
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/AD1172A4A46511F1B6EFAD894111F970.roa
File: AD1172A4A46511F1B6EFAD894111F970.roa (raw, json)
Hash identifier: MeDX9xtee7Adps8/vHko4TVMAm5zSooxiRA8qORbSQU=
Subject key identifier: 61:44:00:EA:0D:21:E0:86:C0:48:F9:28:DE:6B:E1:97:E3:22:85:A1
Certificate issuer: /CN=A9152C54/serialNumber=93C006ACEA6B50759A3C7DC33EF84B47A7117D68
Certificate serial: 27
Authority key identifier: 93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/AD1172A4A46511F1B6EFAD894111F970.roa
Signing time: Thu 29 Oct 2026 07:19:14 +0000
ROA not before: Thu 29 Oct 2026 07:19:14 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 154854
IP address blocks: 163.52.42.0/24 maxlen: 24
163.52.43.0/24 maxlen: 24
2001:df7:a8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.crl
rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 09:56:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152C54, serialNumber=93C006ACEA6B50759A3C7DC33EF84B47A7117D68
Validity
Not Before: Oct 29 07:19:14 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ae2f372-2c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:e1:a5:44:c6:ef:26:64:61:36:49:77:01:
14:a2:7b:3c:26:98:f7:eb:7e:26:93:5d:37:4f:2c:
d1:18:c3:e0:53:0b:cb:4d:5b:73:f4:7a:0e:e2:48:
3b:40:fe:42:02:02:e1:89:94:d0:9d:5a:bd:02:cd:
e8:a2:28:0f:c3:0b:2f:08:bc:dc:54:17:be:48:6d:
4d:9b:b4:0d:da:e1:dc:70:4c:03:5a:6a:cc:85:8d:
76:b7:c8:aa:d1:f4:0a:19:4f:bd:e4:7c:ba:47:dd:
45:66:e4:75:5f:ae:ea:0b:4f:71:a7:54:bc:67:2d:
30:07:ff:14:a8:9e:19:37:04:94:ea:43:d7:5f:6c:
5a:d2:0c:c2:2a:0b:05:4f:5a:41:56:43:0b:6c:4f:
03:1c:16:cf:f6:3f:ab:1e:d3:69:b2:a5:31:14:9e:
35:90:c0:69:07:97:8b:c5:31:1a:fd:ce:5b:5b:6b:
f5:9d:9e:2c:e4:c9:64:1f:16:b4:05:e2:8e:83:14:
53:72:86:6c:1b:c4:f2:d4:a1:21:2b:2e:78:a4:9b:
fb:5f:fd:ba:ff:21:5b:88:17:91:78:e9:7c:3f:c4:
a5:4a:ed:cc:a9:68:96:a2:bf:ae:47:6f:ca:49:4c:
2e:24:fc:6e:88:aa:9c:27:f1:09:41:c0:8d:25:f3:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:44:00:EA:0D:21:E0:86:C0:48:F9:28:DE:6B:E1:97:E3:22:85:A1
X509v3 Authority Key Identifier:
keyid:93:C0:06:AC:EA:6B:50:75:9A:3C:7D:C3:3E:F8:4B:47:A7:11:7D:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/k8AGrOprUHWaPH3DPvhLR6cRfWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8AGrOprUHWaPH3DPvhLR6cRfWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C54/91741220A3D111F19D82FD635311F970/AD1172A4A46511F1B6EFAD894111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.42.0/23
IPv6:
2001:df7:a8c0::/48
Signature Algorithm: sha256WithRSAEncryption
7e:a6:d7:ac:96:eb:66:a8:a6:d6:71:b0:2b:72:9a:81:3f:fc:
3d:ea:87:04:92:f8:aa:d0:bb:c2:12:ea:45:31:b9:cf:8f:81:
01:84:0d:ab:76:54:4c:f5:b0:21:e1:f6:dc:b5:5c:f3:a8:77:
ca:71:28:db:45:ea:32:8f:4d:b8:87:94:8e:1f:99:48:e0:94:
3b:b0:80:33:84:ad:51:e3:12:35:79:d3:02:95:23:78:7e:40:
76:f2:e9:91:4a:ef:36:fd:ea:43:41:95:cf:f5:d3:6e:c9:c5:
c6:2e:1d:df:28:56:0d:7e:d3:e5:68:c6:dc:79:88:ed:58:71:
2d:a2:ae:e8:55:a7:1f:31:30:0c:95:da:d3:ef:f7:b2:39:60:
25:0e:ee:9a:10:1a:b2:8e:e3:04:cb:c4:a4:f0:67:be:6f:75:
ef:25:66:95:f5:17:50:0d:f0:56:e9:05:db:1e:f6:c5:9f:52:
a5:a1:c3:7e:9f:18:af:8d:f2:a3:b4:21:d9:5b:6a:68:2a:bf:
38:95:26:50:8c:1b:b6:1e:27:06:ec:c7:7e:ba:89:41:95:5f:
7c:c9:44:8b:8c:a1:ff:a6:4b:2c:ba:f3:22:29:6a:ec:0a:1f:
8e:84:86:7d:ef:84:61:79:2c:7c:95:ad:6c:79:dc:98:a0:12:
6e:cb:89:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:28:36 2026 by rpki-client