
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/C7A29726A65311F091E2CF10C4F9AE02.roa
File: C7A29726A65311F091E2CF10C4F9AE02.roa (raw, json)
Hash identifier: emjXyY15wJLHzjU6zt0lF1rFFBq+bRVvM3T/XvGCGss=
Subject key identifier: 64:D0:CB:6E:D0:EF:2E:AD:0A:20:01:10:29:49:81:BF:DD:03:F8:2F
Certificate issuer: /CN=A9142F59/serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106
Certificate serial: A7
Authority key identifier: 1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/C7A29726A65311F091E2CF10C4F9AE02.roa
Signing time: Sat 25 Apr 2026 07:43:01 +0000
ROA not before: Sat 25 Apr 2026 07:43:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153689
IP address blocks: 163.223.80.0/23 maxlen: 23
163.223.80.0/24 maxlen: 24
163.223.81.0/24 maxlen: 24
2001:df5:3840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl
rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142F59, serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106
Validity
Not Before: Apr 25 07:43:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ec7085-e66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:1f:b7:00:26:e6:12:74:88:83:94:75:32:
1d:d2:fc:c9:c9:fa:47:b0:63:1e:78:08:ae:24:1a:
b9:eb:ee:7f:cb:b3:ce:dc:52:a6:9a:ae:63:ef:ae:
59:42:79:d8:47:92:74:56:1b:9c:08:de:c1:83:7b:
ea:d5:94:51:2a:89:12:6b:09:76:f9:79:5e:c3:ce:
ce:dc:f7:e6:f9:1c:03:5e:fa:25:4d:77:51:87:a4:
72:a6:2f:3c:ce:07:b8:35:ca:58:68:b2:40:65:ab:
1f:8e:a3:bf:00:85:62:72:1e:77:d2:d4:fb:9b:46:
0d:fa:99:62:20:e5:38:14:27:3a:89:41:0c:94:da:
99:da:93:5c:26:74:7e:19:30:9e:1f:b9:ad:33:01:
f5:a5:e2:19:38:ba:ea:b5:dc:0e:a4:49:45:5c:9b:
2c:a9:2f:14:b1:d5:35:82:b8:4b:a6:93:1d:6c:bc:
84:6d:1f:d3:82:bd:77:84:17:ca:4e:73:41:8f:3c:
d0:9f:8f:07:cf:4d:6f:86:a3:f5:6a:31:88:70:dd:
ed:39:c6:7a:61:0e:3c:80:c1:ee:ed:04:f7:23:df:
38:81:de:46:ed:83:10:69:3e:04:aa:89:6c:bb:cd:
8d:69:26:d4:bd:e7:46:ed:e9:38:8a:5b:7f:cc:f0:
ea:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D0:CB:6E:D0:EF:2E:AD:0A:20:01:10:29:49:81:BF:DD:03:F8:2F
X509v3 Authority Key Identifier:
keyid:1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/C7A29726A65311F091E2CF10C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.80.0/23
IPv6:
2001:df5:3840::/48
Signature Algorithm: sha256WithRSAEncryption
11:a6:18:db:c7:17:cb:73:fb:d7:d2:26:34:bd:94:42:bb:10:
f0:9a:1c:b1:ab:41:0b:b4:ca:34:d9:16:09:a5:6c:ed:c9:a4:
21:24:38:4c:cf:e6:7b:5f:b2:4c:83:8b:a4:db:11:93:11:db:
14:d9:44:c1:81:da:c9:29:80:aa:d9:ca:ee:c9:e6:0e:9e:49:
79:b9:54:e7:48:c6:75:f3:b1:8b:4e:45:77:79:34:74:ce:b9:
47:61:1f:c2:50:23:61:ae:f8:00:ee:09:24:12:de:a0:a8:95:
90:c8:49:20:06:3e:af:3d:4d:f6:ef:12:31:ef:1b:39:96:9b:
6d:a9:ff:f1:0c:51:f0:04:4b:62:2a:e5:6c:c8:c7:30:10:90:
50:f1:fa:ba:76:2c:aa:b0:b4:58:fa:36:d7:26:7a:79:4b:a4:
2f:ba:35:b9:5d:81:3a:f4:d2:37:b2:8c:c1:7f:99:da:99:e4:
71:47:8c:d8:d1:e8:95:0d:84:fa:33:55:76:1a:1f:bc:bb:29:
d4:be:4f:0c:76:2b:83:bd:06:ca:c5:03:de:81:fd:94:0a:df:
5a:74:0c:42:f2:9a:4f:61:e6:ac:e7:ac:b8:cf:cf:3b:13:55:
27:ff:15:88:05:c1:db:00:28:1d:db:bc:ab:2e:a9:31:54:37:
a7:10:ca:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:27:10 2026 by rpki-client