
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/53AA1B3C1B7511F0A0944466C4F9AE02.roa
File: 53AA1B3C1B7511F0A0944466C4F9AE02.roa (raw, json)
Hash identifier: DfkuV9nM3HNeo7drTwq3TAT7e54gjfOZNrgu9TW48Co=
Subject key identifier: B5:C8:9F:12:61:AB:54:77:AB:5B:0F:E7:84:40:5A:F5:E6:6A:F9:74
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6ED1
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/53AA1B3C1B7511F0A0944466C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:33:42 +0000
ROA not before: Fri 02 Oct 2026 15:33:42 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153713
IP address blocks: 163.223.152.0/23 maxlen: 23
2001:df5:43c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28369 (0x6ed1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:33:42 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfced6-ec21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:28:e1:12:48:48:1d:33:50:86:cd:a1:4e:
1b:e5:d8:6b:35:5b:e9:88:29:85:70:33:7b:7f:a9:
f7:92:5f:82:fe:5e:f0:a0:43:3c:38:65:9f:cc:3a:
30:9b:d6:19:33:4b:25:37:51:08:2f:09:9a:4b:2b:
00:3d:5b:71:05:7c:63:33:47:be:50:34:4b:63:cc:
10:0c:48:20:62:e5:b9:14:90:af:fd:6f:ed:e5:6d:
eb:29:b4:e7:22:2b:76:cd:25:4f:6f:91:e0:fe:b3:
d7:90:d4:3c:31:f7:dd:42:62:7d:ff:be:01:9f:b3:
b0:64:2b:5f:41:9d:a1:9d:10:4e:a5:47:2d:b3:fa:
1a:c7:e3:2e:25:b5:14:1b:65:d1:29:b1:fe:f4:28:
e8:d8:44:1f:56:2f:9c:aa:f7:06:d8:15:e6:ac:d6:
2b:c9:42:01:b8:cb:fc:62:44:8e:d4:ba:30:96:7c:
3f:11:6b:48:3e:62:70:b7:25:85:c6:88:3d:bd:4b:
96:46:28:02:16:f4:4e:d5:7f:02:28:ea:c5:9a:e5:
cc:62:2c:94:63:7e:70:80:02:f8:f2:63:79:74:19:
69:70:4d:a8:a5:c0:2e:0f:5f:ca:1e:f6:1a:43:67:
2c:3f:83:20:06:59:c3:ee:62:f1:5f:39:90:2a:f4:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C8:9F:12:61:AB:54:77:AB:5B:0F:E7:84:40:5A:F5:E6:6A:F9:74
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/53AA1B3C1B7511F0A0944466C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.152.0/23
IPv6:
2001:df5:43c0::/48
Signature Algorithm: sha256WithRSAEncryption
16:90:06:ba:b7:8a:d8:e9:f1:dc:54:a9:04:10:a8:88:c0:43:
43:22:e0:26:86:f0:01:30:f5:9f:c5:8b:ba:05:7d:68:b6:e5:
2a:f9:40:1e:03:cc:cf:6a:eb:a1:a4:34:15:9d:72:13:61:6b:
8c:66:b4:7c:f6:9f:28:02:8e:11:4b:a0:ca:51:b9:9c:c1:34:
7e:81:e4:5f:2a:73:2e:79:62:49:6e:b1:0b:15:b2:e7:0f:9a:
44:cf:2b:1c:3b:d4:04:4c:63:f8:47:70:12:47:03:1e:e4:b9:
a9:13:c3:70:d6:5c:a0:47:56:2f:12:d4:7b:23:44:e9:66:bf:
7c:96:61:27:19:03:60:b0:a2:d6:b4:c2:c9:aa:0c:53:b6:84:
20:01:42:9d:98:a6:2f:56:1a:48:bf:ab:ca:94:84:09:7d:60:
ec:6e:d2:2f:aa:b5:8f:b3:84:2d:08:48:06:3b:27:ff:98:e3:
36:70:c3:48:e3:ce:57:25:55:7f:6b:83:09:9e:bb:a3:41:c9:
ae:ee:4d:31:2b:5d:19:c3:3d:cc:79:70:ba:54:2a:1d:82:bd:
29:c9:9c:77:44:3f:25:43:d0:3d:e5:ba:5c:7a:91:86:8d:7c:
15:51:04:ba:9f:93:1b:5f:a2:46:bd:ae:df:ba:a7:fe:ee:63:
63:f0:f5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:20:23 2026 by rpki-client