
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/874D690486F911F0AEE9D81BC4F9AE02.roa
File: 874D690486F911F0AEE9D81BC4F9AE02.roa (raw, json)
Hash identifier: DdoM2x5jbfPJk1eiebVGHbTNeWujBUjX+WOpcvXZOBc=
Subject key identifier: 79:42:6B:6F:DB:D5:0B:C5:DD:C2:20:87:F0:AA:93:66:18:CA:08:79
Certificate issuer: /CN=A9119B9D/serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
Certificate serial: C5
Authority key identifier: 22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/874D690486F911F0AEE9D81BC4F9AE02.roa
Signing time: Wed 29 Apr 2026 08:41:46 +0000
ROA not before: Wed 29 Apr 2026 08:41:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17660
IP address blocks: 163.227.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl
rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:59:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119B9D, serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
Validity
Not Before: Apr 29 08:41:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f1c449-a8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:ab:f6:03:54:ff:55:75:01:13:fe:38:0a:
5b:80:a7:37:36:c3:b3:f2:8d:48:eb:14:da:02:06:
ea:bd:31:db:1c:78:ad:5f:a5:2d:10:2c:20:bf:50:
7b:bf:33:e4:4f:8c:05:ec:75:4a:71:15:e8:99:ed:
9c:82:b5:af:4c:e7:48:c1:f2:eb:e5:1e:de:d4:cc:
c5:34:b1:6c:ae:c4:bd:65:46:fa:9d:ad:93:46:28:
59:d3:3d:39:de:56:3b:dd:f0:27:2a:ff:8e:cf:1a:
94:5f:f9:f4:54:89:a4:eb:a7:5b:fa:43:86:08:ea:
12:2b:6f:96:ec:4e:75:51:29:b5:a6:20:78:c6:b2:
0d:97:94:fb:28:9b:43:8e:d6:d8:04:d3:0f:24:28:
9b:70:26:56:14:3e:4b:59:5e:c1:21:9e:e0:e0:55:
21:77:23:28:00:11:22:ae:14:77:db:33:be:8e:e3:
7d:bd:47:11:93:4b:25:7b:c7:00:cd:70:00:f2:f6:
b8:ba:28:5b:a5:1a:d9:8d:b0:df:ba:6b:8e:80:48:
c5:26:5e:f8:fc:c0:7d:4c:d4:7c:49:22:ef:88:75:
30:73:42:c3:5b:69:98:54:2e:b6:c6:31:33:9c:e3:
ac:f9:57:0c:19:5a:87:7e:91:25:90:d0:d7:40:be:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:6B:6F:DB:D5:0B:C5:DD:C2:20:87:F0:AA:93:66:18:CA:08:79
X509v3 Authority Key Identifier:
keyid:22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/874D690486F911F0AEE9D81BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.12.0/23
Signature Algorithm: sha256WithRSAEncryption
90:c7:dd:67:b9:37:55:1c:ce:c4:c6:96:d0:88:3c:0d:47:2c:
75:35:75:cd:eb:fc:6d:29:a8:df:e5:42:2c:57:4c:e5:ed:7e:
db:ac:12:34:ab:57:d9:60:66:f5:be:c4:f6:5c:33:c2:7f:39:
37:a5:dc:c8:77:a2:3e:0e:e1:98:48:dc:fe:07:f7:c9:a2:40:
55:b0:53:d4:e1:02:13:4d:e0:7b:e4:5d:c2:d4:89:cd:b0:2d:
4a:3b:66:46:28:5f:c3:16:18:e8:9e:cf:9d:44:db:d3:f9:17:
26:50:a1:68:59:96:38:a0:72:eb:3c:39:0b:ba:c8:7f:30:24:
ac:c6:87:b8:8e:aa:de:cb:f8:41:6f:98:5c:8e:c7:7a:85:8f:
00:e8:87:b8:3a:52:f9:9c:ef:9d:93:2e:4e:a9:da:73:2d:6e:
f8:50:f5:39:06:99:00:06:3f:59:1b:44:96:24:a6:59:14:31:
44:99:73:c2:e6:55:f0:00:e0:33:2f:0f:6f:88:d3:8a:76:de:
cf:f2:3a:2a:06:84:a9:ac:88:02:4c:d5:96:e9:ee:bd:85:1d:
49:7e:57:19:5f:ef:58:29:1b:fb:48:d4:a9:6e:a7:8a:64:d4:
df:f5:65:77:fd:c4:92:5a:00:d2:34:cc:3f:b1:50:af:7f:f5:
ab:f6:66:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:46 2026 by rpki-client