
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/B0C47BF26CFE11F09B124778C4F9AE02.roa
File: B0C47BF26CFE11F09B124778C4F9AE02.roa (raw, json)
Hash identifier: 5PxBGQIXsJPnr5AM5NEgJvoHi+ZzvnXx1CMn2iVhK2E=
Subject key identifier: F1:09:3E:49:20:26:B3:C7:97:4D:27:CF:A6:55:0F:DA:FF:A7:25:91
Certificate issuer: /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Certificate serial: C7
Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/B0C47BF26CFE11F09B124778C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:00:52 +0000
ROA not before: Wed 30 Jul 2025 04:35:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 163.223.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Validity
Not Before: Jul 30 04:35:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a58a04-4100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:7b:86:0a:17:26:11:99:ca:2c:e8:3b:4c:
2e:6b:89:d2:e6:7f:4a:8c:ac:ea:64:5b:5e:7b:1d:
5b:dc:6f:de:36:87:24:8f:4b:1b:60:af:1d:02:59:
5e:85:cb:e1:45:15:33:b1:3e:99:a6:eb:ea:07:75:
50:88:6c:a7:73:4c:ce:c0:dc:b1:78:e2:03:75:b5:
76:5f:70:46:2d:84:27:c0:de:14:79:d0:1d:40:3f:
d6:fb:87:8d:b5:bf:1a:82:88:cf:cf:82:ea:36:e7:
37:95:21:12:3a:31:d8:b9:ef:8e:a8:99:4c:19:e6:
1b:f7:af:4e:8f:24:df:d2:94:cd:52:95:7f:1b:4f:
63:15:c9:e5:35:c1:4d:e5:1b:03:cb:a1:a6:1d:07:
1d:8e:fb:1e:05:71:d6:47:76:a3:3c:82:1c:f7:d4:
10:8f:fc:06:78:30:9e:5a:5c:47:ba:53:bd:6f:39:
40:9a:c5:a3:a2:dc:d0:b8:9d:ef:c0:bd:a7:79:d7:
0b:7c:95:99:3e:da:64:e8:f0:8d:b0:e2:aa:e5:93:
97:3d:8e:9e:21:8e:f8:12:70:b3:f0:7a:23:a5:3e:
6b:ed:89:37:ad:ed:72:8c:3a:22:ff:8a:31:23:e9:
a1:f5:bd:f9:1a:a7:87:8f:84:29:6d:7a:cb:a3:bd:
ab:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:09:3E:49:20:26:B3:C7:97:4D:27:CF:A6:55:0F:DA:FF:A7:25:91
X509v3 Authority Key Identifier:
keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/B0C47BF26CFE11F09B124778C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.106.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:84:c3:ed:c0:d1:69:c9:39:53:ef:2e:0e:02:2b:d6:6e:c7:
09:0d:31:03:59:64:7c:56:2c:04:e6:0f:07:b1:d2:53:6b:bd:
bc:0d:a8:cb:5d:a6:ee:3e:a7:da:20:3a:bb:70:43:db:77:16:
5e:1d:c8:38:b6:ce:b8:9e:af:6b:da:44:75:97:53:ac:dd:55:
f6:29:ad:24:a7:d4:b5:46:20:82:65:1a:f1:14:87:52:88:0b:
92:a5:49:2b:ec:8d:eb:09:09:65:1e:23:c4:09:b6:9b:0d:1a:
c5:30:8c:27:81:1f:40:ca:a9:6c:b4:5a:d2:f0:ae:0e:3a:88:
62:f1:38:54:47:2c:a5:c0:94:85:60:5e:98:39:0d:e1:5a:f3:
a1:7b:8a:53:f2:96:ff:8a:7b:3f:21:6f:1b:5f:45:78:4d:cf:
b9:b7:4c:6f:b2:48:45:64:6f:ef:e6:55:b8:00:c8:02:94:50:
de:de:cd:a7:74:4e:03:e9:0b:b7:95:89:93:61:ab:e8:44:1e:
b5:3b:1e:a8:0b:40:c8:3e:09:fe:d2:04:40:97:6c:dd:fd:cb:
7e:7b:d8:bf:ba:37:cd:d1:f7:90:84:82:15:93:5d:7e:56:44:
9d:14:7f:13:68:c5:07:dd:72:bb:ba:c8:77:71:61:18:66:fa:
ac:6c:df:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:34:54 2026 by rpki-client