
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/563F3D581F3C11F09F3C7F40C4F9AE02.roa
File: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (raw, json)
Hash identifier: jqaS9O87XNAGjnOYKmiPW3sMHJfZOBNM9M+7d9FRgko=
Subject key identifier: 5D:6C:26:90:E1:B1:FD:5F:5D:B8:26:AE:B9:5E:2A:F9:6B:C7:07:FD
Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial: EC
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/563F3D581F3C11F09F3C7F40C4F9AE02.roa
Signing time: Sat 21 Mar 2026 06:43:09 +0000
ROA not before: Sat 21 Mar 2026 06:43:09 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 202736
IP address blocks: 163.61.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Validity
Not Before: Mar 21 06:43:09 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69be3dfd-859e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:b6:0c:e7:fd:d2:b6:58:41:b5:94:37:53:
d4:ab:0c:14:bb:77:41:79:bf:d2:cb:8b:7a:fc:31:
bb:7a:11:7a:8b:6a:f2:d0:b1:f5:8e:9d:08:2f:3f:
d6:49:4a:5f:e0:b2:0d:27:79:63:0b:3d:e0:9c:d6:
3e:c8:2b:50:15:e4:bb:51:25:d4:03:36:ae:d6:a2:
6c:8a:c9:ff:18:3a:19:19:c4:30:ba:61:f4:ed:56:
52:35:d4:cc:dc:e3:cd:a0:db:35:92:49:34:ea:9b:
7d:38:2f:c5:99:9c:8f:c0:05:71:c9:2a:ee:70:32:
0a:ed:26:0f:b7:fb:3d:d5:d2:7d:03:d2:11:f9:93:
d6:8a:ef:52:11:78:2b:f1:db:e1:b2:4a:35:06:4e:
bc:09:41:3d:c0:12:5b:38:63:1b:ff:8d:62:19:2e:
f1:4a:99:58:62:7b:1d:ff:b1:e0:db:be:fa:27:32:
4a:40:7c:a4:e0:70:c9:e6:81:50:98:02:97:63:d4:
97:33:b2:55:f7:73:c4:97:7a:47:5b:6c:f5:ec:28:
41:80:69:e8:64:36:38:07:f3:46:66:21:7b:bb:92:
b7:6f:78:77:75:42:26:7b:60:48:f7:83:b3:15:4f:
7c:b8:ba:0b:1c:81:ed:45:33:0b:a9:a0:15:ea:41:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6C:26:90:E1:B1:FD:5F:5D:B8:26:AE:B9:5E:2A:F9:6B:C7:07:FD
X509v3 Authority Key Identifier:
keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/563F3D581F3C11F09F3C7F40C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.208.0/23
Signature Algorithm: sha256WithRSAEncryption
35:70:5b:54:f2:70:c4:1e:f4:13:3e:cd:44:06:0e:53:85:c6:
09:a2:41:43:e8:ba:a6:ae:82:5a:57:c1:c2:06:1f:d5:ac:fb:
70:4b:fe:9c:2a:fd:d0:3f:8e:70:5e:91:c4:b9:f3:27:b7:58:
3c:ee:24:12:67:87:0b:fb:c2:2d:54:5f:02:b8:b4:73:9e:53:
0b:8d:74:36:dd:d9:68:39:b1:c0:fc:76:ef:13:a7:9b:6d:94:
10:7e:3e:c7:82:d7:32:4b:5b:de:f5:89:b7:db:ef:a4:6f:65:
ce:ac:15:b7:ac:c0:71:89:39:9a:be:00:f0:51:83:09:f8:15:
6f:7d:df:e5:09:4b:ea:e8:f6:5f:43:0c:f0:b9:02:20:32:a9:
42:d8:d0:59:b7:4c:89:2b:18:71:b2:83:e4:b7:cd:8b:15:e7:
ba:44:05:eb:89:1f:a6:75:6b:7a:77:34:55:69:0f:f3:ec:41:
0d:18:a9:49:1a:8c:57:6d:87:b0:d8:d0:28:19:86:be:75:74:
4f:a7:a2:0b:34:3a:3b:d4:75:36:6a:77:a2:d5:51:74:c0:20:
3b:34:78:ab:43:d1:de:8e:4e:ee:9b:f3:4b:55:3d:df:2f:73:
12:f1:b0:91:53:f2:f0:5b:5d:25:c9:f2:9d:b7:61:dc:ec:43:
ad:28:29:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:20:53 2026 by rpki-client