
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/6D8A3DC29DCD11F0A412CC62C4F9AE02.roa
File: 6D8A3DC29DCD11F0A412CC62C4F9AE02.roa (raw, json)
Hash identifier: KteD+gnwfbH1TZydXUFqfSWq7gf/LG4wlbVUwsA7oxE=
Subject key identifier: 94:53:5B:16:43:AB:32:9D:28:90:E3:D3:9C:27:7A:4F:F0:9B:CB:EB
Certificate issuer: /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
Certificate serial: DC
Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/6D8A3DC29DCD11F0A412CC62C4F9AE02.roa
Signing time: Fri 03 Apr 2026 06:42:14 +0000
ROA not before: Fri 03 Apr 2026 06:42:14 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 149507
IP address blocks: 163.223.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl
rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170927, serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
Validity
Not Before: Apr 3 06:42:14 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cf6146-bee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:31:fc:cd:fb:59:6e:3c:17:32:0e:73:7e:
c0:c8:d1:75:4a:dd:af:91:e4:2e:57:3a:b5:67:58:
56:9f:f9:00:5e:db:c2:5f:4b:fc:4b:88:6c:b7:9d:
47:b2:b2:6f:c7:e9:00:3e:51:e1:08:ce:6b:23:29:
b9:91:aa:6a:a1:c3:92:2a:13:3d:51:c5:1e:92:1d:
30:77:eb:47:7e:07:a8:38:e0:5b:c2:55:12:64:8e:
47:27:1a:d8:71:81:f4:64:d5:38:c8:9c:7d:5f:59:
b0:1d:10:6d:11:2e:a9:7c:dc:6b:4e:01:33:a4:c7:
86:e9:fb:cb:24:d3:f2:58:6f:6f:ed:a1:98:73:00:
aa:9d:06:5c:30:50:ee:b9:16:7e:f2:bf:94:0e:f9:
7e:3f:f8:78:91:2c:e2:a7:6f:20:e8:26:ec:0c:30:
43:1a:26:d3:96:85:8a:a9:a8:4e:a0:43:cf:b7:02:
53:d6:a5:a2:c4:d3:12:57:26:6f:3f:df:66:9e:e7:
21:84:82:0b:87:a2:7e:52:cb:c7:63:28:d4:48:6b:
aa:f1:dc:60:c8:37:ce:71:b2:a6:3a:c3:ed:f5:55:
99:97:6f:44:5b:28:13:4c:dd:91:b7:31:d5:7e:9e:
22:b3:35:7d:d5:df:fb:f8:1f:ea:ef:d1:09:33:e8:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:53:5B:16:43:AB:32:9D:28:90:E3:D3:9C:27:7A:4F:F0:9B:CB:EB
X509v3 Authority Key Identifier:
keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/6D8A3DC29DCD11F0A412CC62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.120.0/23
Signature Algorithm: sha256WithRSAEncryption
12:89:34:4d:86:87:2b:2a:f1:2b:1e:5c:68:48:f1:97:c3:1d:
b8:37:74:af:6b:23:dd:a8:7e:ec:b7:1e:3c:58:f2:34:c1:f8:
31:7b:97:93:1f:4d:21:ea:2f:ef:13:98:ef:88:be:5c:87:2a:
24:19:10:03:8b:39:02:6c:44:a6:eb:db:37:eb:7f:f5:54:9a:
56:99:a9:7c:59:cc:a1:11:77:43:3a:2e:f5:9c:d5:e3:e0:55:
91:73:4b:b7:0e:c0:69:8f:0c:66:4d:ad:7b:64:de:66:2b:13:
bc:86:c3:1d:eb:0e:dd:b0:9e:cd:58:68:84:86:57:14:94:5c:
cf:6c:7c:9c:0f:cf:4b:fe:c3:25:30:89:75:71:1b:23:c3:bd:
ba:f8:0e:17:cb:9c:65:d6:e6:ea:7f:2a:67:ec:b3:71:71:6c:
88:ca:2d:e4:4b:b1:50:e6:9a:4b:81:17:2e:1e:28:96:36:d5:
5e:56:01:ff:6c:38:b4:09:88:ba:4e:9e:ba:12:40:23:4a:d7:
84:dd:4b:39:4a:ee:63:78:13:bc:5d:e3:68:78:5d:61:c8:5f:
e5:2b:7e:c2:cc:4c:a3:5e:6c:67:ce:ed:45:af:60:ea:02:97:
e9:94:68:3f:40:89:7a:9a:8b:19:92:ea:c2:f7:a7:b7:24:97:
76:25:b5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:20 2026 by rpki-client