
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/5089C6286C4C11F090164A17C4F9AE02.roa
File: 5089C6286C4C11F090164A17C4F9AE02.roa (raw, json)
Hash identifier: GYHTAdaOp/TQbDKQVoyv85ekSsTsDhy4TbpP60/juk4=
Subject key identifier: 05:C5:63:BF:46:46:CF:1F:07:B3:D8:3D:7B:6E:D2:CD:5E:C5:02:A7
Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Certificate serial: C3
Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/5089C6286C4C11F090164A17C4F9AE02.roa
Signing time: Thu 25 Jun 2026 08:39:43 +0000
ROA not before: Thu 25 Jun 2026 08:39:43 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 163.227.202.0/24 maxlen: 24
163.227.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Validity
Not Before: Jun 25 08:39:43 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3ce94f-822d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:e2:aa:41:53:a1:2d:04:b8:da:0d:eb:42:
3a:d7:de:b2:ab:e1:78:e6:ba:35:aa:b1:68:6e:31:
4d:76:b3:1c:e6:ce:21:c7:dd:e2:9c:9e:08:df:bf:
28:65:4f:bc:2c:a3:2f:11:0e:08:ef:27:e4:31:b2:
80:7d:5d:a9:35:40:2c:ba:dc:a2:97:46:a0:e8:9b:
09:ac:42:9d:66:70:b9:5e:79:56:18:e1:62:a5:0f:
bd:a4:f2:a5:0d:1b:56:81:57:31:7a:01:26:a4:1e:
d5:d9:d8:0f:3d:fb:b8:48:95:7e:c3:26:1d:52:cd:
08:24:56:2e:42:a5:ad:25:fb:01:4e:da:55:32:9d:
b6:a9:6f:d7:61:71:3d:ce:40:d6:d4:e9:a0:9c:8d:
b2:29:4a:95:8a:47:49:6f:ab:7e:6e:b6:c2:e5:8b:
97:d7:00:c3:f4:73:9d:ea:ec:88:7b:36:8f:7e:fe:
c9:46:92:4d:ae:6e:a1:52:7f:f2:77:d2:a7:61:b4:
4c:1e:51:e4:20:22:3e:1d:b5:8a:e3:e5:61:b3:b2:
63:f8:e0:9a:49:71:00:28:bf:33:2e:11:13:7a:ef:
af:8e:d1:32:b2:61:b7:50:90:8e:b1:2e:8b:60:e8:
a9:22:59:00:3e:82:9b:ef:fa:4e:2b:33:89:97:86:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C5:63:BF:46:46:CF:1F:07:B3:D8:3D:7B:6E:D2:CD:5E:C5:02:A7
X509v3 Authority Key Identifier:
keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/5089C6286C4C11F090164A17C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.202.0/23
Signature Algorithm: sha256WithRSAEncryption
af:2b:e5:79:96:87:82:93:d8:96:0f:0f:11:4b:75:97:23:69:
00:0c:b2:7d:ec:ce:2a:a5:5f:28:d0:07:cc:6a:d0:b7:f8:12:
e8:27:95:66:50:ae:6b:97:ac:2b:1c:71:c4:0f:25:74:d8:82:
b1:4e:37:af:51:04:33:83:e8:85:1d:6b:42:25:39:45:83:a5:
e7:bf:c7:bd:1d:bd:cd:bb:e4:34:a2:93:8a:03:8b:e1:e5:65:
7c:3b:24:9d:b5:f0:e4:78:f5:c0:97:f0:fb:57:4f:13:1b:0a:
39:de:7d:71:17:78:49:9d:46:3c:ca:45:26:ef:2b:66:5b:5a:
7f:ff:32:3e:6e:ce:c8:92:54:10:ed:9a:23:88:70:cf:16:91:
69:61:b5:55:13:46:75:2f:7d:5b:52:9b:8f:63:42:89:21:bb:
4f:5a:28:bf:cb:13:1e:f4:59:05:22:c0:ef:c4:16:b7:ab:a4:
5e:3b:ff:2e:e9:1c:6f:78:3c:9d:38:47:bc:1c:fe:2a:67:0c:
53:62:27:17:81:f2:41:c4:8e:d8:20:a8:81:99:72:2d:51:ed:
37:f1:2b:0e:8d:3f:f6:9d:13:5e:05:5f:3d:ab:83:43:0b:47:
b1:5b:6e:e7:1d:dc:af:d6:8e:a3:bd:47:57:44:14:37:48:db:
52:18:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:59 2026 by rpki-client