
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/53B7196A627611F187FA49308B47A888.roa
File: 53B7196A627611F187FA49308B47A888.roa (raw, json)
Hash identifier: /0+V+2mNbQO3yIRgng3bkOu+Q6a16sPfs1xG0zllPzQ=
Subject key identifier: BB:C8:0D:F7:21:7A:51:8E:8F:33:B6:01:C3:A2:0A:A1:3D:CD:90:4E
Certificate issuer: /CN=A9120656/serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826
Certificate serial: 85
Authority key identifier: 19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/53B7196A627611F187FA49308B47A888.roa
Signing time: Sun 07 Jun 2026 13:39:38 +0000
ROA not before: Sun 07 Jun 2026 13:39:38 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 154311
IP address blocks: 138.252.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl
rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120656, serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826
Validity
Not Before: Jun 7 13:39:38 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a257499-6fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:e1:45:2d:e3:24:52:d1:9d:74:b1:d8:7e:
a4:4a:39:a1:68:0f:4d:6d:95:e6:e7:45:d0:98:7b:
59:9f:2a:13:9b:e4:a5:b0:60:a8:f6:fa:1e:4e:87:
90:ac:87:78:c8:da:29:a7:7e:cd:22:5b:74:8b:72:
50:8f:87:03:f1:5b:82:44:f8:c4:31:8f:d4:88:21:
cb:ab:d0:7c:0e:2a:cc:6e:ff:3e:3a:ae:96:a4:65:
7e:c9:ee:c5:48:f8:66:5b:95:4f:a9:0a:71:b0:c1:
a6:98:2e:37:e9:ff:ed:fe:0f:29:c0:61:96:c5:3f:
9a:3c:f4:d9:69:d2:7c:fe:40:fd:e9:8c:94:a7:66:
43:c7:b7:71:0d:ac:4a:2c:07:63:bc:f7:32:c1:e5:
e4:11:97:62:65:36:93:50:03:46:e0:01:b8:62:5e:
be:d7:c2:58:6c:64:ae:02:0e:92:8d:ee:46:52:79:
d9:4f:23:7d:5b:12:41:7d:b9:20:77:3a:c7:f8:8c:
31:72:fa:47:5a:a7:93:21:61:ef:2a:f0:d3:6f:f0:
21:7d:bb:82:f5:d1:f0:c9:b9:c3:44:6f:4b:3b:e8:
fe:c4:f3:2a:ad:30:d5:0c:eb:0c:47:7c:4a:e3:d4:
ba:aa:a2:bf:ce:d4:03:7a:2b:8c:2d:28:d3:92:8a:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C8:0D:F7:21:7A:51:8E:8F:33:B6:01:C3:A2:0A:A1:3D:CD:90:4E
X509v3 Authority Key Identifier:
keyid:19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/53B7196A627611F187FA49308B47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.88.0/24
Signature Algorithm: sha256WithRSAEncryption
51:2e:a8:bb:cf:cc:01:c0:d3:5c:9c:15:0a:20:b7:fc:aa:f1:
96:e9:02:1d:d7:4e:13:55:d8:ab:98:9c:29:f0:a8:2d:23:12:
05:86:79:17:c3:86:f1:7c:11:22:66:b6:53:a8:b2:4a:b9:cc:
69:0d:da:13:70:85:9d:7f:d6:89:f1:36:84:8b:78:b4:e3:7c:
59:0f:b5:aa:02:e0:e0:74:1f:e6:ee:e7:11:0e:9d:f2:de:73:
93:aa:f6:db:bc:93:5e:e8:ab:af:30:24:e0:9f:e2:ea:fe:df:
a4:38:66:da:ab:66:8d:1e:5e:e0:d6:f2:6e:70:94:92:d6:dd:
ae:8a:25:82:b9:d1:1f:8b:f7:e3:99:86:ec:20:2c:8e:21:d8:
9d:7d:db:c2:43:fc:27:bc:dc:66:85:8f:e4:bc:82:57:f5:87:
3c:15:a3:83:9a:b7:20:19:aa:02:29:e1:e4:8c:9c:8a:76:24:
92:58:6d:07:cd:c6:a5:21:ac:39:24:9c:ec:91:3e:2b:b6:3b:
40:15:38:21:88:30:c3:66:2e:23:ca:ce:4a:a1:0a:a9:de:da:
ff:ff:78:8b:aa:01:60:1b:99:41:36:a2:b5:2a:31:ac:55:13:
9b:d1:2e:df:9b:70:0c:4f:a0:ad:4d:22:d9:83:0c:bd:96:06:
30:37:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:19:58 2026 by rpki-client