
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/51B36E9EF52911F0B0B7B3125D6F56BC.roa
File: 51B36E9EF52911F0B0B7B3125D6F56BC.roa (raw, json)
Hash identifier: +YeqTwufzvgzhnkt/mIw5JG1iBbYnBY3vNzMAfLJODo=
Subject key identifier: 80:5A:76:07:1E:6D:10:4F:E2:03:52:29:F8:D5:AD:C0:5C:25:2D:BE
Certificate issuer: /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial: D6
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/51B36E9EF52911F0B0B7B3125D6F56BC.roa
Signing time: Sun 29 Mar 2026 06:42:04 +0000
ROA not before: Sun 29 Mar 2026 06:42:04 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 10075
IP address blocks: 163.223.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Validity
Not Before: Mar 29 06:42:04 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c8c9bc-4be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:81:08:a4:20:cc:35:3b:7b:84:f2:bf:b3:
5b:e2:7e:13:14:b8:c6:ee:47:22:84:8e:ba:52:02:
a1:71:3f:4f:2e:ec:1b:8b:b4:70:6b:91:ef:81:c3:
f5:43:c6:10:a8:16:38:0e:df:83:5b:43:cd:26:b1:
fe:7f:82:f0:24:a4:16:7a:1a:c5:a7:72:0c:08:25:
a2:09:b0:3f:d5:05:ce:33:94:5a:30:9c:de:ce:02:
33:65:ed:5a:ec:62:93:ee:7d:bc:85:97:ca:78:5c:
a1:17:46:a7:79:41:ff:65:01:92:4f:6d:38:63:07:
e5:d9:d3:1d:14:86:df:65:5c:d4:23:d1:e4:4e:58:
25:2a:74:15:f9:68:24:25:ae:a2:a1:ae:19:3f:8e:
62:b5:4b:e2:29:9c:dc:9d:16:7c:7c:c7:8a:5e:81:
e7:b3:ba:ad:85:93:f4:d4:fc:99:16:f3:dc:19:e7:
ed:25:10:73:08:62:e4:c3:7b:59:98:86:af:c9:49:
fe:89:b9:dd:25:7f:fb:68:57:9a:6a:80:1e:49:30:
92:bd:99:d9:63:45:d6:1d:7e:d1:da:c9:28:8d:17:
11:67:b0:8d:94:5a:cb:ba:34:27:a9:45:af:63:4b:
2d:f4:75:8a:0b:c1:ff:72:d0:55:ba:c7:76:16:de:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5A:76:07:1E:6D:10:4F:E2:03:52:29:F8:D5:AD:C0:5C:25:2D:BE
X509v3 Authority Key Identifier:
keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/51B36E9EF52911F0B0B7B3125D6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.21.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:da:53:ab:83:80:0b:d0:ad:01:7f:89:48:1e:db:1e:6f:1d:
ab:f1:cb:98:66:d6:df:69:5f:4b:6d:b3:29:6a:96:a9:93:aa:
3e:d0:b5:90:3c:5f:2a:56:3a:56:fe:26:92:a4:15:7c:00:67:
fd:63:f5:dd:bb:5f:f5:31:d6:28:84:7f:49:8e:ad:46:05:05:
c9:f9:9c:c7:0d:8d:20:2c:0c:4f:4c:9e:7d:a8:93:a8:03:9f:
de:16:05:d4:c8:1e:d9:37:3e:b7:f6:05:31:7d:33:3b:98:3c:
e1:63:93:a6:33:c5:fc:f3:fa:b9:b3:d1:1d:72:2f:6d:b0:79:
8d:6c:45:87:67:21:d5:d4:2e:11:9a:04:7a:b4:94:06:2f:64:
6e:3c:8a:a4:b4:6f:74:0d:25:81:d5:53:cd:a3:5c:58:40:03:
b2:19:b0:f0:ea:f5:c3:f9:b9:40:89:6e:29:38:a1:8a:78:41:
ea:04:3d:de:1d:09:0a:50:bf:d2:cf:c2:27:38:f1:0c:b9:15:
f8:fa:80:23:15:f1:21:fd:9b:48:68:e9:ef:0b:49:c6:25:b0:
8b:8c:5c:89:4c:cc:3c:5d:d4:3a:2b:e7:eb:ed:fe:0f:5d:d0:
e3:70:ae:f0:9d:ce:eb:f2:f5:c4:54:a9:08:a8:17:e4:1a:5e:
d5:44:1d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:27:10 2026 by rpki-client