:9c:62:28:7c:
f0:5b:fc:c9:cb:96:23:77:a6:0d:9d:3d:12:14:f3:
95:c8:64:4c:f2:75:52:ee:6e:e1:46:05:f5:98:98:
37:e9:6d:e9:d1:db:9a:50:04:6b:43:4c:0e:d4:ba:
ea:ed:a6:4a:13:ce:60:74:35:83:4d:7e:76:ac:10:
73:7e:7f:fe:2a:04:d5:fe:a6:38:d3:4e:be:36:b8:
7e:c8:95:a3:75:24:f6:bb:30:3f:84:5b:71:f4:11:
5c:ab:47:d9:dc:ff:24:7a:ad:68:18:ed:f3:68:2c:
fb:c8:5b:ba:4a:a6:24:bf:13:80:75:1e:e4:59:d8:
8e:99:fe:26:6b:78:87:0b:6d:a9:01:8f:38:4f:78:
d2:47:31:78:ff:22:03:c4:4c:f1:d2:d2:e0:0d:2a:
dc:d5:ff:4e:db:c4:21:c8:4e:e9:aa:c3:7e:40:68:
71:41:51:fb:e8:ec:fe:b5:d5:12:94:45:9c:07:e4:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E6:73:A2:D8:86:BB:1D:67:7F:3E:16:D6:E8:11:10:8A:5B:26:2E
X509v3 Authority Key Identifier:
keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/DA700744185511F09304D972C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.216.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:66:a9:57:88:f0:96:26:89:a5:0e:92:01:4d:8b:6e:2a:29:
2b:7a:30:f9:81:75:1d:6e:5a:64:54:bd:00:53:3b:7f:a7:eb:
b3:ad:5f:27:80:da:5d:a4:eb:8e:f3:88:c7:c8:d2:f1:59:ed:
91:79:5a:99:27:30:e3:0e:5b:2a:d8:a0:e6:8f:c3:a3:cb:b3:
05:25:f4:cf:dc:f8:98:ec:53:7e:74:8a:b3:04:a6:34:63:0d:
e1:51:0d:a5:82:db:db:d4:30:8c:e6:37:5c:2a:a0:e2:73:51:
63:61:8a:bf:2f:62:ef:5d:04:9f:77:e6:91:fc:bf:7d:76:87:
d1:8a:ca:d2:aa:1c:f8:14:48:ea:f0:a0:78:b6:c6:30:3a:c7:
94:09:47:61:3a:ea:4f:af:12:cd:78:6c:0b:cf:f3:8e:96:6f:
e2:04:27:94:16:ed:e1:6f:60:ec:fe:0d:d2:e9:93:25:34:ac:
26:95:78:64:0a:da:69:b9:78:d5:f4:84:16:ec:f5:a8:ca:2e:
00:57:c2:12:0b:2e:4d:e8:6b:5d:4f:ed:15:63:b4:23:ee:ab:
d9:62:c2:17:8c:43:7f:53:21:2d:e0:e2:75:13:47:c2:fb:4c:
96:88:d9:93:11:c2:b6:a7:67:d1:96:3b:c4:d8:0c:83:f5:cc:
1c:82:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:54:27 2026 by rpki-client