
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/872F5E22835A11EE9FFEC146C4F9AE02.roa
File: 872F5E22835A11EE9FFEC146C4F9AE02.roa (raw, json)
Hash identifier: c/jawI9sVhPShnKjCf1i13c+sicTCdQqYFc31eax07o=
Subject key identifier: F9:CE:3B:5F:1F:46:3C:05:B4:8E:2E:CF:10:1F:BE:B7:2D:5D:44:42
Certificate issuer: /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
Certificate serial: 01B4
Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/872F5E22835A11EE9FFEC146C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:25:57 +0000
ROA not before: Sun 07 Dec 2025 02:12:11 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 55435
IP address blocks: 202.134.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl
rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C24C5, serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
Validity
Not Before: Dec 7 02:12:11 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a41435-5e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:43:ea:8a:a9:7d:09:57:79:fc:36:fe:6d:
6a:af:18:59:be:ac:60:bf:72:7d:c9:93:c8:f1:57:
0b:78:94:f2:be:7a:47:b3:58:52:c8:8e:24:ce:36:
f7:43:84:7f:9f:6b:a1:5e:88:61:a1:87:47:24:37:
c2:08:f4:be:91:e4:38:c4:3a:59:be:00:75:48:99:
d5:e0:ea:85:9e:20:9a:36:3a:c8:f4:36:ee:6a:48:
cc:e9:31:81:de:2c:e2:f1:cf:8a:8e:8e:90:12:81:
00:c7:25:6d:67:0c:c9:9b:85:2c:44:4d:7c:95:ec:
32:85:61:29:71:eb:ce:70:c4:77:dc:8e:f4:03:39:
e1:04:8f:41:11:d5:6c:09:94:2f:60:e6:54:bc:68:
73:7e:9c:59:ff:b7:76:7f:2e:60:32:76:90:78:2f:
df:32:f7:28:54:4b:60:ba:76:5a:f2:14:80:e3:1c:
c1:d4:5c:33:8b:4e:3d:67:e7:1c:73:16:13:a5:cd:
34:ab:28:3c:07:8d:31:53:83:32:d7:d0:60:0a:74:
35:8b:ef:7f:05:a7:c7:f2:68:cd:07:e6:c9:96:2b:
26:ee:86:e9:48:92:5b:1f:33:a6:7c:63:1d:3c:68:
39:2a:13:0e:77:91:fe:ec:ba:c4:51:15:8e:45:4d:
e8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CE:3B:5F:1F:46:3C:05:B4:8E:2E:CF:10:1F:BE:B7:2D:5D:44:42
X509v3 Authority Key Identifier:
keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/872F5E22835A11EE9FFEC146C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.134.53.0/24
Signature Algorithm: sha256WithRSAEncryption
05:7b:4f:45:8e:f9:28:d4:53:20:59:4e:b6:77:83:40:55:7d:
0a:17:ae:92:7d:a5:b8:91:58:ca:66:06:81:e6:3e:3e:72:04:
02:3c:56:d6:da:49:c1:78:84:07:30:ff:ba:ba:ec:ec:7a:e2:
e1:c5:f7:82:0a:af:ca:2f:57:f5:26:03:a5:34:44:1c:5c:05:
b9:25:61:c8:de:53:c4:34:ac:de:4b:04:73:51:46:81:7a:a7:
b3:80:32:6f:06:61:04:c2:1a:da:0e:60:2d:d5:80:2b:5b:ef:
79:5d:0c:e6:23:c6:2a:4d:fe:06:52:cc:11:5c:11:02:57:a3:
4d:e2:9e:e5:33:bd:7a:2f:6a:99:1a:7c:14:22:62:11:c3:2d:
01:d8:db:d8:27:90:49:ee:ed:99:69:3a:41:2f:7c:ce:3c:3e:
88:3e:db:87:81:6f:e8:c7:77:96:1c:3c:e4:82:6a:b5:b0:f5:
19:58:70:2d:a5:0e:8d:c1:75:0a:dd:2f:62:f0:28:21:75:4b:
2b:1e:2c:71:30:b1:c8:3d:9c:fc:87:c5:9a:88:27:07:02:b1:
e0:2f:72:d8:9d:f7:b3:ba:7d:89:4f:0f:98:ae:ee:c5:b8:e1:
b4:90:f2:b6:dd:3a:df:41:fe:bd:a6:c9:3b:73:2e:68:3f:c7:
c0:4e:fd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:44 2026 by rpki-client