
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/D7D79C92241A11F0A9D27045C4F9AE02.roa
File: D7D79C92241A11F0A9D27045C4F9AE02.roa (raw, json)
Hash identifier: DRF7VlzjO8fPxz9lCQ4FkptawsVbt7uFnu1FS67LXXA=
Subject key identifier: DE:CB:18:87:09:43:C7:15:7F:41:8E:55:51:43:D4:4E:D2:78:49:1E
Certificate issuer: /CN=A9166E07/serialNumber=B967D2EE82B7AEEB2C541CA9A5103B5A0CA6E712
Certificate serial: 0113
Authority key identifier: B9:67:D2:EE:82:B7:AE:EB:2C:54:1C:A9:A5:10:3B:5A:0C:A6:E7:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/D7D79C92241A11F0A9D27045C4F9AE02.roa
Signing time: Thu 01 Oct 2026 07:53:43 +0000
ROA not before: Thu 01 Oct 2026 07:53:43 +0000
ROA not after: Sat 30 Jan 2027 00:00:00 +0000
asID: 153790
IP address blocks: 163.227.90.0/24 maxlen: 24
163.227.91.0/24 maxlen: 24
2401:fea0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.crl
rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 07:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166E07, serialNumber=B967D2EE82B7AEEB2C541CA9A5103B5A0CA6E712
Validity
Not Before: Oct 1 07:53:43 2026 GMT
Not After : Jan 30 00:00:00 2027 GMT
Subject: CN=6abe1187-133f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:fe:7c:2e:34:67:60:d2:e8:28:b5:e6:d4:
4d:c3:77:0f:d3:d1:33:56:6e:18:bb:63:72:ce:cd:
24:45:e2:9b:3c:49:53:86:84:48:ff:7d:a1:65:72:
c4:f5:65:7d:08:07:79:70:2d:a2:98:91:a8:87:b5:
69:4e:47:cf:ed:7f:ce:45:bc:ec:2a:b1:bf:d6:c1:
2d:09:51:db:01:72:e5:62:46:e3:e5:8d:4f:4b:39:
ea:50:23:38:7a:a6:ee:6a:3e:8a:50:4d:f1:fa:37:
35:e7:39:b7:9e:69:7e:ec:72:0f:3a:81:61:55:c3:
d7:6e:e8:6c:fb:fb:79:4e:7f:c7:f3:5e:5d:a7:90:
98:7b:47:8d:43:30:58:d7:98:f9:9b:17:ac:cd:f4:
45:7a:92:84:af:a9:89:8a:d5:7d:c4:9a:c2:35:8d:
fb:15:51:b5:e7:aa:b9:e0:11:c7:e0:03:5e:7c:d0:
78:a4:cd:fc:38:7e:02:78:c8:27:3b:49:f9:e7:da:
4d:d7:1a:8d:0e:de:af:cf:7f:5c:bc:ff:e6:54:e7:
68:52:0d:25:4b:87:52:d9:9f:35:10:a4:aa:06:51:
5b:ae:e5:0c:02:a1:df:b4:03:f4:74:26:12:a7:ba:
82:47:56:85:6d:8c:66:95:c9:c0:6d:dc:7a:b6:21:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CB:18:87:09:43:C7:15:7F:41:8E:55:51:43:D4:4E:D2:78:49:1E
X509v3 Authority Key Identifier:
keyid:B9:67:D2:EE:82:B7:AE:EB:2C:54:1C:A9:A5:10:3B:5A:0C:A6:E7:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/D7D79C92241A11F0A9D27045C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.90.0/23
IPv6:
2401:fea0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:ee:25:c7:73:39:ad:57:39:4d:e1:26:bb:0a:31:18:65:21:
