
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/53F3631AE09A11F0A599D036446F56BC.roa
File: 53F3631AE09A11F0A599D036446F56BC.roa (raw, json)
Hash identifier: oVM32N+EaxRSiza2FT5vk20qgpzDKgkN9n1AMpDCt+0=
Subject key identifier: 06:52:E8:1B:58:E0:6E:61:E7:E3:A8:BB:5B:49:AB:32:E7:3E:4A:38
Certificate issuer: /CN=A91DB53B/serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Certificate serial: 28
Authority key identifier: 86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/53F3631AE09A11F0A599D036446F56BC.roa
Signing time: Sun 01 Mar 2026 05:50:39 +0000
ROA not before: Wed 24 Dec 2025 07:29:49 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154402
IP address blocks: 2402:3d20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB53B, serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Validity
Not Before: Dec 24 07:29:49 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a3d3af-9c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:c0:ee:3a:f0:4d:b7:52:5d:12:e3:ab:33:
fb:16:4d:8d:78:82:a3:4f:82:14:66:32:32:9f:1d:
df:9c:99:9e:49:4f:8f:3d:70:51:4f:d2:e0:09:d7:
db:5f:5c:92:db:cd:04:b9:b4:2f:09:a7:f7:16:2f:
b0:20:21:23:08:d7:29:03:8d:5b:d3:fd:82:c9:8d:
0d:ef:d7:58:6d:ac:1b:72:0e:8b:f4:1f:4e:4d:24:
8e:1f:bd:a1:a1:75:bf:5d:30:5a:0e:18:14:68:40:
88:eb:44:c0:8f:05:3f:40:30:0b:8a:67:5d:3d:a9:
73:86:67:a6:72:98:7f:d4:33:b6:0d:aa:60:fc:b2:
ff:e1:37:17:6f:1a:c4:02:31:df:66:39:cb:1b:33:
e6:08:f6:e0:0f:d5:c0:7c:48:1c:f6:ef:83:9d:cb:
04:a1:a0:5e:47:24:b3:59:51:1c:ed:16:67:0a:52:
d9:f6:e4:ad:42:42:68:23:00:8f:ed:fb:75:f2:93:
68:af:c6:f7:d9:b8:e2:c1:8d:34:03:39:9c:16:b4:
95:e2:19:5c:16:59:e1:69:a0:ec:89:3c:ff:dc:cd:
1e:bd:78:0b:b5:91:af:aa:0b:cd:db:01:b5:cd:73:
2d:df:66:cc:07:ff:29:86:0f:4c:af:62:40:85:ad:
86:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:52:E8:1B:58:E0:6E:61:E7:E3:A8:BB:5B:49:AB:32:E7:3E:4A:38
X509v3 Authority Key Identifier:
keyid:86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/53F3631AE09A11F0A599D036446F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:3d20::/32
Signature Algorithm: sha256WithRSAEncryption
25:cc:2e:74:f6:27:17:3e:a9:84:da:4c:11:33:ae:8f:1b:c9:
a6:85:15:2f:9e:de:09:3d:2c:11:e2:b1:47:d0:dc:5e:83:b2:
7b:a2:b4:08:e9:1d:9a:f5:37:a8:c4:53:d2:7d:bd:0e:bb:56:
a4:1a:82:76:65:45:0c:6f:f6:21:4d:91:1b:4d:29:82:1c:1c:
36:f0:db:49:f5:f0:57:b1:67:23:92:37:2c:44:88:fb:70:3b:
4a:92:ea:7e:80:b8:ee:43:cd:b2:3c:cf:74:a7:01:06:04:3c:
fd:33:e3:7e:d2:4d:5c:2c:94:e5:54:09:84:ad:cc:70:e4:bb:
df:4b:3f:4e:64:aa:3c:44:44:71:fe:5c:6c:e8:91:a3:ae:ab:
3c:db:c8:86:e9:f1:15:7c:1d:a1:2c:69:db:e6:7d:aa:1b:fe:
71:d2:1c:89:68:e2:4d:55:d6:c0:07:ce:69:6d:30:ab:ba:db:
d8:f6:ca:74:eb:8a:78:46:7b:dc:44:f6:1d:ed:02:02:06:7b:
c2:fa:e4:b1:cb:db:05:7f:06:7d:92:ed:6f:79:17:98:d0:52:
31:df:50:73:53:fb:a4:46:5a:fb:fa:e7:c9:bb:17:1e:42:1b:
ae:95:9d:86:fb:e8:ee:30:97:29:b3:e3:5d:55:9b:2f:df:7a:
8a:93:1d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:54 2026 by rpki-client