
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/E658E72CB4A611F08CEAB576C4F9AE02.roa
File: E658E72CB4A611F08CEAB576C4F9AE02.roa (raw, json)
Hash identifier: LB1cMpp6lgRAraUuswM5qd18Dx/7M0dNMmnPvZo4tAw=
Subject key identifier: 9A:BA:92:FE:2A:F9:60:0C:6F:F0:90:0E:36:59:C8:BC:A4:44:B9:4A
Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Certificate serial: DA
Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/E658E72CB4A611F08CEAB576C4F9AE02.roa
Signing time: Mon 13 Apr 2026 06:41:01 +0000
ROA not before: Mon 13 Apr 2026 06:41:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46559
IP address blocks: 163.223.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Validity
Not Before: Apr 13 06:41:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69dc8ffd-4c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:f4:ef:ff:ac:bc:35:79:76:7b:51:a2:6b:
57:7f:17:59:30:c7:af:c2:eb:12:84:04:d6:58:28:
8e:0c:d7:53:9b:b9:0e:cd:b6:0e:93:ee:aa:91:61:
b5:f1:87:19:07:3f:31:f6:84:b6:42:d0:9b:fc:49:
a9:c5:d2:b1:36:1b:21:f3:e8:ad:a4:1b:b2:3b:88:
cf:1a:4a:2d:02:c7:25:e3:8b:fe:fb:4b:af:20:9e:
9a:80:ee:62:4b:16:38:d0:7f:7b:e4:57:ce:0c:e0:
20:c0:4d:25:52:4f:88:ba:1e:19:af:a3:3b:d6:6a:
7d:ff:94:9d:76:2c:bb:f2:b3:dd:46:bc:83:27:73:
12:ef:75:9a:ae:bf:4d:e9:a9:6f:95:04:cc:64:6a:
38:55:0c:c8:03:b1:13:51:b0:a4:7d:11:9b:6b:19:
fe:fa:6b:a2:0e:63:df:28:30:49:64:7d:59:ad:68:
26:64:4e:25:27:57:59:8e:79:96:44:df:9a:b1:bc:
6e:c7:40:e1:7f:76:b1:4c:bf:88:cc:55:3a:f5:a5:
62:5a:1a:d0:cf:77:6e:b6:22:db:d2:c9:78:49:61:
d7:62:3e:21:ad:e2:1a:28:ab:c5:30:03:66:1b:7a:
3e:d6:7f:b6:3c:6d:6a:43:57:9f:2b:5c:30:e7:26:
96:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BA:92:FE:2A:F9:60:0C:6F:F0:90:0E:36:59:C8:BC:A4:44:B9:4A
X509v3 Authority Key Identifier:
keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/E658E72CB4A611F08CEAB576C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.216.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:2d:74:6a:03:93:e2:19:c6:be:af:e6:49:94:dc:22:5e:ec:
2c:b8:45:0c:1d:21:33:5e:91:b0:b4:bb:29:46:38:3b:98:14:
3e:ba:84:5e:3e:e4:b3:73:08:f0:d1:db:c3:21:77:b7:91:ee:
89:ab:c4:99:d9:0b:93:ce:b8:e8:d7:3e:95:9a:9d:09:76:f7:
d5:45:0a:d6:a1:ab:f3:b9:74:fd:26:69:2f:ce:1a:c2:d1:0c:
8f:cf:29:fa:5a:ee:5f:90:7a:da:ff:2c:16:9a:c4:a6:ea:30:
1c:96:3d:07:94:c3:ce:9b:bb:76:bd:45:7b:88:63:d4:ad:55:
7f:1b:4b:77:60:07:66:ca:de:91:12:9b:69:7a:e6:ac:90:15:
f4:80:e2:83:91:49:7f:43:ef:fc:13:ac:eb:01:14:22:96:3d:
07:39:72:2b:55:45:41:2e:93:29:96:85:69:0d:db:77:2a:ac:
7f:17:ce:38:98:43:1f:fe:d7:06:e6:29:3d:14:74:de:3c:38:
53:dd:c4:2b:84:e9:47:3c:a1:21:a5:f8:f9:3f:17:ee:2e:56:
dd:6a:44:33:cf:98:85:ec:03:b9:b3:5c:6e:a9:b8:7c:e5:63:
aa:b6:75:c2:aa:bd:b5:d8:08:34:1d:2a:a6:ce:21:d1:fa:ad:
00:99:a4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:54:15 2026 by rpki-client