
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/688C64E4A5CE11F1B7F696C43311F970.roa
File: 688C64E4A5CE11F1B7F696C43311F970.roa (raw, json)
Hash identifier: TnghuKyMtC1Zb32Xzx0eNlHuu5Zw4t5WA5aAIzR16zI=
Subject key identifier: 1E:E0:88:1A:90:DB:CC:D1:DA:23:CB:EB:DB:4A:B3:AF:EB:71:F5:75
Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Certificate serial: ED
Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/688C64E4A5CE11F1B7F696C43311F970.roa
Signing time: Tue 01 Sep 2026 06:29:48 +0000
ROA not before: Tue 01 Sep 2026 06:29:48 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 4637
IP address blocks: 163.227.202.0/24 maxlen: 24
163.227.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 13:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Validity
Not Before: Sep 1 06:29:48 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a9670dc-9032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:f8:0d:78:a2:63:e9:20:a7:1c:e5:74:1b:
b5:b6:41:f7:4c:bd:01:29:3e:79:82:4e:be:43:ce:
b0:00:bd:83:cb:eb:2e:4f:b9:9a:9d:1e:ec:ae:dd:
94:3d:de:3d:e8:2d:09:e8:06:39:6d:77:3f:0c:8c:
b5:ce:ec:18:d5:06:09:57:a2:f7:1e:66:12:95:d1:
87:e6:95:69:ae:7c:1e:f7:7d:05:e7:c9:07:aa:09:
4a:6b:31:1a:35:4a:c7:6d:34:46:3f:d2:17:a1:3e:
e1:95:5b:20:e4:21:8d:8e:43:55:3e:6c:2e:44:f5:
21:f9:56:b7:89:5b:91:39:f3:de:cf:2c:e7:ad:ce:
85:ec:9b:69:9e:bb:a9:5b:66:65:f7:c0:bd:7f:ac:
9d:0b:ff:a9:7b:d0:82:ee:50:f6:e1:5d:73:b9:1d:
48:f9:47:cc:05:bd:1a:b1:8d:0d:6b:56:0c:f3:ec:
3c:a7:28:f4:39:6f:86:fb:28:63:8b:2b:74:84:94:
8d:ac:68:ee:81:40:98:26:5f:64:67:52:b0:27:39:
18:b3:41:91:08:26:51:a8:51:05:4f:34:3a:0c:dd:
fe:47:7a:5c:8a:94:18:5f:f2:5c:f5:07:f3:4e:97:
56:12:b3:74:8e:26:5e:37:5c:22:75:e8:51:46:6c:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E0:88:1A:90:DB:CC:D1:DA:23:CB:EB:DB:4A:B3:AF:EB:71:F5:75
X509v3 Authority Key Identifier:
keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/688C64E4A5CE11F1B7F696C43311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.227.202.0/23
Signature Algorithm: sha256WithRSAEncryption
55:a7:c3:ec:85:8e:73:58:55:5c:26:58:6f:4c:6f:c5:42:ee:
67:b1:88:35:bc:e6:09:b6:91:53:8b:b5:22:7d:42:30:ea:69:
9c:bc:a4:cf:dc:35:5f:dc:c0:b8:8d:c1:cb:60:10:a0:cc:84:
59:c5:02:78:2a:53:9e:91:6b:90:de:4f:48:c9:9e:c3:31:f0:
ca:b3:2d:f1:88:b8:f5:39:37:3c:3a:73:71:dd:c7:c7:d8:a7:
57:87:aa:b5:18:00:88:24:ed:2d:19:a7:6f:11:fd:47:10:3c:
b8:bc:b0:b3:e3:7f:cf:ec:75:2f:6f:d0:3a:b4:2f:fa:e3:18:
ff:47:fb:0f:b5:ca:7a:70:72:f7:3c:5f:b9:ed:89:94:d1:5f:
39:2b:5d:26:ab:89:5e:34:42:74:65:27:d1:b9:21:57:38:c7:
eb:42:ee:d5:30:00:27:c6:15:3c:e7:73:66:ac:db:d3:12:68:
41:c8:55:5e:95:24:01:37:b8:b0:60:2f:f1:68:9a:27:41:de:
19:19:f7:36:07:dc:d3:c6:02:17:d8:c1:49:28:f5:c3:14:c9:
a2:16:59:6e:fc:10:d3:d9:a9:5a:39:25:5a:b1:55:77:a6:e4:
15:01:95:08:53:c9:8e:81:e8:6c:6a:3c:11:90:29:be:ab:66:
43:8b:7e:d1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZBNjkxMTAvBgNVBAUTKDNBQTVENzRBNDlGRURFMDgxNzY2Q0RBQzNCRjdEREQw
MzZCQkY5MDEwHhcNMjYwOTAxMDYyOTQ4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk2NzBkYy05MDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1VP4DXiiY+kgpxzldBu1tkH3TL0BKT55gk6+Q86wAL2Dy+suT7manR7srt2U
Pd496C0J6AY5bXc/DIy1zuwY1QYJV6L3HmYSldGH5pVprnwe930F58kHqglKazEa
NUrHbTRGP9IXoT7hlVsg5CGNjkNVPmwuRPUh+Va3iVuROfPezyznrc6F7Jtpnrup
W2Zl98C9f6ydC/+pe9CC7lD24V1zuR1I+UfMBb0asY0Na1YM8+w8pyj0OW+G+yhj
iyt0hJSNrGjugUCYJl9kZ1KwJzkYs0GRCCZRqFEFTzQ6DN3+R3pcipQYX/Jc9Qfz
TpdWErN0jiZeN1widehRRmyrQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB7giBqQ
28zR2iPL69tKs6/rcfV1MB8GA1UdIwQYMBaAFDql10pJ/t4IF2bNrDv33dA2u/kB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE2OS9DQjFDRkU4NDZD
NEExMUYwOTg3MzFEMTNDNEY5QUUwMi9PcVhYU2tuLTNnZ1haczJzT19mZDBEYTct
UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1RRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDZBNjkvQ0IxQ0ZFODQ2QzRBMTFGMDk4NzMxRDEzQzRGOUFFMDIvNjg4QzY0RTRB
NUNFMTFGMUI3RjY5NkM0MzMxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBo+PKMA0GCSqGSIb3DQEBCwUAA4IBAQBVp8PshY5zWFVcJlhvTG/F
Qu5nsYg1vOYJtpFTi7UifUIw6mmcvKTP3DVf3MC4jcHLYBCgzIRZxQJ4KlOekWuQ
3k9IyZ7DMfDKsy3xiLj1OTc8OnNx3cfH2KdXh6q1GACIJO0tGadvEf1HEDy4vLCz
43/P7HUvb9A6tC/64xj/R/sPtcp6cHL3PF+57YmU0V85K10mq4leNEJ0ZSfRuSFX
OMfrQu7VMAAnxhU853NmrNvTEmhByFVelSQBN7iwYC/xaJonQd4ZGfc2B9zTxgIX
2MFJKPXDFMmiFllu/BDT2alaOSVasVV3puQVAZUIU8mOgehsajwRkCm+q2ZDi37R
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:28:57 2026 by rpki-client