
$ rpki-client -vvf rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/D0227C4675E111F1AB3948A26FA30FBC.roa
File: D0227C4675E111F1AB3948A26FA30FBC.roa (raw, json)
Hash identifier: NBJ/2fFBDFircpVggVH+QhRnV905PwAGTQ3vrgME5mU=
Subject key identifier: 6E:5F:1A:1D:FF:58:13:81:D5:22:4A:2D:C0:A0:50:34:84:F6:C0:52
Certificate issuer: /CN=A913089B/serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Certificate serial: D5
Authority key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/D0227C4675E111F1AB3948A26FA30FBC.roa
Signing time: Thu 02 Jul 2026 06:54:15 +0000
ROA not before: Thu 02 Jul 2026 06:54:15 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 191.219.160.0/20 maxlen: 24
191.223.240.0/20 maxlen: 24
200.102.224.0/20 maxlen: 24
200.103.160.0/20 maxlen: 24
200.219.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Validity
Not Before: Jul 2 06:54:15 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a460b17-ec7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:03:f1:6f:bf:e3:c6:6b:17:81:07:7b:c6:
01:d1:1e:90:98:9f:3a:56:65:0f:67:05:ff:6b:86:
b3:03:c3:94:18:b0:6d:ce:da:b3:5d:2a:84:84:a5:
bc:b8:4a:0c:99:d2:b7:e8:be:69:87:b1:8c:39:9a:
d5:62:cf:ea:60:0f:26:8c:b2:63:67:86:e4:3e:a6:
2c:7d:d6:30:ef:6d:65:64:82:89:c4:1f:83:1a:0d:
ce:a7:3c:ae:18:59:b4:4f:f6:c4:57:a1:07:c2:f3:
f4:57:e1:4c:28:d0:ad:f0:62:71:ca:5b:86:c1:52:
85:26:f4:ce:cb:ef:a8:f2:ec:42:62:47:7d:c1:4c:
dd:65:89:05:f6:bb:3d:a8:de:39:a9:a0:69:90:05:
27:33:4c:f2:e7:ac:71:6d:4c:ed:fe:fb:8b:65:bd:
b9:cf:37:36:3c:3a:41:c4:3d:d0:62:b1:53:6f:1e:
76:83:6e:d1:e2:20:13:93:90:eb:35:c2:2b:79:36:
ac:10:70:31:89:8c:f3:a6:20:3e:6e:c4:28:42:29:
fd:3c:7c:c2:e9:fe:4e:95:94:c2:e8:e7:50:d7:dc:
95:5b:2b:dd:d3:d6:51:f4:e3:fd:00:78:2f:c8:f6:
a5:fa:81:30:41:d0:bb:b2:1c:92:dc:13:ec:3d:aa:
a5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5F:1A:1D:FF:58:13:81:D5:22:4A:2D:C0:A0:50:34:84:F6:C0:52
X509v3 Authority Key Identifier:
keyid:9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/D0227C4675E111F1AB3948A26FA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
191.219.160.0/20
191.223.240.0/20
200.102.224.0/20
200.103.160.0/20
200.219.64.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:67:c3:79:2a:5a:f4:84:e7:a3:2c:98:13:ed:c7:c1:9a:5b:
08:ef:f2:78:7d:08:c1:b4:7e:83:83:b1:1c:d2:5c:53:56:7a:
b5:0f:12:b0:b1:85:39:0b:38:81:43:95:e0:f4:82:34:38:2a:
cc:89:5a:7c:0e:a3:25:38:d1:b0:e5:3f:47:d0:60:4d:08:98:
7b:13:23:86:ab:3f:94:9f:61:aa:f9:27:d9:13:ea:74:62:5b:
78:e1:bd:c5:83:ef:ed:4f:77:4e:41:f7:ea:03:57:66:1a:db:
09:ab:bc:67:31:c6:09:50:5b:bf:35:74:97:6c:4e:eb:1b:19:
cd:a6:34:b9:d3:09:f4:ab:c5:48:e2:25:44:c0:ff:8b:52:63:
23:7e:f5:7b:4a:5b:5f:4d:a3:59:79:42:5b:ff:d6:82:6b:95:
ae:3d:e5:33:88:fb:73:6a:4e:8c:95:ef:50:10:ba:64:7f:ca:
ff:64:43:04:5c:c1:31:d2:e4:47:41:8c:90:d2:6d:0b:eb:d1:
21:cc:88:9a:7f:c4:30:80:6b:64:a0:7f:a2:37:a7:6d:94:0b:
46:68:53:c8:46:a7:bc:1d:b5:13:df:74:81:dc:9e:3f:c8:a1:
ba:36:69:66:c8:15:5a:4a:98:77:95:d8:c1:27:f6:a2:7b:79:
6a:69:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:50 2026 by rpki-client