
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/C865C1BC8D2E11F0A977AE41C4F9AE02.roa
File: C865C1BC8D2E11F0A977AE41C4F9AE02.roa (raw, json)
Hash identifier: Fw/j+y8H8YzLuAy+NNQ6vU7kAdtmWkerdqp60DAL/h4=
Subject key identifier: 1B:A9:E0:77:D2:18:98:4F:FB:0E:0D:71:D6:D8:2C:AD:5C:6E:70:6B
Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Certificate serial: AB
Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/C865C1BC8D2E11F0A977AE41C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:27:14 +0000
ROA not before: Mon 29 Sep 2025 02:50:50 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 153836
IP address blocks: 163.227.185.0/24 maxlen: 24
2001:df5:77c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Validity
Not Before: Sep 29 02:50:50 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a58222-5501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:f1:af:b2:af:47:85:f8:90:da:47:cf:48:
3c:b8:3f:88:65:5f:24:8c:63:cc:fd:24:79:96:78:
1d:b5:62:bd:ba:8b:6e:f3:fa:22:87:fe:a3:cc:2c:
47:26:e0:20:32:62:88:af:45:37:48:5e:eb:f5:93:
81:f9:8c:dd:54:c7:f8:f7:c9:5b:20:95:36:83:0c:
5f:c3:2f:8e:d6:23:27:7e:be:44:7f:e5:5d:db:13:
99:03:d2:98:7e:24:11:cb:b4:1c:16:ed:a9:a6:44:
03:bb:e4:00:de:7f:b4:9f:26:9f:76:05:a5:33:f6:
8a:b7:f9:5d:45:95:9a:16:0a:99:ed:c5:9f:82:20:
1e:de:42:25:11:08:cd:01:cc:d9:77:fc:2a:a9:e6:
e2:cb:2f:62:2e:c9:73:0b:c2:b6:66:7e:c2:70:cb:
d6:c6:db:4c:6e:a8:20:05:bd:8b:f3:1d:7f:36:c4:
61:70:26:d6:52:0f:df:42:df:0d:97:69:c8:36:7b:
22:9a:94:ec:2b:ea:3c:56:e8:53:53:dc:6b:71:ba:
fd:6d:fa:6f:63:bb:15:2a:eb:93:0d:4a:51:14:63:
96:af:ef:5f:c6:44:4b:d4:f5:76:5a:35:31:d0:94:
0c:0a:35:62:9c:4a:8f:a5:18:e2:4a:ef:0a:a5:1d:
aa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A9:E0:77:D2:18:98:4F:FB:0E:0D:71:D6:D8:2C:AD:5C:6E:70:6B
X509v3 Authority Key Identifier:
keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/C865C1BC8D2E11F0A977AE41C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.185.0/24
IPv6:
2001:df5:77c0::/48
Signature Algorithm: sha256WithRSAEncryption
c3:fe:45:17:a8:84:0e:0e:74:d1:00:9b:1b:87:f2:3e:af:20:
0c:c2:cf:2c:9c:ea:ae:35:fb:fd:0c:53:0f:ec:38:73:21:e6:
e8:4c:3f:58:3b:db:20:b2:43:32:6d:da:1e:a8:a1:af:45:44:
f5:cf:f9:ce:9b:93:63:de:f6:63:c5:12:9a:00:36:5d:ce:88:
9c:f5:32:dc:15:c9:28:34:58:54:94:2f:bb:a2:9a:d0:34:14:
80:8e:2d:e7:de:a6:e8:c2:92:6c:90:84:82:7e:ce:74:fd:6d:
c5:b3:7d:79:41:a3:9f:18:e5:56:d0:69:c2:e4:3b:5f:5b:c1:
f1:f0:8a:4d:63:95:bd:5d:ce:d9:eb:38:34:78:c3:96:04:29:
63:a9:59:ff:81:32:31:58:56:a1:c6:2a:fa:8e:c9:16:ed:90:
0a:7b:13:64:89:84:9c:21:c9:ee:98:31:07:a3:2a:7d:a5:90:
05:39:8c:10:3f:17:99:52:91:20:44:70:f0:f0:04:d4:7a:1c:
f7:34:b4:9d:1e:7f:bc:6f:2d:b0:62:fc:f7:5f:c0:4c:e7:cb:
c6:61:09:57:6c:33:0d:ac:92:89:4d:37:aa:e1:0d:1f:89:17:
4b:40:94:3f:6a:15:64:57:2d:01:50:0a:3d:89:87:b3:5d:ab:
d7:74:79:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:54 2026 by rpki-client