
$ rpki-client -vvf rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/BF7A92E2FFC311EF9131D04AC4F9AE02.roa
File: BF7A92E2FFC311EF9131D04AC4F9AE02.roa (raw, json)
Hash identifier: jAHZ6BVa35DuXd1x+PEI3A3+98JWxx2ey8KslRlTuak=
Subject key identifier: 0A:F9:B1:57:B6:FD:26:5C:CA:34:D5:5E:20:97:D9:11:AC:78:E5:9D
Certificate issuer: /CN=A918922D/serialNumber=456C60836584E90A28A29D028B5B27601A93D446
Certificate serial: C0
Authority key identifier: 45:6C:60:83:65:84:E9:0A:28:A2:9D:02:8B:5B:27:60:1A:93:D4:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/BF7A92E2FFC311EF9131D04AC4F9AE02.roa
Signing time: Sun 15 Mar 2026 06:43:22 +0000
ROA not before: Sun 15 Mar 2026 06:43:22 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 153688
IP address blocks: 163.223.74.0/23 maxlen: 24
2001:df5:36c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.crl
rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918922D, serialNumber=456C60836584E90A28A29D028B5B27601A93D446
Validity
Not Before: Mar 15 06:43:22 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69b6550a-14b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:80:b0:db:b5:35:89:77:b3:5c:c3:9a:6e:
5e:b4:0c:1d:90:e7:69:6a:5e:98:8c:ad:a4:34:95:
b6:91:1d:df:b0:f4:43:bf:fe:b9:54:9d:e0:75:52:
ee:54:44:ed:a8:84:b3:da:6d:8d:c7:b9:64:9a:71:
59:39:0a:ed:ce:f7:36:6b:eb:64:7d:af:55:e4:d8:
de:d3:1e:fe:b7:a3:bd:bf:2e:79:a1:b0:c2:29:b0:
9f:4c:12:36:7d:75:c5:18:ca:23:1e:18:50:9f:0c:
0f:e2:f5:9d:49:9d:ed:0e:e7:7c:d3:78:aa:b4:4e:
52:4e:dc:97:01:30:c4:b0:50:4b:0f:b2:b6:fd:b1:
c0:3c:9d:49:8f:f0:b3:32:14:4b:60:75:92:17:3a:
48:58:24:88:e8:c9:aa:8b:89:b1:e7:70:51:ba:f6:
c8:ca:55:16:44:cc:9d:87:18:56:fe:ea:92:0c:95:
f3:e9:10:aa:d4:25:f3:95:64:46:cd:1a:af:8f:9e:
1e:de:ef:fb:99:be:84:a0:70:12:a2:66:ef:fc:b5:
95:80:a9:4e:96:2c:54:80:92:7d:ad:a8:9d:77:c1:
5d:b7:53:b3:b6:a6:29:f4:00:1e:3f:ae:1c:9b:8b:
78:11:a1:a2:9d:b4:7e:63:f9:f8:11:f7:b3:16:57:
ca:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F9:B1:57:B6:FD:26:5C:CA:34:D5:5E:20:97:D9:11:AC:78:E5:9D
X509v3 Authority Key Identifier:
keyid:45:6C:60:83:65:84:E9:0A:28:A2:9D:02:8B:5B:27:60:1A:93:D4:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/BF7A92E2FFC311EF9131D04AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.74.0/23
IPv6:
2001:df5:36c0::/48
Signature Algorithm: sha256WithRSAEncryption
99:7c:72:45:84:69:ab:5d:ad:f3:97:f4:48:99:e7:4c:3f:c7:
