
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/040DC78829EB11F18E7F1692A0833773.roa
File: 040DC78829EB11F18E7F1692A0833773.roa (raw, json)
Hash identifier: z6xCqH756kkIX8f2AVzrhijdwDcnR/vVkM2dlCG3KSM=
Subject key identifier: F0:E5:D2:32:13:53:D7:14:6C:7F:3E:A5:6B:A3:F2:52:BB:FE:31:F8
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 58
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/040DC78829EB11F18E7F1692A0833773.roa
Signing time: Fri 27 Mar 2026 16:53:53 +0000
ROA not before: Fri 27 Mar 2026 16:53:53 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 7262
IP address blocks: 63.223.203.0/24 maxlen: 24
63.223.204.0/24 maxlen: 24
209.9.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 17:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Mar 27 16:53:53 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69c6b621-a3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5f:cb:15:98:3e:82:e1:ad:dd:35:b1:68:34:
e8:3c:cb:30:64:39:39:70:dc:cf:e2:b9:0d:b0:97:
fb:6a:e9:ac:17:8f:29:e0:d9:cd:de:a8:76:df:01:
49:be:81:5b:43:d0:ae:ff:4b:fa:8d:ae:21:ac:90:
dd:43:f6:99:bc:28:6d:a6:27:45:9e:a7:e6:ea:e7:
c2:7e:3c:b0:4f:82:cc:e4:c7:94:bd:be:9c:88:9a:
bb:08:b6:c1:c2:d5:a0:e0:d3:cf:36:4a:cb:10:8a:
c1:14:8d:49:05:14:28:eb:33:65:53:d0:2a:a2:2e:
96:d0:29:54:a7:2d:fd:78:2f:5f:b0:47:c0:d4:d0:
5b:6c:d3:70:15:ac:f0:77:57:04:55:c5:78:18:e4:
e7:56:ea:10:a1:1b:9d:cc:8b:4f:0e:46:a8:9e:58:
30:c1:3c:01:4d:dd:44:46:9f:66:74:dd:03:c7:8a:
19:7c:1a:a5:86:d3:70:93:4f:91:e9:02:27:2e:6f:
58:49:39:66:a1:47:a6:e0:49:27:76:db:ff:4f:99:
33:5d:91:80:52:66:cf:76:5f:39:4c:16:f1:ce:66:
37:90:12:6a:98:56:9d:32:67:ba:c6:4b:71:95:53:
4d:a4:3c:d7:ea:a9:2c:22:f1:d4:ba:29:7e:8e:f3:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E5:D2:32:13:53:D7:14:6C:7F:3E:A5:6B:A3:F2:52:BB:FE:31:F8
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/040DC78829EB11F18E7F1692A0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
63.223.203.0-63.223.204.255
209.9.216.0/23
Signature Algorithm: sha256WithRSAEncryption
19:e9:6b:d3:7a:a4:18:e6:8c:22:10:35:78:4b:cf:30:de:dd:
6b:2b:b9:9a:b5:ea:ac:3d:c8:3a:3b:3a:c7:c0:99:a9:bb:27:
cf:01:48:d8:62:73:6e:85:00:f5:bb:02:dd:96:f7:68:67:71:
1f:a4:bc:e8:0a:a4:af:9f:5b:4c:9c:58:69:11:4b:b4:e0:8d:
35:22:ff:dc:c2:11:48:06:fd:82:95:6a:1f:2f:15:25:f9:8d:
e6:29:86:ad:1b:21:ac:bc:a1:1c:3d:57:40:93:61:08:34:bf:
5f:cb:0a:c0:b1:90:d0:47:16:36:3f:bd:68:36:20:a9:a2:29:
4e:24:8f:d5:92:dd:15:69:b6:3f:61:9e:d5:9b:f8:ed:39:8a:
4a:fe:18:e0:fb:ba:12:62:70:d9:c7:e5:08:40:56:e8:7b:df:
af:de:3f:2a:a0:e5:ce:38:2c:3e:2f:23:ab:8e:f6:b3:0e:75:
d4:77:3a:66:90:91:bf:52:0e:5c:f7:67:4c:64:56:ab:c6:28:
18:ef:a1:42:d5:43:07:19:be:0b:1a:a1:f2:59:c6:e3:6f:3a:
e5:02:04:c3:5f:12:3d:00:77:45:56:84:dd:0a:e4:34:cb:2f:
c3:89:b5:fa:4b:bd:f1:51:9d:06:55:c6:0f:bd:d7:61:93:98:
ad:1d:41:0e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MDRBOTExMC8GA1UEBRMoM0Q3QjE1QkQ3N0Q5Qjk3NEUzNzM1OERBNzU0REZFQTky
OTFFNjgzQTAeFw0yNjAzMjcxNjUzNTNaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YzZiNjIxLWEzY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDsX8sVmD6C4a3dNbFoNOg8yzBkOTlw3M/iuQ2wl/tq6awXjyng2c3eqHbfAUm+
gVtD0K7/S/qNriGskN1D9pm8KG2mJ0Wep+bq58J+PLBPgszkx5S9vpyImrsItsHC
1aDg0882SssQisEUjUkFFCjrM2VT0CqiLpbQKVSnLf14L1+wR8DU0Fts03AVrPB3
VwRVxXgY5OdW6hChG53Mi08ORqieWDDBPAFN3URGn2Z03QPHihl8GqWG03CTT5Hp
Aicub1hJOWahR6bgSSd22/9PmTNdkYBSZs92XzlMFvHOZjeQEmqYVp0yZ7rGS3GV
U02kPNfqqSwi8dS6KX6O884LAgMBAAGjggJuMIICajAdBgNVHQ4EFgQU8OXSMhNT
1xRsfz6la6PyUrv+MfgwHwYDVR0jBBgwFoAUPXsVvXfZuXTjc1jadU3+qSkeaDow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNEE5L0ZEMzcyRTRBMjk0
NTExRjFBN0FBM0VCRDg0RUU1MjhFL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFE
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUFhzVnZYZlp1WFRqYzFqYWRVMy1xU2tlYURvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDRBOS9GRDM3MkU0QTI5NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS8wNDBEQzc4ODI5
RUIxMUYxOEU3RjE2OTJBMDgzMzc3My5yb2EwLQYIKwYBBQUHAQcBAf8EHjAcMBoE
AgABMBQwDAMEAD/fywMEAD/fzAMEAdEJ2DANBgkqhkiG9w0BAQsFAAOCAQEAGelr
03qkGOaMIhA1eEvPMN7dayu5mrXqrD3IOjs6x8CZqbsnzwFI2GJzboUA9bsC3Zb3
aGdxH6S86Aqkr59bTJxYaRFLtOCNNSL/3MIRSAb9gpVqHy8VJfmN5imGrRshrLyh
HD1XQJNhCDS/X8sKwLGQ0EcWNj+9aDYgqaIpTiSP1ZLdFWm2P2Ge1Zv47TmKSv4Y
4Pu6EmJw2cflCEBW6Hvfr94/KqDlzjgsPi8jq472sw511Hc6ZpCRv1IOXPdnTGRW
q8YoGO+hQtVDBxm+Cxqh8lnG42865QIEw18SPQB3RVaE3QrkNMsvw4m1+ku98VGd
BlXGD73XYZOYrR1BDg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 18:53:58 2026 by rpki-client