
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/6BD4BB16F83111EFBA64911FC4F9AE02.roa
File: 6BD4BB16F83111EFBA64911FC4F9AE02.roa (raw, json)
Hash identifier: 6s9v+4to3xQAtqSl3C8OB5mvof4ZuN1zgnPAVV1Aeng=
Subject key identifier: 6C:09:43:0C:B6:53:6E:F0:8A:3F:12:D8:D9:21:66:CB:B4:77:AA:9F
Certificate issuer: /CN=A9142A75/serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
Certificate serial: DF
Authority key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/6BD4BB16F83111EFBA64911FC4F9AE02.roa
Signing time: Fri 03 Apr 2026 06:41:45 +0000
ROA not before: Fri 03 Apr 2026 06:41:45 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 153568
IP address blocks: 163.61.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl
rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A75, serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
Validity
Not Before: Apr 3 06:41:45 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cf6129-6675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5a:01:46:c5:78:ce:88:e0:4d:f5:a2:8d:b8:
1b:c0:7a:21:81:d0:61:b9:73:68:22:96:4b:f2:b7:
22:dd:a9:f2:78:15:40:7a:34:65:b8:cb:6d:e9:4c:
a8:87:7b:d3:f3:5d:65:53:5e:31:a4:67:db:07:85:
90:d7:eb:6b:62:d8:0a:e1:bd:bf:77:f0:7f:94:77:
76:fa:4f:6e:5c:6b:a1:34:15:1e:92:e6:1f:5d:34:
95:e9:3a:a1:20:82:25:78:82:f1:7c:74:ae:6f:8b:
d1:ab:9c:96:1e:c9:0b:ee:c6:f0:75:25:c2:01:5b:
12:1f:f2:02:50:ba:8c:d0:8e:91:e6:70:7f:f9:47:
ff:26:30:1d:32:97:f5:25:b8:f8:18:f8:38:0d:97:
87:46:8f:5e:d9:a0:2d:f5:78:dd:f7:57:d5:9f:56:
12:86:7f:7d:ce:0b:c0:d8:97:5f:62:ae:3e:97:5f:
d5:82:ad:7e:b9:f5:44:78:ab:d2:c1:50:44:ac:bd:
63:38:4e:5b:3d:89:aa:99:53:53:b7:5e:c0:ae:6e:
80:34:d2:e9:52:2e:97:39:cd:d3:70:f4:c4:c7:d5:
57:0a:d7:22:63:d5:39:01:29:1b:2c:98:8f:a3:90:
dd:9c:1a:38:b5:4d:77:b1:fe:ba:0a:e7:7f:1d:3d:
b2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:09:43:0C:B6:53:6E:F0:8A:3F:12:D8:D9:21:66:CB:B4:77:AA:9F
X509v3 Authority Key Identifier:
keyid:BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/6BD4BB16F83111EFBA64911FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.188.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e0:d3:54:bf:bf:76:70:33:ba:8c:ef:e3:16:2c:c8:d4:d7:
1d:ba:5f:5e:d5:c6:00:fb:cd:33:bf:32:07:7f:0a:51:3f:5a:
56:76:b2:e3:81:25:3a:62:0a:37:10:1d:31:4f:f1:f3:90:61:
d9:e6:02:96:8e:c7:5f:0d:00:0c:c5:2b:ff:ce:6e:3f:a3:b8:
b1:75:73:b1:b0:89:71:9c:9c:a4:d5:f4:c7:c2:94:0a:c9:a5:
39:93:a9:5f:c1:6e:2e:fd:62:ea:83:50:a4:26:4d:0e:f6:66:
fa:e3:2b:b7:08:1f:01:76:c1:12:86:cb:0f:e1:3e:26:82:61:
25:ab:f3:28:8d:a5:3d:cb:34:eb:20:b2:0d:14:07:4e:15:21:
4f:b1:20:9b:5f:4a:bd:2e:ba:27:c2:e4:ae:db:c2:16:5a:08:
2c:28:b7:98:03:24:fb:c2:68:6a:a5:7b:34:6f:b4:f0:82:ed:
da:bc:d3:1a:ed:dd:9a:6f:b2:f7:53:18:f3:9a:83:3a:de:1e:
df:c7:3f:3e:2c:14:ba:16:35:5a:f5:df:c8:f9:a0:09:36:29:
15:52:79:91:fc:40:8d:be:39:7a:3f:a0:8b:91:4f:6c:b1:71:
32:48:4b:ea:6e:a6:49:66:1f:29:ce:9a:d0:5e:6b:ed:7c:f6:
41:7d:0d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:51:25 2026 by rpki-client