1a:3c:42:61:f9:1a:ad:bd:cf:74:42:8a:b6:7a:82:31:5a:5e:
4f:0c:be:41:b1:ad:20:4e:37:50:c2:87:9f:c4:31:d4:55:0d:
06:26:da:38:5d:e8:97:4c:47:68:f2:c0:03:70:1d:8f:bc:73:
87:47:2b:08:9f:cd:f4:91:41:85:b2:e7:ff:80:2f:c1:d0:83:
a0:b7:9d:e1:f4:3b:64:09:ce:d4:7b:ab:f4:e5:0b:cd:66:52:
9a:e8:c4:b0:40:55:06:92:70:b8:b3:47:7b:df:4c:25:04:da:
4b:f3:ff:ec:00:6a:a7:09:61:e3:25:df:a6:43:5f:ad:43:70:
62:dd:b1:8c:82:f4:9b:80:ab:ca:6a:74:a7:3d:09:d5:2d:ae:
18:2d:c3:cb:a7:73:c1:6e:bf:52:3a:ac:2e:ad:57:e8:c7:e5:
48:88:0f:33:c4:60:f9:c2:4c:8b:5e:47:a8:29:fd:34:23:2d:
d9:d6:b5:d7:a6:91:f5:82:f8:00:5f:79:2a:a3:4f:71:e2:47:
b9:07:69:5d:15:0b:e0:91:af:e5:32:62:07:75:05:8f:bc:18:
0d:29:c1:e6:63:d6:3f:20:e2:5b:44:81:67:e5:38:c6:7d:35:
d7:44:7c:d8
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkyMkQxMTAvBgNVBAUTKDQ1NkM2MDgzNjU4NEU5MEEyOEEyOUQwMjhCNUIyNzYw
MUE5M0Q0NDYwHhcNMjYwMzE1MDY0MzIyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWI2NTUwYS0xNGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApXqAsNu1NYl3s1zDmm5etAwdkOdpal6YjK2kNJW2kR3fsPRDv/65VJ3gdVLu
VETtqISz2m2Nx7lkmnFZOQrtzvc2a+tkfa9V5Nje0x7+t6O9vy55obDCKbCfTBI2
fXXFGMojHhhQnwwP4vWdSZ3tDud803iqtE5STtyXATDEsFBLD7K2/bHAPJ1Jj/Cz
MhRLYHWSFzpIWCSI6Mmqi4mx53BRuvbIylUWRMydhxhW/uqSDJXz6RCq1CXzlWRG
zRqvj54e3u/7mb6EoHASombv/LWVgKlOlixUgJJ9raidd8Fdt1OztqYp9AAeP64c
m4t4EaGinbR+Y/n4EfezFlfKuwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAr5sVe2
/SZcyjTVXiCX2RGseOWdMB8GA1UdIwQYMBaAFEVsYINlhOkKKKKdAotbJ2Aak9RG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTIyRC9GOTExOEQ3Q0ZG
QzIxMUVGOUIyOTVFNDZDNEY5QUUwMi9SV3hnZzJXRTZRb29vcDBDaTFzbllCcVQx
RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JXeGdnMldFNlFvb29wMENpMXNuWUJxVDFFWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODkyMkQvRjkxMThEN0NGRkMyMTFFRjlCMjk1RTQ2QzRGOUFFMDIvQkY3QTkyRTJG
RkMzMTFFRjkxMzFEMDRBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBo99KMA8EAgACMAkDBwAgAQ31NsAwDQYJKoZIhvcNAQELBQADggEB
AJl8ckWEaatdrfOX9EiZ50w/xxo8QmH5Gq29z3RCirZ6gjFaXk8MvkGxrSBON1DC
h5/EMdRVDQYm2jhd6JdMR2jywANwHY+8c4dHKwifzfSRQYWy5/+AL8HQg6C3neH0
O2QJztR7q/TlC81mUproxLBAVQaScLizR3vfTCUE2kvz/+wAaqcJYeMl36ZDX61D
cGLdsYyC9JuAq8pqdKc9CdUtrhgtw8unc8Fuv1I6rC6tV+jH5UiIDzPEYPnCTIte
R6gp/TQjLdnWtdemkfWC+ABfeSqjT3HiR7kHaV0VC+CRr+UyYgd1BY+8GA0pweZj
1j8g4ltEgWflOMZ9NddEfNg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:26:30 2026 by rpki-client