
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/A7B64E90EA7311EF83DF9312C4F9AE02.roa
File: A7B64E90EA7311EF83DF9312C4F9AE02.roa (raw, json)
Hash identifier: kAGTtiStnHMpbONE8q36czkYvOAd/yxjeZDFDMyjrzg=
Subject key identifier: 24:2D:73:FD:2D:18:8E:E2:2E:51:75:13:11:B7:EB:8A:61:FD:A9:53
Certificate issuer: /CN=A9147BCF/serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
Certificate serial: CF
Authority key identifier: 0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/A7B64E90EA7311EF83DF9312C4F9AE02.roa
Signing time: Tue 17 Mar 2026 05:43:27 +0000
ROA not before: Tue 17 Mar 2026 05:43:27 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 131476
IP address blocks: 163.61.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl
rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 06:15:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147BCF, serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
Validity
Not Before: Mar 17 05:43:27 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69b8e9fe-71ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:4e:42:da:65:c7:af:b3:64:98:37:b0:29:
2b:2b:cd:e0:88:bf:26:d1:17:d2:b9:75:c9:21:ca:
4c:4b:18:d8:0e:66:f9:9d:30:9e:a0:79:6e:3e:36:
a6:aa:67:dd:e4:d1:7d:88:ef:39:c2:fd:65:c7:d3:
3b:bb:bf:4c:6a:61:e0:63:f2:f4:e3:a9:7c:52:d7:
41:c1:43:d7:c7:ad:50:9b:b7:d8:61:79:63:e0:f0:
ab:5c:40:10:a0:da:d3:e5:98:1e:5a:e0:2a:a9:78:
c7:e3:31:35:f1:69:92:97:84:70:0b:94:a6:00:23:
cc:f6:4f:81:fc:fa:e0:46:37:33:8e:7b:ae:d3:bb:
74:21:28:13:d7:be:ee:5c:6e:6a:be:bf:0c:14:bb:
ee:86:0d:22:19:a0:f1:41:45:58:4a:73:e7:23:e3:
fa:30:8a:09:4a:e6:44:6d:01:15:df:24:a3:c6:7b:
ac:8b:ce:80:b6:bb:9b:92:47:25:97:4d:f2:b9:ee:
37:1c:72:97:1e:aa:2d:a0:12:e6:7b:c6:85:60:04:
d2:61:b7:77:1a:01:21:a0:58:d8:cc:d1:30:35:2a:
2b:9a:50:be:2b:6c:7a:01:53:77:5d:ab:b1:25:c6:
74:33:b5:ba:3d:c4:ba:87:43:8a:9e:45:a8:f6:51:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2D:73:FD:2D:18:8E:E2:2E:51:75:13:11:B7:EB:8A:61:FD:A9:53
X509v3 Authority Key Identifier:
keyid:0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/A7B64E90EA7311EF83DF9312C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.84.0/24
Signature Algorithm: sha256WithRSAEncryption
26:97:ad:a4:c5:1c:26:76:43:c0:5c:8a:9b:2e:4e:a5:43:8d:
e3:47:2f:f8:70:be:23:d2:f4:50:cd:12:dc:62:9c:d5:eb:07:
84:29:b0:a7:d1:29:13:ab:9b:93:99:f5:87:33:4a:7a:84:b6:
e4:5b:48:18:0e:bf:17:28:0e:5c:68:6d:71:f1:2b:3b:4a:2a:
85:ad:21:88:13:b2:f1:ba:c8:7c:89:17:97:30:0e:47:e6:84:
19:89:3b:81:c8:f1:47:e3:9b:1c:70:85:65:a9:76:aa:83:9f:
48:84:b2:f7:9a:06:7a:75:d7:0a:0e:9c:fb:47:c3:58:b0:39:
1b:a4:78:e7:8a:d6:1f:f6:7c:c7:51:7e:7f:ea:f7:83:a8:65:
be:3a:43:a2:e4:d7:db:87:3f:3c:db:5e:bd:bd:df:c8:ae:4a:
10:8f:03:68:6c:85:37:93:25:ba:b8:f2:7e:cb:a4:62:0b:cc:
eb:e4:27:63:45:ee:7f:b3:e7:89:80:73:35:64:e8:3c:b6:42:
9c:47:57:69:e2:05:cc:34:6d:86:83:80:c1:c2:82:d7:9a:97:
fa:5f:5d:9e:0f:f5:10:6a:12:28:cb:53:ce:6d:25:58:90:f2:
eb:e4:7b:65:67:8e:cc:7c:c5:6b:18:a6:8d:cf:01:10:20:69:
00:a3:2f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 11:09:05 2026 by rpki-client