
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/52636904771911F083181320C4F9AE02.roa
File: 52636904771911F083181320C4F9AE02.roa (raw, json)
Hash identifier: 1KusZBNNW/qOCnR0kl7JmRQp5eJkrJEh2HYRqvBUy6w=
Subject key identifier: CD:63:8E:1D:1C:CF:13:D8:EA:D5:6F:7B:74:4A:AD:12:E0:76:BF:09
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0C3B
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/52636904771911F083181320C4F9AE02.roa
Signing time: Tue 12 Aug 2025 01:11:49 +0000
ROA not before: Tue 12 Aug 2025 01:11:49 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 401783
IP address blocks: 160.20.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3131 (0xc3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Aug 12 01:11:49 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=689a94d5-94fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:14:fa:ea:1f:62:94:76:dc:8f:ba:69:4b:
bb:83:32:ee:aa:36:08:67:ca:11:e4:53:79:ed:7c:
12:0b:10:a6:09:ab:65:67:61:19:4c:bd:bb:84:1e:
f2:ff:cd:0b:10:65:fd:b4:7e:6e:e8:b7:5b:2a:85:
b3:de:7a:55:2f:47:93:14:b7:15:01:3a:b0:3c:e7:
0d:54:2a:ad:c4:16:9b:8c:76:2e:fc:16:18:05:23:
7e:75:50:c3:6a:54:e7:d6:ed:24:7c:2f:eb:53:a5:
7e:c4:75:da:c5:33:2d:e5:9d:80:59:46:77:75:1e:
0c:04:30:65:a6:f5:cd:8b:b5:1a:46:1a:ef:d6:37:
01:5a:bd:d6:a2:d2:f4:9e:47:da:cd:45:aa:57:3a:
05:97:d1:bb:70:43:b8:09:a1:ed:67:11:cc:3d:41:
7d:2f:bb:28:96:b2:7e:7a:15:f0:6e:f6:68:0d:96:
91:8a:1f:9a:d1:1c:80:45:d5:55:01:bd:72:cc:37:
c3:0c:fd:71:f5:9b:61:fb:ca:d2:6c:c7:75:85:39:
25:df:5c:3e:76:25:f0:df:d2:9b:1f:d9:69:cc:da:
62:95:1a:73:e8:d4:fa:47:70:a9:4a:3b:d6:d8:5e:
32:fb:8f:05:23:59:52:d9:4f:e6:3d:c9:67:12:8c:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:63:8E:1D:1C:CF:13:D8:EA:D5:6F:7B:74:4A:AD:12:E0:76:BF:09
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/52636904771911F083181320C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.44.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fc:c0:34:3b:e9:50:5c:48:17:44:e0:3e:a1:6d:4d:40:d4:
99:f7:62:0c:52:49:08:2c:c7:06:47:12:9c:61:a6:5b:a1:bc:
14:1c:2a:ca:ac:80:ff:4f:3f:6d:51:83:37:c1:65:d2:79:83:
0c:1b:5f:c2:ea:89:85:7d:20:9b:37:65:da:ae:9b:cc:3c:75:
dd:c9:fb:45:33:39:81:3e:34:95:76:3f:40:c4:72:df:7f:23:
06:bc:cb:51:f5:e4:3b:d6:7c:6f:0c:da:44:0e:75:69:f5:45:
54:85:d6:4b:1f:76:70:a6:96:37:0c:60:e3:a7:15:ef:cc:08:
b5:7a:a1:3f:7d:0e:29:55:59:08:a5:46:82:37:16:70:d8:b9:
6f:4c:e1:5f:5d:2e:9b:d3:93:27:58:40:23:17:c7:0a:0b:6c:
a4:b5:8c:b7:21:d0:c8:86:43:c0:ba:66:12:d5:f3:f7:cd:e0:
40:ef:0a:9d:e0:3f:f1:be:ae:c7:ad:6f:0f:78:1c:e6:75:2c:
c1:41:ef:4c:a3:87:f3:92:25:32:56:b0:49:9c:6d:48:7d:2f:
70:fc:63:1d:e0:16:34:b3:bb:63:c3:45:df:93:aa:e7:40:0f:
ff:5c:14:12:ec:bc:d1:67:06:fe:3a:9b:36:d0:6d:55:11:06:
f3:d6:04:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:02:20 2025 by rpki-client