
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/D6246110AA6F11F0AD515C63C4F9AE02.roa
File: D6246110AA6F11F0AD515C63C4F9AE02.roa (raw, json)
Hash identifier: N4HTYSfJRwG01pC5CAe1D/sq8bILUh+qrNfqBe3K/Mw=
Subject key identifier: E1:19:66:E7:4D:45:B8:72:C9:AB:08:A2:2F:83:AA:3F:02:F2:57:C4
Certificate issuer: /CN=A9153850/serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
Certificate serial: D1
Authority key identifier: 2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/D6246110AA6F11F0AD515C63C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:24:39 +0000
ROA not before: Thu 16 Oct 2025 09:09:36 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139012
IP address blocks: 163.223.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl
rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153850, serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
Validity
Not Before: Oct 16 09:09:36 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a59da7-6071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:01:86:1b:ca:dc:80:8d:25:34:62:2e:48:
24:7b:fd:1a:80:ef:5d:b6:08:eb:fe:ef:c2:85:ae:
6a:28:95:7b:df:35:b2:48:2d:72:74:f5:63:11:cf:
60:df:38:87:df:4c:f3:22:3e:8e:59:4e:51:73:d7:
34:62:97:ac:5e:6d:c5:64:d9:11:87:a8:d2:a6:39:
ab:b3:5f:e7:47:77:d1:cf:8c:97:33:6d:47:64:96:
a1:39:fe:c6:b2:6b:0b:71:fc:fa:41:d4:cb:7e:1f:
f9:21:9f:c9:2f:7b:6a:33:71:dd:82:89:76:24:ae:
28:1a:33:5c:fa:6c:09:79:94:8f:d8:b6:5e:16:87:
57:e7:6c:93:aa:89:d5:eb:9b:3c:45:d1:f2:1a:0d:
be:eb:fc:3b:ad:07:3a:74:aa:37:7e:1f:e3:83:f5:
9d:3a:29:99:5a:1f:2a:be:ef:55:19:93:f7:b5:52:
8a:a4:ab:a8:ba:84:a2:67:b7:d2:83:c8:64:b8:fe:
83:62:47:c2:4b:3e:08:b5:d5:51:ca:43:c3:3e:4d:
c1:c8:fb:83:90:17:30:f2:08:ae:b6:d6:24:6f:1c:
36:17:d6:6d:fe:ea:11:bd:54:94:40:03:56:99:5f:
33:d2:11:50:f7:b6:bf:f1:e6:e2:3b:87:50:fd:d1:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:19:66:E7:4D:45:B8:72:C9:AB:08:A2:2F:83:AA:3F:02:F2:57:C4
X509v3 Authority Key Identifier:
keyid:2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/D6246110AA6F11F0AD515C63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d2:28:ce:04:33:94:b0:ee:1e:69:57:b9:68:3c:38:ef:1b:
82:19:75:9a:72:34:f1:1f:0d:22:26:e8:ee:c8:7b:68:81:c4:
ba:12:95:bf:6e:5d:28:30:bd:78:30:2d:b8:67:d5:c5:ad:b4:
18:c2:00:55:ce:1a:62:bf:dc:5a:86:5c:74:eb:36:7b:24:2a:
fb:ce:95:08:f6:ea:99:75:4b:b7:07:3b:d4:64:7f:c1:9a:5f:
20:be:dc:c1:cb:36:83:19:78:fb:54:df:c1:3d:5c:71:1a:19:
37:1a:5c:dc:fe:8c:90:90:8f:94:a2:ba:05:f6:77:85:e4:0d:
05:0e:31:dd:1f:7d:cf:75:cc:2d:11:19:de:b2:00:b1:b7:ca:
67:ec:61:b4:4c:a0:ec:0f:1f:44:89:18:1c:b1:e8:49:57:8b:
5d:06:ce:06:a4:45:81:2b:5e:1b:48:ab:00:e9:47:03:02:de:
fb:80:bb:0a:47:e4:78:2d:f8:3e:f3:96:fd:49:8f:9b:d2:7e:
8c:d0:e4:12:10:c4:c0:09:80:44:79:0b:44:3c:23:95:b5:67:
26:84:ff:a1:cf:9d:0c:5c:6b:52:a7:67:f4:91:b5:d8:7a:36:
6e:ec:91:7b:23:32:52:f4:6d:a3:9c:07:17:25:44:b8:71:d2:
4d:05:1d:09
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM4NTAxMTAvBgNVBAUTKDJBQjI0MzJDM0FENTEyOEVENzNFOTlDNDYwRDA2MTFG
QUY0RDIyMEUwHhcNMjUxMDE2MDkwOTM2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWRhNy02MDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm6EBhhvK3ICNJTRiLkgke/0agO9dtgjr/u/Cha5qKJV73zWySC1ydPVjEc9g
3ziH30zzIj6OWU5Rc9c0YpesXm3FZNkRh6jSpjmrs1/nR3fRz4yXM21HZJahOf7G
smsLcfz6QdTLfh/5IZ/JL3tqM3Hdgol2JK4oGjNc+mwJeZSP2LZeFodX52yTqonV
65s8RdHyGg2+6/w7rQc6dKo3fh/jg/WdOimZWh8qvu9VGZP3tVKKpKuouoSiZ7fS
g8hkuP6DYkfCSz4ItdVRykPDPk3ByPuDkBcw8giuttYkbxw2F9Zt/uoRvVSUQANW
mV8z0hFQ97a/8ebiO4dQ/dG75QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOEZZudN
RbhyyasIoi+Dqj8C8lfEMB8GA1UdIwQYMBaAFCqyQyw61RKO1z6ZxGDQYR+vTSIO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mzg1MC83QjNCMzdENDAx
ODYxMUYwQjA1QjRDNTlDNEY5QUUwMi9LckpETERyVkVvN1hQcG5FWU5CaEg2OU5J
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tySkRMRHJWRW83WFBwbkVZTkJoSDY5TklnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM4NTAvN0IzQjM3RDQwMTg2MTFGMEIwNUI0QzU5QzRGOUFFMDIvRDYyNDYxMTBB
QTZGMTFGMEFENTE1QzYzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAo985MA0GCSqGSIb3DQEBCwUAA4IBAQBM0ijOBDOUsO4eaVe5aDw4
7xuCGXWacjTxHw0iJujuyHtogcS6EpW/bl0oML14MC24Z9XFrbQYwgBVzhpiv9xa
hlx06zZ7JCr7zpUI9uqZdUu3BzvUZH/Bml8gvtzByzaDGXj7VN/BPVxxGhk3Glzc
/oyQkI+UoroF9neF5A0FDjHdH33PdcwtERnesgCxt8pn7GG0TKDsDx9EiRgcsehJ
V4tdBs4GpEWBK14bSKsA6UcDAt77gLsKR+R4Lfg+85b9SY+b0n6M0OQSEMTACYBE
eQtEPCOVtWcmhP+hz50MXGtSp2f0kbXYejZu7JF7IzJS9G2jnAcXJUS4cdJNBR0J
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:32 2026 by rpki-client