
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/2235EF78F12011F0BFBF3F154E6F56BC.roa
File: 2235EF78F12011F0BFBF3F154E6F56BC.roa (raw, json)
Hash identifier: PdAz+4W9gV7DG5blKrt0fnM9lwbclCTxlZE4svm7VgA=
Subject key identifier: F4:F1:28:DA:6B:52:6F:17:6C:84:C3:DC:9E:69:3F:E4:C7:15:EC:69
Certificate issuer: /CN=A9116B0C/serialNumber=D5B16768914A80C93124629610CC40502AAED0E9
Certificate serial: 24
Authority key identifier: D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/2235EF78F12011F0BFBF3F154E6F56BC.roa
Signing time: Tue 03 Mar 2026 08:45:42 +0000
ROA not before: Tue 03 Mar 2026 08:45:42 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 134186
IP address blocks: 163.61.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl
rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116B0C, serialNumber=D5B16768914A80C93124629610CC40502AAED0E9
Validity
Not Before: Mar 3 08:45:42 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a69fb6-5c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6f:27:f3:b2:45:b2:88:fe:81:2c:9f:21:f0:
dd:ec:2b:a9:ce:f5:26:be:07:4e:36:fa:13:e3:4e:
3d:a0:45:7a:bc:21:2b:88:e1:fd:78:85:ec:a0:b0:
8c:48:1a:da:d8:e0:9b:58:5e:20:03:00:d7:52:0c:
d7:06:aa:c1:ba:f7:90:b7:b9:f7:aa:b0:c5:9d:b0:
a2:8e:61:dd:9a:56:38:27:50:46:12:f6:1d:c7:d7:
c3:87:09:02:0e:a8:97:a4:17:8d:aa:15:3f:54:91:
21:ea:65:29:af:97:f4:77:3b:b6:97:03:31:2d:b9:
e3:d5:38:e1:c8:7e:10:f1:4c:ab:90:37:3f:a0:60:
82:99:4e:34:9c:bc:ec:6b:83:43:71:32:ba:30:d1:
a8:22:e6:7d:71:d3:fb:c2:d0:dd:ff:70:24:ba:bb:
ed:21:e5:34:31:b5:a3:f1:3b:2e:d8:c5:e9:58:d2:
f8:7d:54:8e:55:dd:55:49:42:26:b9:da:4a:47:cc:
60:b1:17:9b:59:5b:46:12:70:ae:15:13:1e:cb:ea:
e2:cb:3f:70:1e:de:30:22:8a:4a:ca:da:fe:0e:7e:
3a:08:24:b9:3a:e0:7d:44:17:7f:af:3b:0f:f4:24:
33:fd:bd:ae:80:d3:1f:db:fe:f9:cd:86:6f:f8:6a:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F1:28:DA:6B:52:6F:17:6C:84:C3:DC:9E:69:3F:E4:C7:15:EC:69
X509v3 Authority Key Identifier:
keyid:D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/2235EF78F12011F0BFBF3F154E6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.153.0/24
Signature Algorithm: sha256WithRSAEncryption
46:80:c2:1a:9c:b7:48:5c:8e:fc:9b:c2:32:a2:a5:9e:22:be:
51:8d:b4:bd:86:a2:35:29:47:09:8e:24:3a:2a:68:81:86:02:
36:5f:14:6f:0f:ea:64:7d:6b:2c:ee:a7:41:ca:9c:10:eb:bf:
bb:43:f6:b4:ad:8d:51:90:f7:ef:f2:fa:68:5c:1d:3e:a2:55:
5d:8e:52:cc:65:c7:c2:85:be:78:13:94:1e:ef:bd:13:d7:2e:
d0:a0:e8:df:f1:e3:7e:8c:b5:c6:d2:a2:f6:78:19:c1:1e:7c:
7a:56:f3:28:75:e9:81:dd:9a:05:85:02:13:d2:d4:73:1e:5e:
4a:a6:c9:8b:a0:4a:5b:4a:d6:7a:5d:88:60:d6:fc:b9:1d:ae:
a0:f0:90:f9:bc:d9:0b:47:9c:28:38:61:38:e5:5c:3f:a8:ef:
0a:7b:bc:30:a9:ce:a2:76:12:df:b3:88:69:79:af:5e:ec:76:
79:59:8d:5e:9b:ff:ce:73:2f:16:08:50:10:8b:20:c6:92:1b:
5d:f7:a1:56:d7:ef:a8:36:95:0d:f3:bb:1f:6a:83:49:7f:8f:
de:f4:7d:4b:78:5f:28:21:b3:70:72:fe:8a:23:b4:13:8e:0b:
23:ae:2b:54:41:2e:c6:af:12:0c:24:8e:d1:13:6a:0c:bd:90:
cc:81:b8:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:05 2026 by rpki-client