
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/DCC2224A313011F0BE214A64C4F9AE02.roa
File: DCC2224A313011F0BE214A64C4F9AE02.roa (raw, json)
Hash identifier: Yx+85CHClvGSKZhhotbyNhG5+qEsDCcgpA+sR6zn7rc=
Subject key identifier: F1:1D:6F:67:C7:D0:79:DD:25:21:42:C0:2A:01:48:01:57:33:07:19
Certificate issuer: /CN=A9132FD9/serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D
Certificate serial: C4
Authority key identifier: 97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/DCC2224A313011F0BE214A64C4F9AE02.roa
Signing time: Sun 03 May 2026 07:39:49 +0000
ROA not before: Sun 03 May 2026 07:39:49 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 153869
IP address blocks: 163.227.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl
rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132FD9, serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D
Validity
Not Before: May 3 07:39:49 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f6fbc5-05ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:69:38:ee:ae:55:77:d8:0b:c6:0c:a3:f9:c3:
b5:1e:12:36:13:91:af:06:43:1c:7e:78:5e:4b:e7:
42:e0:f5:46:1e:ae:44:71:99:d5:40:8c:6c:6d:80:
39:4a:32:8b:35:db:92:4c:8a:83:f8:81:97:4a:ac:
3f:15:88:9a:16:c7:b6:82:2a:e5:a8:6c:f5:5e:64:
b5:28:83:8b:e6:f9:39:f4:34:84:8b:b6:80:06:c9:
3b:b1:2b:c9:2e:53:a4:f9:01:db:84:4e:fa:ca:62:
7c:12:4a:19:e9:81:bc:97:17:ca:19:8a:9a:7a:18:
65:1e:cc:6e:47:b1:2a:69:3b:dc:3b:54:d2:af:d4:
92:b0:77:9b:cb:3c:1e:4a:fc:a7:07:cb:05:5d:ad:
33:d6:b7:b5:df:cd:ce:e7:6a:38:68:2e:9c:8b:d8:
1d:04:3b:61:bc:c0:41:17:61:1d:fb:1e:e3:2b:08:
d9:3b:a0:28:bc:98:09:0d:cf:53:1b:9e:26:21:30:
e2:38:9c:75:6f:f6:3f:be:d4:1e:79:be:eb:93:36:
e9:66:76:dd:14:8f:ee:4b:06:d1:96:a6:14:86:1e:
c0:a2:1a:83:24:b3:30:af:2e:fd:fd:5d:d8:94:0c:
b9:9d:5f:8b:9b:2e:12:41:72:32:6b:e0:3f:86:bc:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1D:6F:67:C7:D0:79:DD:25:21:42:C0:2A:01:48:01:57:33:07:19
X509v3 Authority Key Identifier:
keyid:97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/DCC2224A313011F0BE214A64C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.167.0/24
Signature Algorithm: sha256WithRSAEncryption
46:46:34:8e:09:7f:47:4a:3f:24:75:f1:74:66:0c:03:01:c0:
20:09:f3:c4:f3:24:b3:d9:a2:b1:b1:76:da:7e:e4:cc:d0:b6:
ae:f6:fc:46:4b:36:95:71:a1:08:f7:48:f2:74:5d:be:dd:a2:
51:7e:75:90:08:b3:00:72:59:f8:cd:0b:b7:d6:aa:80:45:01:
1d:b6:ed:33:18:0d:34:dc:d6:07:20:92:88:68:b8:25:bc:ca:
60:0d:19:d0:a1:51:d2:ee:52:02:bd:bf:db:04:02:2c:0b:4b:
49:e7:f9:4f:8a:ed:c1:20:cc:47:6c:c2:8a:3c:a7:72:9b:05:
06:20:11:ad:1a:c4:27:9b:f6:53:18:d6:13:13:d9:69:73:fb:
81:a2:0d:85:d8:f8:57:5b:dc:56:d1:6c:94:a7:28:90:63:50:
72:db:9d:3d:3b:e3:cd:e3:19:80:cc:48:78:3d:ad:15:67:1c:
ea:94:09:53:5c:d8:1d:7c:ca:95:1b:05:74:52:c9:9f:40:21:
c4:c0:94:45:d0:f8:ca:56:66:38:2e:7e:ab:9e:cb:6c:7d:1c:
15:ba:82:fb:a1:9d:e2:b5:e5:71:db:f4:4a:f2:4c:32:ac:e7:
03:90:44:6d:e2:db:02:cb:cb:13:38:d3:aa:2c:89:28:02:de:
6c:d0:9a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:33 2026 by rpki-client