
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/6C972D86AC1C11F1B31E0A3B3411F970.roa
File: 6C972D86AC1C11F1B31E0A3B3411F970.roa (raw, json)
Hash identifier: n1CRUyDZguF1Oqp4ARd64HpB4SMYX+Mnn5zg/em3u8g=
Subject key identifier: 09:94:3B:AE:EC:DE:16:AD:B3:42:06:3A:D4:9D:5A:D6:2B:28:04:CD
Certificate issuer: /CN=A9150291/serialNumber=3CEC01A23A68B865267785BB6087C09DADC95A42
Certificate serial: 0C
Authority key identifier: 3C:EC:01:A2:3A:68:B8:65:26:77:85:BB:60:87:C0:9D:AD:C9:5A:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/POwBojpouGUmd4W7YIfAna3JWkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/6C972D86AC1C11F1B31E0A3B3411F970.roa
Signing time: Thu 10 Sep 2026 06:11:48 +0000
ROA not before: Thu 10 Sep 2026 06:11:48 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 141395
IP address blocks: 163.52.118.0/24 maxlen: 24
163.52.119.0/24 maxlen: 24
2001:df7:7340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.crl
rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/POwBojpouGUmd4W7YIfAna3JWkI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150291, serialNumber=3CEC01A23A68B865267785BB6087C09DADC95A42
Validity
Not Before: Sep 10 06:11:48 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa24a24-e702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:95:f5:ea:70:a8:23:66:bd:c9:06:1d:f6:
54:5e:4e:75:e7:b8:f0:ca:3a:10:ae:b4:6d:2a:8b:
21:4a:a1:f5:29:be:82:21:66:79:e7:4b:42:10:49:
ee:f6:f3:0d:23:5b:72:ec:35:fa:f0:c3:2a:6e:5d:
30:8e:7c:2c:77:1b:6a:57:7e:dd:23:2f:58:9d:a9:
94:4e:70:85:e8:02:4e:b6:5c:6c:ed:e3:b3:de:b1:
2a:69:bd:24:36:0c:8f:8e:34:d7:1c:0f:f2:2a:1e:
d5:95:e0:83:40:ec:2c:62:22:f5:b8:db:a4:3b:2c:
51:56:7a:fe:96:40:87:ec:99:65:49:78:fe:c5:58:
c1:c1:2b:bd:e6:11:5b:ce:61:64:d5:32:79:b4:c6:
aa:4c:af:2c:23:50:63:e3:86:d2:8c:c5:77:49:db:
11:81:6e:c0:71:27:a8:2b:7b:27:e8:e0:0a:71:48:
4d:67:78:07:46:cd:f6:09:37:e5:25:98:a6:fe:ce:
65:b1:84:76:68:d1:04:3a:22:a7:e4:26:13:5c:6f:
aa:5b:37:79:05:3d:a7:4c:d9:f9:20:d8:ae:ca:7c:
07:b7:1d:7c:9b:be:7b:d1:98:18:66:40:ba:2e:da:
af:04:fe:71:92:c0:ec:65:8c:54:3c:af:ad:3f:df:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:94:3B:AE:EC:DE:16:AD:B3:42:06:3A:D4:9D:5A:D6:2B:28:04:CD
X509v3 Authority Key Identifier:
keyid:3C:EC:01:A2:3A:68:B8:65:26:77:85:BB:60:87:C0:9D:AD:C9:5A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/POwBojpouGUmd4W7YIfAna3JWkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/6C972D86AC1C11F1B31E0A3B3411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.118.0/23
IPv6:
2001:df7:7340::/48
Signature Algorithm: sha256WithRSAEncryption
b4:65:9b:e7:61:68:94:52:93:bb:85:0c:d3:aa:38:a1:62:d1:
c1:95:7b:9c:65:c4:e4:19:f0:49:eb:62:20:f5:f5:1f:68:ea:
5b:b1:c0:2a:68:1a:78:9c:32:f7:0a:b6:4a:ab:8d:67:f6:1d:
88:38:73:c1:0f:f2:22:f5:f6:7f:d3:4e:e9:c6:bb:08:94:21:
e5:a9:7c:29:bc:dd:a5:8f:bf:d1:1d:f8:e9:f8:4a:d4:c5:08:
02:58:b4:0b:d2:19:4b:e4:87:6b:82:4a:90:a0:fe:f4:a1:47:
1f:c9:70:8a:e4:95:92:56:20:5a:75:96:09:6b:cd:fb:85:90:
2c:88:d9:6b:e7:f6:5f:1a:63:62:e4:81:5b:54:28:51:9c:e9:
dc:40:8c:b0:90:cf:27:a7:aa:3f:0e:e9:bf:3c:3a:64:3e:c5:
c6:9c:71:8f:cd:e8:5b:7e:79:5c:f4:29:55:02:08:ea:ea:be:
5d:e2:c6:d6:14:18:50:42:cb:ca:25:17:51:a6:41:8c:3c:4c:
92:8b:eb:03:12:fd:97:58:cb:61:dc:2b:8c:a7:e5:92:5f:17:
64:c8:c9:10:63:0a:2c:b1:8a:21:f4:e0:8c:79:37:7b:71:50:
82:d9:83:14:24:a7:68:e3:a2:af:a4:c0:66:d8:36:ff:e3:10:
cd:54:cd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:03:40 2026 by rpki-client