
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/D7E9A8C49DAA11F0A24E4963C4F9AE02.roa
File: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (raw, json)
Hash identifier: axY0t/wfGcS0SqKBr/2f2eZYye9v2/DiDSRsHzKpfyQ=
Subject key identifier: C2:19:A1:B9:E7:29:B8:EA:7B:55:26:5A:09:FD:4B:7A:90:78:2A:59
Certificate issuer: /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE
Certificate serial: 96
Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/D7E9A8C49DAA11F0A24E4963C4F9AE02.roa
Signing time: Thu 09 Jul 2026 09:36:02 +0000
ROA not before: Thu 09 Jul 2026 09:36:02 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 153850
IP address blocks: 163.227.218.0/24 maxlen: 24
2001:df5:7bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE
Validity
Not Before: Jul 9 09:36:02 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4f6b82-4361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:02:93:81:8e:c3:12:d4:af:39:85:d9:52:cd:
c5:7e:73:c6:f5:40:ac:0b:63:43:82:7d:75:3e:1a:
5f:ce:fa:57:78:b3:0c:b0:09:ad:06:42:c9:53:2d:
56:f7:75:1a:77:d0:8b:cd:d9:f8:87:5f:e3:59:ca:
7b:62:66:fd:10:13:15:6c:ac:e3:48:3a:c5:03:8d:
ec:ab:a4:2e:50:72:db:65:a2:51:36:47:6a:4b:4f:
3f:f4:ef:ec:59:55:6e:4b:90:fd:58:4f:b1:fb:eb:
dc:e7:81:12:4b:a1:b1:be:09:e9:42:7a:06:15:3e:
6c:87:39:98:79:40:3d:1c:34:19:e8:fe:f2:48:48:
7a:53:bb:c9:78:33:2e:5a:b5:18:3b:ca:c5:e2:91:
d5:af:eb:a6:2e:70:f2:49:d0:35:c3:d8:fb:df:ae:
be:a2:28:42:31:d9:84:65:90:ae:9f:f4:44:bd:d4:
01:ba:b9:6d:28:63:fa:17:cf:94:10:ae:7a:47:e5:
d9:ee:ca:e5:27:c7:92:b3:8a:a4:67:5f:f8:3b:bf:
35:9c:7e:5b:50:c4:11:1f:1a:d9:36:67:74:b8:e6:
99:0d:96:ca:4d:4b:71:2e:fb:53:b7:a2:41:4c:37:
a3:48:21:11:8a:c6:4f:13:94:e2:ed:f2:e9:69:a1:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:19:A1:B9:E7:29:B8:EA:7B:55:26:5A:09:FD:4B:7A:90:78:2A:59
X509v3 Authority Key Identifier:
keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/D7E9A8C49DAA11F0A24E4963C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.218.0/24
IPv6:
2001:df5:7bc0::/48
Signature Algorithm: sha256WithRSAEncryption
22:8e:b9:13:23:6e:66:7c:0c:d7:c9:26:f7:e5:c4:46:8d:fa:
a5:3f:5b:18:97:87:ed:fd:38:71:29:52:f4:a2:5f:74:44:a7:
2c:98:16:f8:88:4e:9a:76:fe:cc:ee:72:6c:5d:92:2b:4b:b6:
6d:fd:de:70:25:58:38:cc:c7:e0:f5:8b:8f:f8:d7:73:83:a2:
0c:b2:8f:d9:2f:44:91:56:3c:28:f6:d2:6e:a4:95:d2:cd:08:
68:b5:73:fa:02:cf:6c:20:27:dc:ba:db:d5:06:52:6d:14:10:
ba:dc:f1:b0:3d:35:a5:6a:e6:3b:20:73:00:77:0e:75:2a:da:
fa:3c:7b:b4:9c:5b:38:85:4d:8d:ce:dd:32:a5:df:3a:38:82:
35:06:e3:8f:15:a1:97:c7:ab:4e:49:2e:ab:fd:07:63:06:a7:
c6:14:4a:0e:5c:17:ef:e8:e2:e3:4c:4a:a0:76:a1:4d:f4:f3:
94:19:e2:31:f7:5e:59:28:a3:95:12:03:61:7f:2d:47:80:00:
c4:1e:9f:04:f5:16:d3:71:98:13:8e:2b:83:d5:e6:46:67:77:
d6:c8:59:b4:74:7e:ba:2a:6d:1e:a9:72:4b:4f:b7:b4:a9:2d:
3b:5c:9f:6c:a0:3a:c6:7e:20:2e:ee:e4:52:df:9a:ec:51:76:
35:cb:71:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:09 2026 by rpki-client