
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/044C4ED6A26711ED8095F74DC4F9AE02.roa
File: 044C4ED6A26711ED8095F74DC4F9AE02.roa (raw, json)
Hash identifier: 612cmpEWafPstBGm8x2iYDbkh7FUHX/7eUkj+iqPm8c=
Subject key identifier: 73:61:1D:C6:8B:1A:F5:76:AC:C6:0C:E1:13:A5:92:7B:67:23:B9:42
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 069D
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/044C4ED6A26711ED8095F74DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:42:42 +0000
ROA not before: Mon 26 May 2025 23:53:57 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 134413
IP address blocks: 123.253.224.0/23 maxlen: 23
123.253.224.0/24 maxlen: 24
123.253.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1693 (0x69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761, serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Validity
Not Before: May 26 23:53:57 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a47a92-12cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:ec:51:4c:77:4e:b7:50:62:6d:23:56:44:
a9:a7:cf:6f:59:ab:84:3f:25:25:5b:b5:55:79:7f:
3e:f2:bc:8c:2b:07:ae:bf:e7:58:2f:3e:13:e6:1e:
69:98:64:e5:de:73:15:ea:2b:82:52:56:47:88:35:
3b:8a:5d:80:b0:2f:61:d3:25:7c:bb:60:53:53:32:
85:40:a2:16:3f:07:95:86:96:9f:91:d3:66:65:ca:
c2:3b:2f:de:8f:75:cd:e5:20:04:72:be:e5:be:1d:
32:37:08:a9:b3:49:f7:07:10:ca:e5:38:83:cb:73:
eb:12:af:bc:7e:40:bd:f6:4f:b8:23:1d:0d:96:8d:
15:f5:a7:cf:6b:ff:74:fb:e3:eb:83:3c:a5:25:5a:
6d:54:70:cc:97:86:91:19:06:48:b3:ee:71:02:ae:
06:01:6e:c9:42:79:0c:2a:e3:be:42:8a:dc:df:02:
a8:d7:9d:ff:8e:ca:ac:da:fd:38:21:21:81:8f:ea:
cd:5e:14:a0:4a:f7:78:a1:c6:fd:2a:27:66:82:ff:
4a:d1:68:52:26:30:60:5b:a9:02:0e:97:60:9e:2e:
61:09:09:45:0a:7d:7f:9b:b0:18:2b:a8:c1:25:ce:
9c:e5:e3:6c:65:f6:60:af:91:63:f4:b9:e7:07:fa:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:61:1D:C6:8B:1A:F5:76:AC:C6:0C:E1:13:A5:92:7B:67:23:B9:42
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/044C4ED6A26711ED8095F74DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
123.253.224.0/23
Signature Algorithm: sha256WithRSAEncryption
36:9b:9f:7d:28:dd:2b:04:7c:44:da:20:45:25:47:f2:80:55:
41:f2:aa:2b:9a:13:96:b0:d5:fd:0f:92:12:b4:14:b4:7f:68:
64:69:4a:4d:fe:c8:41:3e:c1:2a:94:29:e4:04:d4:ea:0c:18:
b4:b2:6c:31:95:52:1f:2a:d2:e6:f2:af:4c:26:8b:7a:a8:4e:
5d:37:bf:db:e4:7a:62:01:39:f8:ce:29:f0:35:42:cd:0f:53:
cc:2c:60:a3:40:8c:2e:ae:8b:8b:4f:90:d8:e4:88:fe:8d:c4:
cc:e5:2a:96:ed:c6:26:d5:fe:8d:1d:7d:2f:d2:63:b0:e8:a6:
5d:8f:34:ce:d1:8c:74:75:41:22:30:86:d5:65:25:be:6b:d2:
96:ae:b0:bc:eb:8e:30:3f:58:c8:4d:19:8e:e7:23:e7:74:b3:
0e:ec:78:48:15:62:f9:5b:95:f5:92:cb:58:b5:47:0e:e4:c1:
4c:ee:fd:6c:a3:ad:26:10:fe:09:26:2c:b1:1b:78:fb:d5:9b:
e4:80:f7:d9:9d:13:71:89:b4:12:7e:bd:e4:af:fc:a0:5a:74:
20:ab:af:69:25:d0:24:a0:22:c5:8e:03:f6:6d:22:d8:8a:40:
6a:7c:56:59:9b:21:25:85:39:2a:ee:a1:89:69:69:93:46:c4:
89:40:0c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:38 2026 by rpki-client