
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/C511A0AC8B1211F1A6305EFC3311F970.roa
File: C511A0AC8B1211F1A6305EFC3311F970.roa (raw, json)
Hash identifier: kN/ivaGsWqIUrlhkZSoC5N3qdIumYbcYX0mc+fcOaPs=
Subject key identifier: E2:F5:18:A7:BD:81:4E:06:B3:7C:75:83:BC:2E:BF:C3:C9:06:33:1B
Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Certificate serial: 0112
Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/C511A0AC8B1211F1A6305EFC3311F970.roa
Signing time: Wed 29 Jul 2026 06:00:16 +0000
ROA not before: Wed 29 Jul 2026 06:00:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 163.223.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 06:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Validity
Not Before: Jul 29 06:00:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a6996f0-7441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:15:77:ff:24:fe:42:43:1a:04:ce:c7:ff:
b5:73:c7:f6:86:57:fe:8f:be:32:9f:57:cd:9d:fd:
82:9f:11:69:aa:6f:7d:01:24:ac:d1:d5:7e:1b:5f:
ff:ac:0a:21:a8:1b:c0:75:40:d0:96:40:d0:6b:3a:
86:a3:9c:30:85:cc:6d:ea:d3:22:8c:66:13:1a:09:
d9:00:f4:e8:79:f1:d5:03:73:7b:72:63:0f:02:35:
b1:4a:e3:e8:da:4c:7e:7a:e2:91:29:20:57:b3:dd:
ae:a7:fa:d1:78:81:51:d9:9e:cb:1c:8d:f1:e0:03:
3d:15:80:27:6f:80:ba:4e:8d:34:d2:64:e8:6e:61:
8a:8b:63:f6:d6:c6:84:b2:c4:48:d4:f3:12:8c:66:
51:44:67:5e:59:97:48:bb:4f:9e:10:9d:48:e3:3e:
65:5a:26:3e:df:36:de:f8:a1:96:56:50:81:0c:ef:
b4:e6:a1:be:84:8e:e9:94:fd:33:38:89:4a:2f:e9:
2a:77:90:2d:32:99:c0:5a:80:10:74:e0:e9:07:cf:
d6:2f:65:23:2d:97:f4:9b:d6:c8:e1:57:05:75:5a:
4e:64:93:c1:fa:b7:af:b7:31:7c:f8:d7:77:c4:58:
76:7b:3e:77:b7:71:7a:4d:c0:86:29:30:53:b3:8d:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F5:18:A7:BD:81:4E:06:B3:7C:75:83:BC:2E:BF:C3:C9:06:33:1B
X509v3 Authority Key Identifier:
keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/C511A0AC8B1211F1A6305EFC3311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:05:f0:9c:c1:84:44:a1:84:8a:8d:55:1e:6d:07:a7:7f:d2:
d0:3d:07:90:ec:a3:25:12:04:12:b1:bb:7a:0b:76:db:53:1c:
61:4b:b6:3e:09:bc:57:03:01:e3:98:f6:81:59:87:86:25:69:
d8:ad:00:f7:df:60:9e:51:e7:61:e4:cd:24:0d:bd:8c:b9:5d:
70:d3:6f:9e:08:c5:f5:52:95:5c:56:b0:82:16:da:26:8e:64:
61:75:2e:13:20:25:b6:03:e5:71:10:a2:42:dd:59:a3:ea:9b:
1d:28:6b:ac:1e:7b:45:f1:49:49:0e:62:e6:47:6d:22:7f:0e:
31:bd:f0:32:28:30:fb:eb:c8:b0:ab:30:1a:92:c9:86:0f:6f:
66:62:27:d5:a0:1e:03:c0:d1:45:52:73:e9:28:7f:89:f2:b1:
78:86:78:e2:3f:3a:5c:64:58:95:91:22:98:cc:18:e1:c8:93:
6b:b8:81:13:61:5d:e3:7d:c7:53:0b:ca:0d:61:73:b9:57:e8:
f6:09:9f:e5:49:83:3b:40:68:6f:42:42:f8:f7:c1:e9:84:48:
fd:b9:da:75:ce:df:cc:de:34:d7:e9:23:3d:69:3e:a0:d9:5f:
b7:a9:47:77:fc:5c:9e:9a:fd:08:ec:ae:c2:9a:31:c7:00:d2:
8b:71:37:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 13:40:46 2026 by rpki-client