
$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/D5C6712C2BF811F0A209EF6DC4F9AE02.roa
File: D5C6712C2BF811F0A209EF6DC4F9AE02.roa (raw, json)
Hash identifier: tiwa2Y8Zc0VVf0nONibc4Nnt9RaqdlIkAsUxfya3U8w=
Subject key identifier: 8F:44:3C:79:30:15:DE:79:4E:BC:05:82:C0:3A:8C:ED:C7:EA:2D:4A
Certificate issuer: /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Certificate serial: 014D
Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/D5C6712C2BF811F0A209EF6DC4F9AE02.roa
Signing time: Tue 03 Mar 2026 05:46:17 +0000
ROA not before: Tue 03 Mar 2026 05:46:17 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 135391
IP address blocks: 163.223.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Validity
Not Before: Mar 3 05:46:17 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a675a9-7c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:28:9c:b7:76:da:99:21:8f:44:38:1d:4e:
b1:05:9e:37:b8:eb:3f:13:a5:64:14:70:42:bf:44:
26:35:e7:c3:e2:61:ad:82:36:bb:6e:13:15:fd:50:
3f:e1:fb:74:28:b1:a8:c7:e6:d5:8c:79:15:ce:3d:
a8:6b:fb:85:3f:e3:dd:39:58:11:84:64:7b:9f:ba:
42:93:ab:b8:7a:79:2d:c1:da:c5:02:2e:44:de:ee:
e1:30:fb:8c:08:e4:b6:b4:89:43:c9:60:de:5a:da:
70:ac:09:d6:bd:4c:e5:8f:1a:1d:e1:36:63:a5:2d:
08:ea:59:c1:e9:46:57:ff:6e:79:92:50:1e:2e:3c:
7d:41:fc:21:91:26:39:8c:33:83:02:24:0a:69:4c:
01:af:05:e8:46:2a:ff:50:10:4c:8e:df:7d:f3:2a:
a0:f5:3b:bd:31:e5:14:46:12:ca:38:fe:a5:9e:3b:
dc:91:d8:9a:5d:74:5c:51:55:29:93:d3:18:f1:73:
c6:55:70:a8:ce:1e:bd:35:0c:33:7e:86:fc:dc:e8:
70:a1:16:d7:6b:97:08:cb:b3:98:1a:fa:62:bf:9d:
19:e8:12:88:01:82:82:3a:18:3c:a6:17:c5:81:d4:
6e:f6:76:25:2d:e9:e3:a3:3b:dd:a1:13:4f:07:03:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:44:3C:79:30:15:DE:79:4E:BC:05:82:C0:3A:8C:ED:C7:EA:2D:4A
X509v3 Authority Key Identifier:
keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/D5C6712C2BF811F0A209EF6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.77.0/24
Signature Algorithm: sha256WithRSAEncryption
96:91:47:60:f4:68:2c:84:89:a8:3f:26:3b:4b:ec:58:ae:31:
d8:e7:2b:d6:33:1f:b6:df:30:c1:ef:a1:80:49:bb:00:06:7b:
6d:8f:db:03:20:24:98:2d:26:bf:66:98:c4:8b:b9:0b:55:87:
a5:b3:2a:7a:3f:4d:a7:9f:24:c3:bf:d0:46:da:2d:8b:11:0f:
51:c5:4f:2c:3a:a1:78:c9:e4:b6:75:1d:c1:f0:7d:58:c8:9d:
3b:86:bb:19:c2:d6:f6:7f:b1:75:ae:10:8e:c9:56:c9:a9:3d:
9b:f6:65:77:68:2c:f6:70:2e:af:15:17:d6:24:03:ca:ba:0b:
08:a3:84:88:67:89:a2:fc:1c:4e:44:41:85:24:0b:59:03:1a:
0d:0a:b6:13:25:c4:a7:23:3f:3c:4f:e9:ff:f9:98:de:82:77:
76:f9:06:1b:34:e4:09:30:ae:07:c7:3b:b9:3b:44:e1:b8:90:
5b:4c:5f:cc:a1:7e:bc:8a:63:71:48:00:dd:44:0f:a7:76:48:
52:b7:40:fb:22:7d:2c:16:2c:2e:76:4f:a2:fb:fd:38:d7:a1:
58:44:fb:fb:07:35:86:3b:50:93:dc:c0:1f:7b:fb:9b:2e:d9:
5b:89:d3:81:75:d2:2b:09:a8:82:2e:79:32:60:62:d2:90:a1:
f9:88:b4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:19:00 2026 by rpki-client