
$ rpki-client -vvf rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/54EE8F7615FE11ECAF541012C4F9AE02.roa
File: 54EE8F7615FE11ECAF541012C4F9AE02.roa (raw, json)
Hash identifier: ma3mPLbDDoGF1MegDkOFqkQshwZriofp35ZPlLPNv48=
Subject key identifier: 85:E8:83:B5:74:2D:82:A4:E8:1D:E6:E1:43:2B:D7:0B:49:D0:0C:15
Certificate issuer: /CN=A91592B3/serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028
Certificate serial: 24C6
Authority key identifier: 3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/54EE8F7615FE11ECAF541012C4F9AE02.roa
Signing time: Mon 30 Mar 2026 16:19:07 +0000
ROA not before: Mon 30 Mar 2026 16:19:07 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 9911
IP address blocks: 202.40.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl
rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9414 (0x24c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91592B3, serialNumber=3A5C0813C0FED0A83B3DD01B7A5AE1A130827028
Validity
Not Before: Mar 30 16:19:07 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69caa27b-7a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fa:14:fd:c8:9e:73:27:8e:e9:e9:44:9f:63:
d3:e1:be:dd:0d:c0:78:ac:96:11:b9:5a:3c:75:77:
4b:f9:c2:30:08:9e:4a:86:9d:66:a1:ce:d3:81:c5:
19:47:53:f3:aa:6b:8c:43:26:74:c5:af:4f:1d:c6:
00:ab:aa:47:d6:2c:70:d2:e3:db:22:de:74:60:e8:
a4:b3:83:f5:e1:ba:b2:19:72:28:10:5c:77:ad:f7:
ea:41:12:cf:49:65:b8:58:34:d9:8d:ae:5f:6d:69:
4a:41:d9:af:8d:1b:4d:d4:c2:cb:b0:5c:19:31:ec:
c5:64:8b:f0:83:8d:30:fe:07:dc:a0:cb:7e:8f:68:
95:c4:1a:9b:cd:a7:0a:ca:82:3d:b2:eb:19:bb:89:
68:c4:83:6b:cd:2b:96:7a:b2:77:90:30:52:43:7f:
e2:cb:4f:40:2f:cf:0b:3d:da:e9:62:a3:9a:77:2b:
d0:ab:36:bf:b8:3f:38:bf:f4:01:6f:bc:e9:1e:eb:
e8:ea:e8:0a:16:1f:7c:c4:01:3b:ca:2a:92:e0:bb:
50:ff:4b:62:41:9e:d6:f9:aa:bb:f2:50:2e:09:e1:
ac:57:53:59:f5:1d:14:b9:90:74:c9:57:9f:25:6f:
63:84:8f:3a:70:e3:4d:9b:da:98:de:cb:87:63:be:
f0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E8:83:B5:74:2D:82:A4:E8:1D:E6:E1:43:2B:D7:0B:49:D0:0C:15
X509v3 Authority Key Identifier:
keyid:3A:5C:08:13:C0:FE:D0:A8:3B:3D:D0:1B:7A:5A:E1:A1:30:82:70:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/OlwIE8D-0Kg7PdAbelrhoTCCcCg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OlwIE8D-0Kg7PdAbelrhoTCCcCg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91592B3/8917FB2A5D0E11E5B3BEAD57C4F9AE02/54EE8F7615FE11ECAF541012C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.40.224.0/19
Signature Algorithm: sha256WithRSAEncryption
37:3f:d3:cf:69:de:c2:50:2d:8a:72:4a:4a:98:f4:24:ae:7e:
57:87:af:c7:78:46:c2:00:f9:1f:ff:42:59:18:14:2b:73:3f:
e2:b5:f0:b2:b3:4c:38:40:3e:a1:1c:56:6d:81:ac:6a:a2:51:
8c:c3:9d:b1:25:73:1c:c2:34:ad:de:07:01:83:ab:84:57:c1:
8b:11:fd:3c:5d:60:82:25:d6:b3:35:3c:be:07:c2:8c:96:bd:
92:97:ff:d6:78:c1:26:f2:59:59:08:e0:4d:69:9b:b8:db:aa:
c2:57:cb:fb:57:0c:56:ad:13:82:c6:b4:f9:d5:3e:fd:ef:58:
c9:a6:6d:3f:74:24:4f:a8:08:4f:5e:41:f9:7d:28:dd:df:26:
c8:41:a6:69:ec:2b:92:b9:e7:93:97:99:ed:0d:86:c3:19:bd:
82:40:2f:af:cf:fc:3d:20:5d:ca:a8:74:0c:49:75:80:61:9a:
50:01:21:af:a8:ff:2c:68:7f:9c:6f:92:7a:89:2f:83:10:c4:
6d:c4:46:32:f7:07:28:44:6a:1d:94:9d:0a:21:bc:c3:55:9d:
4f:92:d3:c5:a2:0b:d7:29:a7:54:9f:d3:e5:01:20:72:74:48:
4f:9f:ef:6b:9e:30:36:b8:79:62:04:f9:ec:23:99:a8:0f:74:
16:63:96:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:01 2026 by rpki-client