
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/7FC730C2BC0C11F183FAD9F83811F970.roa
File: 7FC730C2BC0C11F183FAD9F83811F970.roa (raw, json)
Hash identifier: kOB8cOEXcwsoU6o+4AFndTiopKGmP6RgrfiGgfut4SY=
Subject key identifier: 39:B4:8A:83:B7:D0:32:FB:30:D7:52:B5:69:3C:A6:5F:9D:EB:AD:6C
Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110
Certificate serial: 0141
Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/7FC730C2BC0C11F183FAD9F83811F970.roa
Signing time: Tue 29 Sep 2026 13:48:49 +0000
ROA not before: Tue 29 Sep 2026 13:48:49 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 139088
IP address blocks: 163.223.4.0/24 maxlen: 24
163.223.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl
rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 13:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110
Validity
Not Before: Sep 29 13:48:49 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6abbc1c1-333e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:fb:5f:8f:a5:0d:51:1b:ca:f9:84:4b:fd:
cc:fe:17:64:79:c4:32:7a:06:2a:e4:b5:ba:ca:f8:
99:64:cc:33:5b:37:36:d2:59:41:81:39:d0:08:08:
e0:14:9b:fd:28:84:a7:a2:e4:a1:76:f4:23:3a:e2:
c5:88:c3:63:6b:37:90:53:14:90:8b:be:f7:25:78:
22:c3:fa:cd:79:e6:7e:e6:41:d7:e2:7b:16:6a:72:
72:f2:81:db:22:6d:0f:1d:fa:c3:a0:d4:fa:ef:7a:
81:17:f8:60:77:a4:81:7a:80:e2:0b:0a:14:7d:f2:
88:d4:ea:3b:1a:54:c0:7d:07:68:75:22:13:c3:45:
c6:6d:f7:c2:86:06:cc:26:42:d6:4c:99:77:fa:b4:
8d:76:90:d1:8f:b5:eb:3f:91:b0:55:ba:c6:00:75:
08:14:18:d7:c4:07:50:33:ca:a2:fe:4c:39:7b:a0:
2c:62:99:d2:94:e7:5b:4e:21:7a:02:16:9e:b7:e2:
ca:e7:13:4a:f1:f2:21:42:ea:36:85:f0:49:cf:99:
6d:00:cf:97:6a:85:40:90:a0:8d:0b:76:0b:6f:f9:
df:71:1d:65:35:18:00:70:f9:58:53:54:bb:65:3c:
2e:be:6e:5b:82:8b:ac:9c:6b:ed:e6:77:4a:57:df:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B4:8A:83:B7:D0:32:FB:30:D7:52:B5:69:3C:A6:5F:9D:EB:AD:6C
X509v3 Authority Key Identifier:
keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/7FC730C2BC0C11F183FAD9F83811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.4.0/23
Signature Algorithm: sha256WithRSAEncryption
82:df:73:1f:10:fd:1e:f1:21:69:cf:8a:79:b4:11:8a:4d:4b:
57:fa:41:97:98:9a:0b:44:83:72:5f:07:ff:44:62:9a:54:3a:
e4:a0:6c:a3:1d:07:b4:d8:44:b3:62:1b:cd:ae:90:ee:1e:d5:
aa:a4:50:b2:f0:2e:c6:f9:ba:79:c6:70:13:9c:05:e9:be:9d:
d1:4d:58:3e:34:d6:d6:11:0b:3c:34:b7:61:22:10:87:bc:46:
d9:ec:25:38:76:77:cb:11:a1:26:af:36:dd:12:3d:0c:a0:0d:
49:7b:71:e1:9a:58:f5:2f:13:d0:9a:2a:c1:41:0d:63:b6:73:
b2:d0:f6:a6:31:a8:16:bb:29:b7:ce:58:69:2b:4d:74:54:8a:
f1:13:5f:62:b0:56:a0:ad:d1:11:8c:fe:47:f9:73:46:46:e6:
af:bc:a2:f8:bc:a3:d9:25:e7:e1:42:95:8e:6c:05:a9:54:13:
12:43:fb:dc:b8:21:e5:c6:e1:19:cc:22:02:68:dd:ee:a2:84:
22:5f:f7:a2:85:2a:7d:59:ff:c5:70:1b:60:21:41:5c:63:51:
f3:88:c5:77:4c:c7:96:4f:ae:fa:49:dc:69:04:6c:cb:06:88:
a6:21:64:fb:c6:71:3f:59:6b:36:f9:13:67:33:75:43:e0:b9:
b2:88:6a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 02:11:45 2026 by rpki-client