
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/5089C6286C4C11F090164A17C4F9AE02.roa
File: 5089C6286C4C11F090164A17C4F9AE02.roa (raw, json)
Hash identifier: PG7OBR6GyNLrIjZOfwPBfDBaGVKv/qZwCkbhTbs1CAg=
Subject key identifier: C0:30:0B:84:A4:9F:50:90:46:8A:FA:F4:DC:05:78:F4:B8:7A:37:15
Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Certificate serial: 83
Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/5089C6286C4C11F090164A17C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:07:01 +0000
ROA not before: Tue 29 Jul 2025 07:21:08 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 163.227.202.0/24 maxlen: 24
163.227.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Validity
Not Before: Jul 29 07:21:08 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a58b75-bf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:42:f1:ce:b3:af:78:dc:ef:73:1e:61:01:
f4:2d:ba:97:fa:30:63:b4:c2:da:3c:7c:da:51:08:
bc:d2:09:fe:20:4c:4e:90:0a:7d:57:b7:9a:23:36:
18:e3:62:bf:3a:05:36:e6:a0:e2:09:6e:50:a0:ad:
24:06:4e:ae:a8:4d:10:7c:63:d6:32:64:33:57:14:
30:5c:4d:37:55:d2:05:a6:f3:fc:49:d7:71:46:af:
74:cc:20:b8:2c:17:f0:1a:8d:ef:92:e9:53:2d:7f:
6b:88:7d:c1:94:6f:2a:27:59:51:db:0c:f4:7a:d7:
83:bd:f3:e9:56:5c:ff:84:63:c0:db:a3:60:60:23:
26:01:c6:cc:dd:06:c8:28:ee:7c:e7:e4:b5:96:da:
5d:e8:85:62:82:88:0d:12:44:31:11:d4:df:cf:9a:
8d:2e:70:29:10:e3:22:aa:a4:e9:b4:ba:84:4f:21:
05:8c:3d:48:a1:44:90:9b:66:9d:9e:63:2c:4f:04:
85:96:58:7e:68:7e:30:45:5a:ed:a0:7f:f4:8a:1b:
08:20:95:e1:7e:dc:00:91:90:f2:21:e3:58:20:a0:
e6:86:0d:6b:ee:1a:1b:22:28:af:ac:fa:25:0f:36:
c5:de:4e:bc:d1:ad:01:6a:5a:c2:72:ae:ef:7e:db:
0a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:30:0B:84:A4:9F:50:90:46:8A:FA:F4:DC:05:78:F4:B8:7A:37:15
X509v3 Authority Key Identifier:
keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/5089C6286C4C11F090164A17C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.202.0/23
Signature Algorithm: sha256WithRSAEncryption
68:ed:58:96:4b:e6:1b:ae:b5:cd:a8:00:a2:ae:38:7a:68:b5:
d1:b4:fe:ba:36:2d:c9:62:86:82:1c:78:69:81:dc:5d:aa:72:
3c:fe:17:d9:8e:c9:22:62:73:f1:5a:65:9a:db:19:42:2b:df:
64:18:6f:95:d4:4b:2d:f4:43:dd:bb:6c:ab:2a:c0:03:75:82:
3c:03:9f:35:5b:21:81:d4:00:cc:80:33:e8:c5:08:38:fb:76:
51:c3:ee:7c:aa:5f:1e:21:ab:3b:6d:98:17:da:f5:d1:de:ee:
dc:eb:23:54:7f:30:34:d6:8a:c5:53:c9:11:08:4b:3d:89:71:
9c:c3:ab:4b:25:de:df:c5:eb:df:26:05:46:06:38:61:ac:0c:
dc:50:da:34:95:e6:b1:87:43:0c:e1:f9:51:e2:10:3d:66:6c:
b4:a1:81:c8:0d:76:86:88:3d:c3:f0:9c:5d:a0:35:0b:52:57:
d2:ac:48:fa:a4:89:86:ed:83:e1:72:73:34:37:83:26:c7:cc:
86:1c:4b:0c:1b:77:05:88:48:2e:8c:a7:34:47:64:ed:3d:cd:
62:b1:6a:3f:19:e4:fd:2a:0a:73:74:ac:e8:37:d6:2e:2b:08:
7a:8f:d7:45:d9:e4:f3:be:bc:58:6b:82:44:1a:db:7b:a8:bb:
38:65:18:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:19:55 2026 by rpki-client