
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/8BC6C2AC9C2C11F1B92931A03611F970.roa
File: 8BC6C2AC9C2C11F1B92931A03611F970.roa (raw, json)
Hash identifier: NOHYV5EXh/5Hnfvd7Mo2ngAzzat7TeZXKluiBHqCeRw=
Subject key identifier: 7B:36:69:BC:68:53:3A:32:E8:C5:38:99:0A:31:D2:57:B4:CE:86:AD
Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Certificate serial: 0120
Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/8BC6C2AC9C2C11F1B92931A03611F970.roa
Signing time: Thu 20 Aug 2026 00:17:36 +0000
ROA not before: Thu 20 Aug 2026 00:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152324
IP address blocks: 163.223.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 00:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Validity
Not Before: Aug 20 00:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a8647a0-c108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:a5:ef:c4:a3:64:2c:4a:d7:bb:7f:52:b7:
ff:f1:49:72:18:15:fd:cf:cc:2a:97:9f:75:c2:e7:
c0:61:b5:d2:6c:cc:90:9b:8f:87:1d:24:c1:37:7f:
6a:26:27:10:dc:94:f4:41:a7:58:74:d2:c4:ab:95:
8d:6e:f0:93:2a:4d:3a:e9:34:7c:75:d3:23:aa:98:
01:f4:44:9c:ba:23:e9:aa:a7:8d:48:e3:a5:11:f4:
ff:ae:7b:e0:82:35:f5:0e:84:3c:fc:2b:94:cb:23:
be:13:02:8a:04:96:42:0d:ab:1c:cc:39:5d:d7:b7:
5b:6f:bc:26:19:d4:46:70:3e:e9:a8:e8:8a:07:c3:
ca:b2:ec:5b:eb:cd:c5:20:5e:72:2f:4b:d9:4c:ac:
2d:95:c5:dc:f5:ff:4d:d3:ea:ad:aa:07:69:b0:c3:
d8:1f:08:a7:ed:1a:7d:7b:63:e5:3b:b3:57:51:34:
f1:5a:2e:7c:de:9e:f2:b9:e7:80:db:f3:60:29:2e:
f2:aa:39:dd:36:a4:ed:98:15:d9:6c:37:e6:e1:9d:
59:67:6d:0a:94:64:0c:53:1d:93:c0:47:e6:55:79:
df:30:41:8e:fa:f1:d7:7c:02:a9:7b:e2:f6:90:d7:
11:70:3e:d3:85:87:b4:ac:2e:69:c4:96:86:71:6f:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:36:69:BC:68:53:3A:32:E8:C5:38:99:0A:31:D2:57:B4:CE:86:AD
X509v3 Authority Key Identifier:
keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/8BC6C2AC9C2C11F1B92931A03611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.216.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:8b:25:18:6b:3f:64:fa:22:e2:8c:27:c6:bd:49:ab:38:69:
33:3a:8c:61:20:e7:56:70:6c:16:e8:08:5d:9c:0f:5b:49:aa:
47:b4:7a:3e:40:e5:b4:4c:11:52:fe:0e:77:f6:a7:15:c9:45:
91:0b:8c:64:5e:5a:49:6f:0d:7b:d5:f4:a8:7e:5c:8d:14:03:
eb:e2:4a:1a:b8:3e:7c:37:65:a2:70:9c:3a:f3:2e:63:db:be:
42:82:2f:9d:42:39:68:56:19:8a:6c:be:a4:a3:96:ba:46:b7:
cb:bd:3c:4e:d1:5a:b7:60:03:9c:7b:0e:49:7d:6d:71:ce:4d:
b0:f4:f1:0d:11:4e:99:41:20:f1:51:5a:63:7f:db:f5:c7:6a:
b1:38:81:8b:5b:2c:33:4a:21:d0:47:d3:dc:77:2f:e7:71:1f:
b6:ec:18:2d:df:4e:9e:ba:eb:34:9f:ed:b4:4b:f1:39:fd:44:
fe:4a:97:d7:4b:0d:a4:15:59:3f:e0:e6:7b:7d:89:5d:cf:f8:
d4:e9:5f:5d:e0:c1:23:a0:8d:59:5a:16:f1:ac:4e:43:46:31:
70:a3:bd:c5:17:40:da:ec:6b:61:fb:8c:5c:9c:d3:a1:f9:9e:
ec:43:47:49:d4:7a:3a:1f:18:0b:4f:56:37:bf:de:26:eb:34:
5a:3d:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 05:42:15 2026 by rpki-client