
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/51B36E9EF52911F0B0B7B3125D6F56BC.roa
File: 51B36E9EF52911F0B0B7B3125D6F56BC.roa (raw, json)
Hash identifier: 8KKvSmDe3zRy+4+gorenjXm9sLgngQQul02rPl73ax0=
Subject key identifier: 9E:81:7B:36:89:18:DE:67:48:E8:DF:56:BB:D5:48:F1:54:66:4C:71
Certificate issuer: /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial: C4
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/51B36E9EF52911F0B0B7B3125D6F56BC.roa
Signing time: Sun 01 Mar 2026 10:53:09 +0000
ROA not before: Mon 19 Jan 2026 11:23:46 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 10075
IP address blocks: 163.223.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Validity
Not Before: Jan 19 11:23:46 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a41a95-ef63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:f0:45:fa:95:7d:73:16:4c:99:6a:0e:a4:
ca:25:b5:ba:d6:24:6e:2d:90:9e:c2:85:27:8d:a3:
00:f2:fc:40:c0:4c:bc:7b:e1:03:c6:a5:d9:37:0d:
eb:9d:8c:12:3c:a4:49:5c:23:c5:09:36:dd:39:3d:
69:91:e2:fa:da:17:a4:2a:66:ff:60:c6:c0:fe:16:
92:da:cd:b3:84:14:19:50:88:85:98:55:f3:fb:80:
d4:e1:20:72:c3:0b:aa:3f:52:02:51:1d:a7:25:56:
3c:ed:87:a4:79:1f:37:ff:33:8f:62:70:8c:d9:04:
dd:c7:70:ce:79:f1:e3:c6:42:5a:cc:e9:08:b6:8b:
34:e6:53:5f:bb:99:a9:74:86:ed:bc:8b:d2:19:49:
3f:4e:5c:22:02:56:b0:9f:a0:6f:9c:e8:cf:77:dd:
0e:7d:9c:9b:5c:07:b4:6e:d9:96:fe:2e:2f:20:c6:
07:ee:26:70:90:e0:c0:2a:2a:bd:ed:57:34:ed:96:
53:7d:f2:df:f2:e5:d0:e2:ed:05:63:a9:1f:1f:ad:
a0:b6:16:fa:1f:ea:55:3b:20:14:d2:f6:16:99:2d:
fb:42:29:d2:22:06:c9:59:a6:91:a8:a3:4c:68:30:
ee:d8:bc:48:fd:de:aa:01:d9:84:fd:e5:0e:e2:44:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:81:7B:36:89:18:DE:67:48:E8:DF:56:BB:D5:48:F1:54:66:4C:71
X509v3 Authority Key Identifier:
keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/51B36E9EF52911F0B0B7B3125D6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.21.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:af:01:98:b3:2f:83:00:08:1b:54:63:ac:c3:3b:b1:72:05:
20:10:67:a3:29:34:df:fe:e1:09:20:91:bf:9c:2b:54:40:07:
a4:5f:29:3c:87:72:59:19:dd:78:25:6c:64:39:b6:49:1f:bb:
20:64:7f:f8:5e:7f:2d:08:98:bd:fe:23:56:f2:0f:77:76:7b:
9b:aa:5c:e3:6f:35:94:dc:91:85:41:2b:00:67:c5:aa:ef:7b:
05:6c:d2:b5:69:4d:76:29:ad:7a:d3:3a:82:a1:9f:e7:e6:08:
14:b3:29:71:6b:48:78:95:e7:32:b2:65:40:ed:27:0f:3d:1c:
b7:b6:dd:2a:3a:8e:32:99:8b:52:e8:4d:40:82:e2:ca:2f:c3:
64:b0:36:a1:46:de:b8:89:11:d1:6b:b9:78:6c:16:be:19:12:
f3:ac:07:71:90:9a:7d:00:e0:1d:ce:bc:2f:70:a2:6c:63:1c:
35:d2:c8:82:c2:2a:b8:00:c1:0a:f0:71:91:d4:73:ed:1f:9b:
a2:73:02:a0:9d:b2:7a:94:ce:e5:36:1f:9d:ba:7d:25:5a:b4:
a0:b6:41:78:78:77:b2:bf:74:4e:30:e6:21:6e:8b:1f:d1:f7:
a3:fd:d5:36:3c:13:be:3c:68:35:10:a3:ae:de:4b:a4:46:c3:
2f:e0:0a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:34 2026 by rpki-client