c6:50:4c:66:b3:e5:54:0b:5e:52:64:bc:30:9b:b8:43:37:08:
23:92:23:b5:d7:9e:63:7f:16:db:3b:5e:69:e4:1b:b6:9d:a6:
a8:38:91:e4:35:2d:16:e0:b2:00:87:0d:65:c3:5c:af:71:6d:
90:0c:e8:15:77:02:83:7e:c9:35:2f:22:fa:9c:64:56:6b:86:
d6:e3:4d:87:cb:c2:fc:86:c0:9c:ff:a1:81:82:2e:c9:72:ed:
33:d2:f0:78:f5:bb:b2:2c:84:8c:b1:a1:32:ec:88:e5:24:7a:
be:ae:42:79:1c:67:64:ff:0e:19:a4:f3:af:c3:84:59:43:4f:
4c:e7:9b:0b:07:28:47:23:78:6c:de:0f:9b:14:cd:04:63:d4:
f9:4e:ab:57:e9:71:35:5e:32:5b:ff:a6:74:ef:9d:d2:95:10:
98:79:71:25:7c:41:fc:33:05:8b:63:bf:a5:96:1e:32:ef:8b:
4c:64:a4:7f:23:07:90:f3:43:19:32:86:57:8b:8e:13:2b:e4:
79:14:09:45:03:4e:a2:bc:c6:e6:46:dd:e9:21:9b:4d:50:54:
a2:18:93:08:a5:18:81:f9:96:2a:d2:cd:f7:00:73:c2:c4:b3:
cb:db:f4:7e
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjZFMDcxMTAvBgNVBAUTKEI5NjdEMkVFODJCN0FFRUIyQzU0MUNBOUE1MTAzQjVB
MENBNkU3MTIwHhcNMjYxMDAxMDc1MzQzWhcNMjcwMTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJlMTE4Ny0xMzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+/+fC40Z2DS6Ci15tRNw3cP09EzVm4Yu2Nyzs0kReKbPElThoRI/32hZXLE
9WV9CAd5cC2imJGoh7VpTkfP7X/ORbzsKrG/1sEtCVHbAXLlYkbj5Y1PSznqUCM4
eqbuaj6KUE3x+jc15zm3nml+7HIPOoFhVcPXbuhs+/t5Tn/H815dp5CYe0eNQzBY
15j5mxeszfRFepKEr6mJitV9xJrCNY37FVG156q54BHH4ANefNB4pM38OH4CeMgn
O0n559pN1xqNDt6vz39cvP/mVOdoUg0lS4dS2Z81EKSqBlFbruUMAqHftAP0dCYS
p7qCR1aFbYxmlcnAbdx6tiGAOwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFN7LGIcJ
Q8cVf0GOVVFD1E7SeEkeMB8GA1UdIwQYMBaAFLln0u6Ct67rLFQcqaUQO1oMpucS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkUwNy82QjU2RDFGQTI0
MUExMUYwOEYwNEJFNDRDNEY5QUUwMi91V2ZTN29LM3J1c3NWQnlwcFJBN1dneW01
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VXZlM3b0szcnVzc1ZCeXBwUkE3V2d5bTV4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjZFMDcvNkI1NkQxRkEyNDFBMTFGMDhGMDRCRTQ0QzRGOUFFMDIvRDdENzlDOTIy
NDFBMTFGMEE5RDI3MDQ1QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBo+NaMA0EAgACMAcDBQAkAf6gMA0GCSqGSIb3DQEBCwUAA4IBAQAf
7iXHczmtVzlN4Sa7CjEYZSHGUExms+VUC15SZLwwm7hDNwgjkiO1155jfxbbO15p
5Bu2naaoOJHkNS0W4LIAhw1lw1yvcW2QDOgVdwKDfsk1LyL6nGRWa4bW402Hy8L8
hsCc/6GBgi7Jcu0z0vB49buyLISMsaEy7IjlJHq+rkJ5HGdk/w4ZpPOvw4RZQ09M
55sLByhHI3hs3g+bFM0EY9T5TqtX6XE1XjJb/6Z0753SlRCYeXElfEH8MwWLY7+l
lh4y74tMZKR/IweQ80MZMoZXi44TK+R5FAlFA06ivMbmRt3pIZtNUFSiGJMIpRiB
+ZYq0s33AHPCxLPL2/R+
-----END CERTIFICATE-----
Generated at Thu Oct 1 11:06:58 2026 by rpki-client