
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/F5FC39B600F811F0BD702A69C4F9AE02.roa
File: F5FC39B600F811F0BD702A69C4F9AE02.roa (raw, json)
Hash identifier: 4J8/FZ6Z4aWtn3x7hmcoO5/BToWEDFdORTF4LOMQboM=
Subject key identifier: 36:43:CD:FB:0C:25:21:FE:0E:26:BB:A3:EA:80:1A:8C:36:5C:B7:8F
Certificate issuer: /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Certificate serial: F7
Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/F5FC39B600F811F0BD702A69C4F9AE02.roa
Signing time: Thu 07 May 2026 06:39:51 +0000
ROA not before: Thu 07 May 2026 06:39:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32135
IP address blocks: 163.223.40.0/23 maxlen: 23
163.223.40.0/24 maxlen: 32
163.223.41.0/24 maxlen: 24
2401:f460:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Validity
Not Before: May 7 06:39:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69fc33b6-72cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:04:a9:af:50:c2:f0:ad:0e:ea:1a:0b:13:
51:b9:18:5c:e9:7e:2f:cb:89:b0:79:0a:4f:6a:0e:
1a:76:ff:4b:4e:00:85:3e:bd:16:80:82:65:cb:53:
b9:b7:07:9a:84:17:cd:4e:84:fb:43:64:fa:70:fd:
48:bb:93:1a:38:a2:5f:69:d6:55:e4:9a:f8:35:2d:
6e:f7:c0:1d:ba:8a:05:40:3a:c6:a0:83:d4:30:60:
ce:07:53:82:1c:dc:b7:50:ee:44:26:5d:b2:d2:8a:
a9:3f:84:0e:a2:c6:3f:f0:1e:a9:71:a2:19:5a:20:
3b:54:40:0c:69:79:42:af:41:89:a1:0e:09:6e:61:
52:00:da:5c:aa:0f:0b:f8:55:49:f7:40:65:de:8c:
e8:e5:0e:ab:0a:53:59:3e:4a:44:bc:5a:89:7a:d1:
ed:ba:a5:12:4a:7d:ca:ad:28:ec:ee:1d:99:6b:bf:
5b:bb:6b:2f:a5:15:a7:21:2a:ff:f5:f1:37:5c:83:
54:d2:ff:6a:b6:78:ab:ce:b6:e5:ab:ce:50:26:2c:
a2:8b:9d:16:66:17:02:30:3c:68:67:51:92:ad:4e:
9b:28:cb:e1:8d:b4:f3:92:89:32:81:48:6b:ba:cd:
b3:8c:4e:66:9d:61:a6:71:14:dd:80:82:f8:12:d4:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:43:CD:FB:0C:25:21:FE:0E:26:BB:A3:EA:80:1A:8C:36:5C:B7:8F
X509v3 Authority Key Identifier:
keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/F5FC39B600F811F0BD702A69C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.40.0/23
IPv6:
2401:f460:f000::/48
Signature Algorithm: sha256WithRSAEncryption
30:b2:59:f9:12:0c:77:dc:01:ed:2e:34:69:ea:4d:bd:6d:bd:
88:4d:26:57:aa:31:97:4a:3b:81:ac:b2:71:41:41:55:18:10:
0c:59:64:10:c1:28:fe:6e:d8:3c:46:e4:df:b0:d7:21:fa:37:
a7:20:a3:f3:08:55:59:90:46:16:00:cc:14:ef:cd:47:64:37:
55:ba:b9:55:fd:06:06:fa:5e:c8:52:ef:54:c4:b0:3e:7f:9f:
da:73:d8:bf:13:34:fc:eb:fa:9e:d5:23:08:d5:70:8c:03:1b:
b5:ca:34:28:2e:48:0c:bf:35:58:00:ae:d4:55:10:6a:18:65:
9c:4d:c9:be:83:62:77:d0:af:a0:29:6a:02:84:f3:72:f1:e5:
fa:5d:48:25:bc:38:83:c5:a5:35:89:95:e8:fe:a3:99:a8:48:
14:19:45:b9:41:81:7b:5a:a9:3e:ce:ad:ee:d7:2a:71:70:ed:
5c:38:43:4c:e6:fc:43:ca:f2:e1:f5:e8:9f:e2:b0:c4:ae:9d:
6d:cf:26:f7:92:21:63:64:90:2d:f2:d9:04:1c:6a:b8:de:8d:
8e:a8:9e:2e:41:91:17:c6:4e:0e:f1:32:00:32:a0:9a:36:34:
4f:c8:93:43:fa:f1:e0:17:d3:30:a6:e2:35:2d:ef:81:aa:36:
fd:8d:e3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:43:27 2026 by rpki-client