
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/C2E1583EECFA11EFA881E216C4F9AE02.roa
File: C2E1583EECFA11EFA881E216C4F9AE02.roa (raw, json)
Hash identifier: jTQKPLGkqI6hmZ4YsmcAwkWRvhQzIWW2T5De8EQkVwk=
Subject key identifier: F2:B6:33:22:01:AE:9F:4B:36:92:17:CE:7F:B3:E1:9E:C2:EA:9C:DF
Certificate issuer: /CN=A9192C72/serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68
Certificate serial: ED
Authority key identifier: 36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/C2E1583EECFA11EFA881E216C4F9AE02.roa
Signing time: Wed 29 Apr 2026 07:41:10 +0000
ROA not before: Wed 29 Apr 2026 07:41:10 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 135310
IP address blocks: 163.61.106.0/23 maxlen: 24
2401:ee60::/32 maxlen: 32
2401:ee60::/34 maxlen: 34
2401:ee60:1000::/48 maxlen: 48
2401:ee60:1001::/48 maxlen: 48
2401:ee60:1002::/48 maxlen: 48
2401:ee60:1003::/48 maxlen: 48
2401:ee60:1004::/48 maxlen: 48
2401:ee60:1005::/48 maxlen: 48
2401:ee60:1006::/48 maxlen: 48
2401:ee60:1007::/48 maxlen: 48
2401:ee60:1008::/48 maxlen: 48
2401:ee60:1009::/48 maxlen: 48
2401:ee60:100a::/48 maxlen: 48
2401:ee60:100b::/48 maxlen: 48
2401:ee60:100c::/48 maxlen: 48
2401:ee60:100d::/48 maxlen: 48
2401:ee60:4000::/34 maxlen: 34
2401:ee60:8000::/34 maxlen: 34
2401:ee60:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl
rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C72, serialNumber=3616E01DA3317F09EECA98E7BC754CBC990D7D68
Validity
Not Before: Apr 29 07:41:10 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69f1b616-32da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:90:66:7f:02:4b:7b:87:08:9a:8e:ea:9e:
cf:4f:fb:24:b2:82:4f:15:0d:55:30:92:9d:b1:9d:
0f:36:65:5f:10:6d:98:76:82:3b:27:e0:c6:4a:ff:
dd:b7:7e:dd:02:fa:84:ff:0e:18:56:56:41:aa:b1:
25:5d:1e:22:fa:84:63:ed:c9:e3:f0:bc:6a:79:1a:
df:46:fc:26:ec:09:2b:25:f4:0a:40:dd:11:14:0f:
2a:e4:d8:33:b5:3c:00:c4:0e:51:21:68:43:96:f0:
9e:4b:e1:11:9c:88:0e:ef:44:16:dd:49:54:bb:23:
0e:54:ca:dc:36:12:e7:60:3e:77:af:f3:81:98:a7:
1d:ea:a9:e1:81:94:13:78:15:08:d0:bd:88:52:9e:
0e:f7:84:76:9b:9d:84:76:8d:7a:b3:1f:3f:30:a9:
26:ee:0a:51:26:48:18:02:4d:22:b5:19:e8:8c:5f:
d1:a0:dd:49:85:16:96:e9:1b:a4:f9:61:98:ab:8a:
15:ea:7c:3b:2d:f7:29:d3:04:bb:32:00:03:ae:06:
7a:c8:49:8a:16:1c:3a:22:af:0f:f7:12:26:09:54:
7b:7f:74:bb:63:04:ee:31:43:18:46:6b:91:82:d2:
aa:1c:1b:cb:92:b8:6d:c3:c8:62:2d:30:07:56:29:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B6:33:22:01:AE:9F:4B:36:92:17:CE:7F:B3:E1:9E:C2:EA:9C:DF
X509v3 Authority Key Identifier:
keyid:36:16:E0:1D:A3:31:7F:09:EE:CA:98:E7:BC:75:4C:BC:99:0D:7D:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/NhbgHaMxfwnuypjnvHVMvJkNfWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhbgHaMxfwnuypjnvHVMvJkNfWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C72/9D5B5156ECF911EF93A2A213C4F9AE02/C2E1583EECFA11EFA881E216C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.106.0/23
IPv6:
2401:ee60::/32
Signature Algorithm: sha256WithRSAEncryption
63:e0:f0:33:37:74:46:0e:47:c6:5f:29:bd:2c:8e:9a:b8:12:
bb:d0:49:9b:0c:66:dd:d3:9f:ad:be:34:d1:2d:81:d8:0f:6c:
32:70:9e:e9:c4:75:ff:0f:e1:ec:3e:e1:17:80:58:4e:b8:7f:
00:25:28:ee:5f:b6:58:30:9d:3a:9a:1a:73:f9:42:c4:d8:a2:
cf:ca:2e:e6:9e:59:2b:26:e3:54:8f:b3:68:6d:7a:94:fa:f2:
9b:53:3e:86:1f:37:2c:0a:d0:ab:3c:a2:18:f7:c8:ed:6a:27:
14:8c:ed:1a:a8:98:b7:cc:34:75:33:ec:c9:5e:98:18:a5:fe:
7b:02:12:f0:6e:68:82:74:12:56:7a:86:de:a5:ad:fe:0c:5e:
89:57:da:8d:36:f5:bd:20:b9:1c:da:5a:76:0e:cd:34:e9:f4:
10:eb:29:3b:e7:d4:86:6b:13:91:33:7d:64:18:42:f4:d4:57:
42:3a:ec:8a:a2:58:e4:46:92:69:9e:e5:e5:89:4b:29:d9:13:
1a:ab:18:67:3f:00:ea:e8:fe:fa:4f:e0:7e:cb:c2:61:87:32:
7e:55:0f:b2:06:6e:e0:b6:96:a9:bc:36:7d:02:b0:39:57:3c:
cd:29:65:4f:46:2b:c7:8c:ed:b4:f4:f7:f5:78:47:02:9a:fd:
94:6a:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:31:13 2026 by rpki-client