
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/5B397E24366311F1AC0E8358CB833773.roa
File: 5B397E24366311F1AC0E8358CB833773.roa (raw, json)
Hash identifier: nwPobXS7W1wWosbYbCWUb5AAym8wIe2TZ784CHrdP8E=
Subject key identifier: 13:71:DF:77:B2:05:B4:F5:FF:D8:34:24:CE:C5:4F:21:04:0E:66:C2
Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial: 2350
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/5B397E24366311F1AC0E8358CB833773.roa
Signing time: Sun 12 Apr 2026 11:32:59 +0000
ROA not before: Sun 12 Apr 2026 11:32:58 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 137425
IP address blocks: 59.153.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9040 (0x2350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Validity
Not Before: Apr 12 11:32:58 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69db82ea-bde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:03:06:77:86:b4:98:2d:71:db:15:89:91:30:
35:8c:e4:ea:ca:4c:ae:8c:26:e9:54:98:9c:03:e4:
3b:3a:42:81:ee:f6:4e:19:f3:c8:10:49:d3:38:2c:
cc:10:ac:a8:8a:4d:27:52:b8:68:8a:e1:94:76:21:
66:9e:67:29:ec:e6:52:a6:37:54:51:1e:93:90:ca:
ec:90:bb:0d:5c:29:49:ff:ae:f5:7f:87:ad:2d:37:
b4:5b:e8:41:fb:d5:19:6f:69:84:1d:89:8f:2d:79:
aa:b5:50:36:e3:1a:07:4b:e8:03:b2:3e:f3:e9:8e:
22:ec:2e:ff:a2:21:c4:f1:10:a9:5d:f6:bd:79:5f:
1c:3d:23:80:4e:0f:88:23:9a:ce:c7:de:8c:bd:f5:
3a:fb:20:15:cf:95:96:d2:ce:87:92:f4:f8:48:22:
6a:32:99:9a:e7:07:15:a3:89:7d:4d:3a:4b:7e:9a:
d6:80:1d:63:bc:40:d5:9a:7d:77:56:87:b9:19:52:
9e:f1:87:4b:fc:ef:c4:98:03:1a:f7:59:d4:9d:51:
86:4d:23:e1:8b:31:8d:93:d2:c6:ac:12:8d:51:c1:
38:1e:48:a9:76:62:bf:66:10:2c:a5:32:71:f8:6f:
f0:99:26:08:d6:e1:fa:ed:32:52:11:2f:2b:af:3a:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:71:DF:77:B2:05:B4:F5:FF:D8:34:24:CE:C5:4F:21:04:0E:66:C2
X509v3 Authority Key Identifier:
keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/5B397E24366311F1AC0E8358CB833773.roa
sbgp-ipAddrBlock: critical
IPv4:
59.153.28.0/23
Signature Algorithm: sha256WithRSAEncryption
39:55:a9:78:5b:1f:f2:d0:45:ae:19:19:5a:6b:d7:7d:11:84:
c6:b1:d0:d5:bc:3e:d6:bd:d6:ed:0e:b2:3c:19:de:f9:65:0a:
7a:d9:ed:d8:12:9e:10:f0:ce:a2:4f:c3:91:51:5b:39:34:a2:
f5:33:be:a7:0c:a4:ee:f1:51:f9:6c:26:e2:63:71:6c:99:e1:
0a:6b:7c:45:04:39:5d:04:69:2e:e8:4f:49:f5:5a:ed:06:aa:
33:26:90:d8:a3:ad:e4:f6:26:6f:de:ec:32:d7:d1:23:45:4e:
3f:da:02:e1:11:5f:57:e6:bf:d3:cd:bd:56:1c:54:b2:1b:63:
a0:1d:3d:fd:fc:5d:11:ea:13:f8:1a:74:ba:0a:db:3a:5e:b6:
2b:33:57:f9:01:78:85:73:9f:c8:fe:65:b5:4c:3d:c9:b2:e4:
eb:29:3b:05:f5:11:8e:6b:d8:f0:fa:c3:5e:20:74:6a:e3:4d:
7f:e0:bc:77:3a:55:e1:87:0e:37:1f:ab:7f:cf:9e:54:2d:6f:
f3:98:64:83:f8:79:a2:8a:6d:9d:2c:ff:60:d5:c8:36:f0:0a:
b5:d2:50:f9:13:88:2d:40:cd:62:e0:8d:f5:15:79:1e:40:db:
78:46:75:c8:b9:b9:5d:2d:9c:ba:14:42:f5:43:a4:47:ec:31:
fc:00:2a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:35 2026 by rpki-client