
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/52644D4AA1E411E8AE269764C4F9AE02.roa
File: 52644D4AA1E411E8AE269764C4F9AE02.roa (raw, json)
Hash identifier: AcklsjRNx+5Tl87ZCSnr+nKhs0vUfT9sBTNVYrvsdZ0=
Subject key identifier: 43:F1:DA:F6:EB:21:D2:3F:02:68:39:33:AD:14:11:48:18:B6:61:70
Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Certificate serial: 223C
Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/52644D4AA1E411E8AE269764C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:16:30 +0000
ROA not before: Fri 30 Jan 2026 16:13:39 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 135132
IP address blocks: 27.111.82.0/23 maxlen: 23
27.111.82.0/24 maxlen: 24
27.111.84.0/24 maxlen: 24
2402:cb40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8764 (0x223c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE
Validity
Not Before: Jan 30 16:13:39 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a4827e-39e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:6b:7b:a3:f4:03:2d:ea:d4:d7:08:d8:17:
7c:06:7c:69:07:d1:39:0f:8f:05:60:cd:66:a7:b6:
97:d8:ee:27:96:6e:a4:98:84:5d:79:0e:56:3a:ca:
07:36:6b:c5:c3:7c:e0:eb:53:ea:63:8b:27:63:78:
a8:54:29:ab:25:49:f7:f7:b2:dc:d7:37:2e:3e:20:
30:b6:91:3d:fa:ad:67:b4:e8:f9:14:f1:88:1b:f3:
5f:09:68:c0:42:7d:ac:8f:50:36:fa:4f:1c:c2:76:
79:85:61:7d:b8:5d:5a:4e:31:e6:07:98:73:81:97:
1a:0a:4f:c5:76:e7:0d:0f:6c:63:a2:57:79:f2:23:
3b:fa:59:8b:d1:be:c5:4b:66:49:9a:59:0f:b9:4d:
7f:54:50:68:e5:4f:54:84:7a:7a:ed:32:4e:ab:86:
22:0e:97:df:31:72:20:ed:b5:d8:72:23:09:cf:da:
c1:4d:d3:01:94:04:8f:b0:f8:20:5d:ed:c0:1d:f8:
32:67:de:11:72:e7:18:b2:c2:52:36:f7:02:93:80:
92:08:3d:61:fd:36:da:79:18:ab:21:a8:8b:9b:7d:
d6:dc:f7:c1:fd:af:4d:a2:08:f0:6c:a9:03:6c:a8:
73:c6:cb:43:b9:87:ac:8b:7f:66:28:87:19:74:e2:
ad:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F1:DA:F6:EB:21:D2:3F:02:68:39:33:AD:14:11:48:18:B6:61:70
X509v3 Authority Key Identifier:
keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/52644D4AA1E411E8AE269764C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.111.82.0-27.111.84.255
IPv6:
2402:cb40::/32
Signature Algorithm: sha256WithRSAEncryption
74:7b:05:42:2f:59:b5:b9:79:e6:05:c0:e1:86:7e:df:4e:6e:
6f:a1:b1:36:a7:23:79:dd:fd:8c:47:95:72:22:6b:20:9f:de:
2b:4b:8a:7f:3b:b6:91:b9:65:e7:00:92:b1:e4:71:f5:3a:0f:
99:81:9e:a7:a8:38:dd:b4:56:de:8f:8b:21:d5:ae:84:91:4c:
71:83:81:55:50:40:9d:f6:27:c6:cb:26:de:82:cc:c8:92:a1:
cd:9d:8b:50:cd:ec:34:88:33:31:a1:ad:fe:bc:37:a2:db:57:
85:87:46:e3:93:5f:3b:5f:dd:9c:45:2b:e6:6e:15:b0:90:bf:
68:1b:e6:0a:78:63:16:19:48:04:73:95:ad:90:bb:2b:2a:fb:
a6:52:55:88:24:c3:2e:c1:6b:f5:d3:f7:11:e1:51:a7:c7:02:
79:89:99:84:c9:0c:53:63:fc:55:29:23:3a:c8:18:90:be:1d:
5a:99:1e:8e:6d:a8:c6:72:1c:64:ee:5d:7a:05:bc:45:e8:94:
2c:c5:2f:16:a1:dd:c6:a9:4d:f0:de:5b:0d:16:31:6f:69:47:
b8:ed:fe:3b:07:58:9a:0e:38:4f:7f:ed:c2:2a:a5:5d:75:44:
b7:89:1f:11:e0:35:92:74:f6:05:ab:00:7b:cd:d1:d7:71:80:
fb:20:d5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:48:59 2026 by rpki-client