
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/FC7F121AAA6F11F0BCFEBD63C4F9AE02.roa
File: FC7F121AAA6F11F0BCFEBD63C4F9AE02.roa (raw, json)
Hash identifier: MV4I569w9zPiHP/yIqubx9xyWgXjsBIdhw/uq6cgQpU=
Subject key identifier: 1B:32:A7:84:1D:F4:51:D3:DF:34:8B:2C:AF:26:8F:3B:1D:EC:5F:6A
Certificate issuer: /CN=A9153850/serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
Certificate serial: F2
Authority key identifier: 2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/FC7F121AAA6F11F0BCFEBD63C4F9AE02.roa
Signing time: Sat 25 Apr 2026 06:37:02 +0000
ROA not before: Sat 25 Apr 2026 06:37:02 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 153680
IP address blocks: 163.223.56.0/24 maxlen: 24
2001:df5:3340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl
rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153850, serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
Validity
Not Before: Apr 25 06:37:02 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69ec610d-fa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:01:73:d7:68:6f:27:ea:01:71:9d:f2:da:
97:9a:b9:5e:b2:e8:5b:d4:a0:2c:18:8e:35:bc:70:
da:53:cf:af:56:9d:35:e4:2b:8a:5f:23:52:6e:e0:
b1:31:c9:71:80:ba:7a:9f:5d:7d:64:9e:0a:f4:4a:
7e:15:7e:3f:ad:ef:fe:30:2a:57:13:96:bf:89:5f:
10:20:3e:91:cf:3d:a3:6b:65:91:d6:b4:39:77:d8:
7a:18:4a:19:43:c8:39:f8:85:8f:db:bc:4e:c0:62:
9f:65:75:cc:1b:ff:57:fc:e5:bc:b9:22:25:4d:4f:
3d:7c:96:39:d8:51:cb:b3:8b:30:03:86:0c:87:fb:
5e:03:20:b6:4b:e7:d2:69:5d:b7:a5:7f:ee:38:30:
a7:e0:d8:16:ca:a2:9b:bd:cd:e3:82:37:e8:0c:94:
ab:aa:b2:2d:9a:df:c4:5d:32:16:08:b6:c4:9f:d3:
71:a0:5d:9e:2c:de:34:53:46:47:e5:85:27:59:2d:
6c:54:55:70:36:8f:7f:73:04:89:2b:eb:82:44:a6:
67:57:ac:94:16:fd:9e:41:0b:14:9e:6b:a9:35:2b:
2b:0a:cf:80:fc:70:df:df:08:35:9c:30:09:e5:23:
6e:5b:52:12:49:db:44:65:4c:35:33:d9:08:c1:45:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:32:A7:84:1D:F4:51:D3:DF:34:8B:2C:AF:26:8F:3B:1D:EC:5F:6A
X509v3 Authority Key Identifier:
keyid:2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/FC7F121AAA6F11F0BCFEBD63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.56.0/24
IPv6:
2001:df5:3340::/48
Signature Algorithm: sha256WithRSAEncryption
0f:b8:01:f2:26:df:7e:fe:45:7c:25:0a:a2:86:17:1d:be:aa:
d0:6b:73:83:c8:89:c1:e4:f9:6c:d4:10:81:20:9a:01:78:fe:
5e:8a:bd:40:66:cd:bb:94:76:52:f6:8e:53:48:b6:66:ce:e2:
31:4f:46:86:1e:e0:e2:c7:aa:78:04:7d:87:99:0a:76:27:42:
23:33:c0:dc:c3:bb:6c:5d:a4:c7:a5:95:ef:4f:47:07:6e:6d:
df:d2:98:ef:eb:9c:f7:9c:98:84:4c:a1:4b:10:7a:91:be:52:
00:fd:e0:53:31:d0:78:61:ac:2c:6b:ac:ff:5c:78:50:a7:16:
f7:79:60:45:a2:96:f8:0f:9a:5f:f6:24:17:d8:56:07:0f:b0:
ae:7c:8c:e4:15:e4:8f:96:50:7d:d7:77:b6:c0:63:fd:ad:ca:
33:91:17:bb:ea:6c:68:7f:42:de:2b:d3:ee:f0:31:21:72:33:
4b:d6:f8:a5:b5:5c:bd:c1:b0:de:8f:9d:a4:25:48:e5:e5:ec:
d8:74:d0:69:7b:95:76:2e:3f:22:c8:01:db:09:63:a1:16:89:
96:92:cb:ff:25:8e:8e:46:35:65:3d:aa:08:8a:57:5c:ce:ac:
41:72:82:a6:85:cf:96:91:f0:f1:84:09:27:f6:7e:72:0d:d5:
5b:a7:0e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:23 2026 by rpki-client