
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/52B98FDA46AF11ECB113AA4BC4F9AE02.roa
File: 52B98FDA46AF11ECB113AA4BC4F9AE02.roa (raw, json)
Hash identifier: KD9hfqOsHpMQcz4Ocv/ZU2VsOJ4y9reBcPWQuq7fk2E=
Subject key identifier: 87:B6:DD:BE:DA:FE:9C:F1:16:75:4E:78:72:A3:FC:CD:A9:F1:95:8F
Certificate issuer: /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Certificate serial: 05A5
Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/52B98FDA46AF11ECB113AA4BC4F9AE02.roa
Signing time: Thu 10 Sep 2026 23:45:54 +0000
ROA not before: Thu 10 Sep 2026 23:45:53 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 4764
IP address blocks: 103.73.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1445 (0x5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Validity
Not Before: Sep 10 23:45:53 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa34131-562a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:49:8f:8a:93:df:e1:e4:2c:f9:92:30:88:
3d:88:bd:0c:06:a8:0e:46:bb:69:61:c7:3d:38:0e:
73:ac:a2:fc:01:df:9a:ef:68:57:39:e4:1d:e0:00:
d6:88:2a:ca:fb:9e:ee:f9:6b:66:bc:67:58:2a:28:
46:08:f0:7a:55:4f:15:88:88:b8:4a:57:ac:61:4c:
8f:77:54:69:fb:48:25:fd:b8:d0:02:96:30:6f:46:
fc:89:a7:47:72:59:5a:d0:3d:c9:a7:21:8f:65:2b:
10:9e:9b:26:34:56:ed:e0:9c:14:bc:67:9b:2b:b0:
18:5d:7f:26:bd:4a:9b:d7:10:86:12:23:59:c4:aa:
b6:f1:6f:9f:e6:6b:33:6a:4a:40:af:cb:cb:6c:dc:
ad:e2:ee:5c:63:16:e4:25:50:05:ec:66:ff:bf:30:
ed:75:ef:d4:9a:1d:b2:48:02:ed:74:22:8f:dd:ab:
36:dd:88:f6:b9:1d:1e:f2:f2:0e:4b:3d:16:f7:85:
a3:95:ac:1f:aa:c7:4d:19:e2:e9:fa:0c:58:f6:ea:
a8:a1:8f:3f:d9:bd:3e:dd:be:2d:30:78:29:35:2f:
63:8d:69:f2:8d:97:e0:7d:fe:59:cc:0f:a5:2f:29:
39:c5:43:d4:e3:02:28:db:b9:65:21:e1:b6:bf:9f:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B6:DD:BE:DA:FE:9C:F1:16:75:4E:78:72:A3:FC:CD:A9:F1:95:8F
X509v3 Authority Key Identifier:
keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/52B98FDA46AF11ECB113AA4BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.73.84.0/23
Signature Algorithm: sha256WithRSAEncryption
95:c4:87:23:05:de:77:b1:c9:b4:40:95:32:b0:d5:41:c9:69:
eb:aa:86:19:8d:b5:df:99:c8:15:c4:33:80:d0:f7:27:9a:e9:
00:25:29:47:7f:03:99:1a:ee:23:4d:b2:5d:e6:db:37:1d:7e:
22:36:e9:18:ec:e8:ca:7c:27:6b:db:25:49:c6:84:c2:36:c9:
34:6b:d6:ff:5b:f5:2a:9d:14:43:d1:e8:96:1a:ad:b0:be:d0:
ba:89:01:fb:c5:d6:a5:13:d6:2d:0f:dd:8d:0a:70:12:40:91:
57:95:ca:04:ab:2b:fd:8e:d5:d1:0c:7d:14:23:2f:2b:22:88:
fb:c6:df:75:0e:63:26:b7:8c:20:85:b5:0e:fc:06:6c:6d:c4:
2e:40:d8:a4:ef:ca:d8:30:02:c4:6a:bb:cb:32:d8:8c:f9:be:
ff:4d:16:aa:c2:7b:41:2c:61:c5:61:75:68:ad:cc:c5:7f:9f:
cc:9d:ba:95:b6:34:86:d0:99:40:d4:0a:f5:0b:46:4c:fa:3c:
46:68:0d:b4:4a:34:1b:d9:e7:b2:f3:11:28:ab:be:e3:a0:d1:
0b:a5:1f:85:28:84:06:6e:42:35:7e:1d:59:f0:1b:9e:6f:35:
c1:d2:3b:57:58:ab:84:a3:45:a2:f4:de:f6:b3:ed:c7:d2:a0:
99:cd:ee:18
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQzNTcxMTAvBgNVBAUTKENCMTY1NjgxMUQwODQ1Nzk5M0U4RDgxQjlGOTc5OERB
RDYxNjk3MUEwHhcNMjYwOTEwMjM0NTUzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEzNDEzMS01NjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAubxJj4qT3+HkLPmSMIg9iL0MBqgORrtpYcc9OA5zrKL8Ad+a72hXOeQd4ADW
iCrK+57u+WtmvGdYKihGCPB6VU8ViIi4SlesYUyPd1Rp+0gl/bjQApYwb0b8iadH
clla0D3JpyGPZSsQnpsmNFbt4JwUvGebK7AYXX8mvUqb1xCGEiNZxKq28W+f5msz
akpAr8vLbNyt4u5cYxbkJVAF7Gb/vzDtde/Umh2ySALtdCKP3as23Yj2uR0e8vIO
Sz0W94WjlawfqsdNGeLp+gxY9uqooY8/2b0+3b4tMHgpNS9jjWnyjZfgff5ZzA+l
Lyk5xUPU4wIo27llIeG2v5835QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIe23b7a
/pzxFnVOeHKj/M2p8ZWPMB8GA1UdIwQYMBaAFMsWVoEdCEV5k+jYG5+XmNrWFpca
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDM1Ny9CODRCMTBFQzQ1
QTgxMUVDOEIxNDA1NThDNEY5QUUwMi95eFpXZ1IwSVJYbVQ2TmdibjVlWTJ0WVds
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3l4WldnUjBJUlhtVDZOZ2JuNWVZMnRZV2x4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjQzNTcvQjg0QjEwRUM0NUE4MTFFQzhCMTQwNTU4QzRGOUFFMDIvNTJCOThGREE0
NkFGMTFFQ0IxMTNBQTRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ0lUMA0GCSqGSIb3DQEBCwUAA4IBAQCVxIcjBd53scm0QJUysNVB
yWnrqoYZjbXfmcgVxDOA0PcnmukAJSlHfwOZGu4jTbJd5ts3HX4iNukY7OjKfCdr
2yVJxoTCNsk0a9b/W/UqnRRD0eiWGq2wvtC6iQH7xdalE9YtD92NCnASQJFXlcoE
qyv9jtXRDH0UIy8rIoj7xt91DmMmt4wghbUO/AZsbcQuQNik78rYMALEarvLMtiM
+b7/TRaqwntBLGHFYXVorczFf5/MnbqVtjSG0JlA1Ar1C0ZM+jxGaA20SjQb2eey
8xEoq77joNELpR+FKIQGbkI1fh1Z8BuebzXB0jtXWKuEo0Wi9N72s+3H0qCZze4Y
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:18:56 2026 by rpki-client