
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/F5CE8322AA8A11F0B2091087C4F9AE02.roa
File: F5CE8322AA8A11F0B2091087C4F9AE02.roa (raw, json)
Hash identifier: LlZ/G8D7YTOcHGumExQMeBbX8YRDAKE+PcECfDsL5jc=
Subject key identifier: CE:23:DC:B1:72:6C:78:6F:63:C8:5B:81:39:8E:37:4C:DA:4D:AC:6C
Certificate issuer: /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
Certificate serial: B5
Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/F5CE8322AA8A11F0B2091087C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:00:17 +0000
ROA not before: Thu 16 Oct 2025 12:23:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153366
IP address blocks: 163.227.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl
rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
Validity
Not Before: Oct 16 12:23:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a589e1-6820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:7d:f7:81:69:c7:01:b3:05:fa:fd:e1:76:
fa:ff:b9:c6:fa:71:b6:55:94:82:19:71:0d:f2:ce:
06:10:22:68:47:59:a8:06:c4:16:4b:17:77:77:ad:
a7:4a:f3:b0:bf:8c:84:b4:00:4b:fa:bc:30:e6:77:
1c:fe:6e:e7:d2:3f:68:75:2f:2c:ca:6d:28:5f:8e:
46:c0:90:51:67:70:1b:e8:11:93:3d:b6:a1:44:75:
0f:bf:26:81:bb:8b:35:ad:e9:05:79:47:53:df:68:
90:23:41:0e:9b:b8:ef:65:fa:0c:ba:3c:01:6e:cf:
38:d0:c3:5f:51:86:ee:7f:07:19:d5:cb:1e:2c:57:
4c:72:e3:95:30:86:59:b3:53:28:35:1b:da:e0:dd:
92:ef:c3:6d:a2:40:28:e7:71:db:5d:53:6e:36:4b:
d0:72:b2:fd:75:5a:18:ff:3e:19:94:92:c6:c3:88:
99:35:90:4c:a1:f8:f6:88:a1:d5:ca:cd:80:d7:49:
03:eb:4b:54:b6:58:a1:fe:f3:e4:e6:e2:6b:30:99:
36:b2:7c:dc:9b:ee:48:48:89:45:47:16:07:2e:4b:
3d:b7:14:ac:7f:28:e5:f1:3a:d2:a9:22:a8:35:7d:
ff:65:34:31:b3:fc:a0:bb:63:19:02:9f:73:d2:d0:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:23:DC:B1:72:6C:78:6F:63:C8:5B:81:39:8E:37:4C:DA:4D:AC:6C
X509v3 Authority Key Identifier:
keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/F5CE8322AA8A11F0B2091087C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.88.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:62:2c:d9:3d:47:ee:b2:00:1a:5b:3d:4f:82:59:8c:5d:90:
a2:c4:7c:0d:b5:2b:74:36:e0:f8:66:48:31:58:40:1b:42:8c:
40:f8:df:19:03:64:9b:6a:c0:fe:9f:9e:47:dc:8b:4e:c4:3e:
4d:83:e8:fd:2d:72:c7:08:ba:8c:a1:f2:56:98:f4:db:8b:ff:
f8:7c:c6:c8:fa:4c:48:41:e7:63:4f:45:d5:6e:04:c9:9a:3e:
09:a8:da:c1:e3:f6:ad:d4:7d:5c:15:4e:ae:61:9d:9a:d3:c5:
8d:81:f7:52:39:61:0d:4d:a1:b5:4f:6d:e8:e4:51:41:32:f0:
5e:29:a4:ea:7b:e2:8d:ab:18:05:93:c5:c4:9b:3b:7a:7c:03:
9b:3e:6c:d0:80:ca:0c:7b:2e:dc:09:f1:c7:cb:c8:ce:e4:e5:
26:79:4a:eb:70:37:a9:e0:4c:61:e1:da:bb:c4:bf:cd:ca:e7:
6e:66:f0:aa:92:04:33:b0:11:c0:54:22:63:41:36:79:f7:cb:
f9:32:8a:f2:2a:62:5d:85:4b:36:c9:84:1b:02:08:d7:37:b3:
51:bf:f1:ed:f0:ed:51:cb:5e:83:fe:71:84:13:9b:f7:c2:b3:
dd:2b:82:4c:9d:cc:c4:18:a2:56:a1:f3:75:bf:b3:a5:af:86:
5a:1f:15:4a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI2QkMxMTAvBgNVBAUTKEQ4QkVFOTY5NUQ0M0IzMzlFNzU2M0YyNDEzQjcyMzE5
RDE2Nzc0QjEwHhcNMjUxMDE2MTIyMzQ1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODllMS02ODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAutZ994FpxwGzBfr94Xb6/7nG+nG2VZSCGXEN8s4GECJoR1moBsQWSxd3d62n
SvOwv4yEtABL+rww5ncc/m7n0j9odS8sym0oX45GwJBRZ3Ab6BGTPbahRHUPvyaB
u4s1rekFeUdT32iQI0EOm7jvZfoMujwBbs840MNfUYbufwcZ1cseLFdMcuOVMIZZ
s1MoNRva4N2S78NtokAo53HbXVNuNkvQcrL9dVoY/z4ZlJLGw4iZNZBMofj2iKHV
ys2A10kD60tUtlih/vPk5uJrMJk2snzcm+5ISIlFRxYHLks9txSsfyjl8TrSqSKo
NX3/ZTQxs/ygu2MZAp9z0tDnZQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM4j3LFy
bHhvY8hbgTmON0zaTaxsMB8GA1UdIwQYMBaAFNi+6WldQ7M551Y/JBO3IxnRZ3Sx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjZCQy9BMDMwQ0QzMDIw
NEMxMUYwOTYzRUI1NzVDNEY5QUUwMi8yTDdwYVYxRHN6bm5WajhrRTdjakdkRm5k
TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJMN3BhVjFEc3publZqOGtFN2NqR2RGbmRMRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEI2QkMvQTAzMENEMzAyMDRDMTFGMDk2M0VCNTc1QzRGOUFFMDIvRjVDRTgzMjJB
QThBMTFGMEIyMDkxMDg3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBo+NYMA0GCSqGSIb3DQEBCwUAA4IBAQBcYizZPUfusgAaWz1PglmM
XZCixHwNtSt0NuD4ZkgxWEAbQoxA+N8ZA2SbasD+n55H3ItOxD5Ng+j9LXLHCLqM
ofJWmPTbi//4fMbI+kxIQedjT0XVbgTJmj4JqNrB4/at1H1cFU6uYZ2a08WNgfdS
OWENTaG1T23o5FFBMvBeKaTqe+KNqxgFk8XEmzt6fAObPmzQgMoMey7cCfHHy8jO
5OUmeUrrcDep4Exh4dq7xL/NyuduZvCqkgQzsBHAVCJjQTZ598v5MoryKmJdhUs2
yYQbAgjXN7NRv/Ht8O1Ry16D/nGEE5v3wrPdK4JMnczEGKJWofN1v7Olr4ZaHxVK
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:51 2026 by rpki-client