
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/253C821A388611ECBE8F7725C4F9AE02.roa
File: 253C821A388611ECBE8F7725C4F9AE02.roa (raw, json)
Hash identifier: W4I7YPOuWVvwmHp1ZJLPAJvoqNMOXVHgJ7mR8552CZw=
Subject key identifier: 3F:15:E9:39:B8:37:70:47:15:CD:98:C1:BF:85:AF:6B:08:4E:BA:F8
Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial: 27DD
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/253C821A388611ECBE8F7725C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:51:44 +0000
ROA not before: Sat 10 May 2025 16:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147055
IP address blocks: 124.109.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:08:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10205 (0x27dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Validity
Not Before: May 10 16:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48ac0-793c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:f5:94:41:5e:dd:1c:b7:0a:f9:5c:cc:37:
8b:fd:8c:b7:ce:f2:8b:61:35:6c:d7:b1:ac:a8:8d:
51:90:17:4b:73:cb:8a:45:69:ae:0a:99:b0:aa:04:
c9:e1:a9:a8:a6:35:79:4e:85:a7:e4:c8:c2:a1:bb:
b8:58:d5:a3:f3:81:34:0a:6d:37:a0:07:3b:57:78:
5d:c1:c8:f0:fe:52:14:fd:52:81:9f:59:e9:d7:1b:
40:48:e2:01:b7:1b:b1:56:58:d5:38:3b:be:71:86:
da:10:0e:ee:da:0b:67:a2:d5:fd:80:95:8f:c3:ad:
02:96:41:f0:50:85:f4:36:dc:2c:0d:39:66:e2:a2:
97:da:fb:2c:8a:b6:0e:4c:70:ec:11:64:9b:21:44:
c9:ea:4d:1e:86:ed:91:52:c5:de:9d:2f:db:f5:29:
6f:fc:59:e0:bd:aa:e8:b9:7e:03:08:fb:02:c4:1b:
4f:f7:4f:ca:44:3c:ff:5b:ee:8a:6f:e5:1c:40:47:
f7:7b:f8:ae:56:a1:b2:61:ac:94:80:a1:66:99:9c:
57:53:89:c7:a0:3e:d1:23:e5:94:de:c9:fc:34:23:
6e:f6:f1:71:c5:f0:37:67:95:df:1e:72:2a:2e:a3:
d0:e8:34:a4:aa:d1:3b:d7:ea:c1:f5:20:a8:66:73:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:15:E9:39:B8:37:70:47:15:CD:98:C1:BF:85:AF:6B:08:4E:BA:F8
X509v3 Authority Key Identifier:
keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/253C821A388611ECBE8F7725C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
124.109.63.0/24
Signature Algorithm: sha256WithRSAEncryption
28:13:4e:ef:f2:bd:a0:da:b4:9a:f7:71:45:d2:29:b7:aa:b8:
92:5a:20:3d:90:32:85:7e:5b:da:53:ae:85:3f:0b:c5:ac:d1:
0e:af:a8:e9:e9:1e:e1:25:b4:19:83:0f:8b:d0:54:56:4b:d0:
e1:fa:01:36:84:53:f0:bf:57:1e:83:b3:8c:63:f9:c6:41:8f:
48:f2:9f:8b:06:e4:b8:db:3f:f6:41:74:58:22:cb:12:4d:81:
73:96:c1:27:1f:96:e8:d5:2a:95:a5:e8:da:c8:c4:0f:5c:af:
3a:d8:ed:ca:07:76:3a:3e:a8:3f:5e:16:ed:60:7b:a6:dc:48:
be:a6:62:b7:f8:25:0e:9f:b4:57:7c:b1:40:49:bd:c0:a2:28:
01:3e:1a:20:8c:fb:1d:8b:bf:9c:0d:f3:2e:d3:74:61:7d:09:
3a:ef:c5:87:86:39:ff:45:35:3f:34:82:e0:4c:1e:48:14:d4:
8f:ea:79:1e:94:be:58:74:42:bd:9f:b8:e0:aa:97:18:58:96:
62:ce:4e:d1:62:cf:16:53:f7:2c:06:55:da:9c:ca:08:ee:d1:
08:f3:3b:2d:0c:1b:fb:96:ee:ef:95:bd:95:cf:4d:09:1a:93:
00:a3:c4:b9:41:db:84:b1:ba:ff:26:da:df:3c:33:91:b7:c4:
c9:5b:8a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:41 2026 by rpki-client