
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/E706483C36F511F1BB8AA257BA833773.roa
File: E706483C36F511F1BB8AA257BA833773.roa (raw, json)
Hash identifier: 5kRieVF1nul2niREuEGXZytXyh/ShjC7FLAkX7Dl1fE=
Subject key identifier: 32:CD:08:48:78:FA:1C:CE:18:B7:2E:00:14:F3:6C:E6:BE:85:C8:86
Certificate issuer: /CN=A91DD92D/serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Certificate serial: 05
Authority key identifier: E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/E706483C36F511F1BB8AA257BA833773.roa
Signing time: Mon 13 Apr 2026 05:02:00 +0000
ROA not before: Mon 13 Apr 2026 05:02:00 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 163.128.216.0/24 maxlen: 24
163.128.217.0/24 maxlen: 24
2402:5720::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD92D, serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Validity
Not Before: Apr 13 05:02:00 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69dc78c7-3be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:21:51:20:41:ea:02:67:dd:a0:ce:37:24:
d9:78:3f:23:6a:ad:b4:d2:fa:b8:3a:50:70:a3:58:
91:e9:d5:b2:e0:11:21:c9:32:90:3e:15:f0:bd:9a:
e1:a5:a9:3c:37:89:3c:c7:b2:82:11:1c:4a:0e:75:
a7:1c:de:99:fb:9c:79:8e:3a:62:81:11:85:0e:de:
fa:5c:5e:b5:c0:67:64:e8:ed:25:da:56:3a:cd:72:
e6:44:29:a7:d1:24:2a:56:3e:a6:0e:4b:4c:36:62:
e3:1c:f0:a6:f7:b9:a5:22:fd:3f:52:51:5e:e5:21:
ca:80:ce:34:de:17:84:c7:b4:68:86:8d:8a:92:da:
17:fb:c0:d7:9a:c0:4e:22:f0:93:c4:36:53:b3:9e:
a7:bb:70:f0:68:8a:b3:ce:d0:4a:59:7d:16:5f:9f:
0e:4f:6c:94:18:dd:ee:77:07:83:35:67:86:d2:e8:
7a:a0:36:9b:7b:be:bf:90:1f:d7:23:c1:60:02:46:
04:98:15:be:2d:9e:85:69:6e:2b:c5:fd:15:6f:b7:
f4:60:18:f5:97:be:ea:38:0c:5d:1e:64:30:00:44:
af:2f:a5:e3:6a:2b:39:3c:7e:51:18:5d:46:5e:d5:
92:43:6e:37:dc:c3:61:84:af:5f:ec:c1:80:93:be:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CD:08:48:78:FA:1C:CE:18:B7:2E:00:14:F3:6C:E6:BE:85:C8:86
X509v3 Authority Key Identifier:
keyid:E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/E706483C36F511F1BB8AA257BA833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.216.0/23
IPv6:
2402:5720::/32
Signature Algorithm: sha256WithRSAEncryption
06:14:85:36:c3:c6:2c:b9:64:10:1b:73:ed:0c:0c:48:aa:cd:
71:5a:64:86:7c:00:0b:75:3b:25:92:c1:27:e5:6b:40:7b:6c:
8b:8d:ea:a4:27:40:f5:67:52:fa:cd:c9:af:f1:99:8a:19:c5:
79:23:32:f1:91:25:66:60:4c:a2:8f:ba:69:9c:c1:27:27:e3:
b0:70:f1:6a:a9:47:b9:cf:65:13:44:18:e7:b1:fe:fd:59:53:
6a:38:6d:3d:77:a7:49:27:7b:ca:13:a4:e1:d6:8d:df:a7:02:
69:30:44:5a:7f:4b:e3:d2:c2:e3:20:17:db:b3:71:36:11:de:
a1:bb:91:60:0a:0d:b6:cc:50:0d:29:5a:bc:a2:96:9c:c5:16:
fe:50:da:18:66:38:1f:e1:e1:eb:bd:0d:2c:0d:45:3f:de:2a:
a5:46:c6:da:27:70:63:99:3f:77:bf:25:5a:97:09:88:ad:29:
23:66:88:fa:1b:d8:16:76:42:9b:b2:46:3b:52:30:da:c3:0f:
80:45:a5:b6:f9:74:3b:9e:3e:57:88:f8:9d:2d:9b:97:fe:5c:
bb:bf:06:30:cd:cb:55:7a:c1:a1:1a:94:f5:ae:bd:5c:52:a6:
cc:1b:5e:ee:ed:0e:91:a3:01:93:32:fc:51:79:69:60:77:93:
c0:db:48:3f
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RDkyRDExMC8GA1UEBRMoRTU3MzNCMTNGRDg2QTIzNjk0NzAyQzNFMjhGM0ZGMDk0
OTdBOTM3MTAeFw0yNjA0MTMwNTAyMDBaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZGM3OGM3LTNiZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxRiFRIEHqAmfdoM43JNl4PyNqrbTS+rg6UHCjWJHp1bLgESHJMpA+FfC9muGl
qTw3iTzHsoIRHEoOdacc3pn7nHmOOmKBEYUO3vpcXrXAZ2To7SXaVjrNcuZEKafR
JCpWPqYOS0w2YuMc8Kb3uaUi/T9SUV7lIcqAzjTeF4THtGiGjYqS2hf7wNeawE4i
8JPENlOznqe7cPBoirPO0EpZfRZfnw5PbJQY3e53B4M1Z4bS6HqgNpt7vr+QH9cj
wWACRgSYFb4tnoVpbivF/RVvt/RgGPWXvuo4DF0eZDAARK8vpeNqKzk8flEYXUZe
1ZJDbjfcw2GEr1/swYCTvsnzAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUMs0ISHj6
HM4Yty4AFPNs5r6FyIYwHwYDVR0jBBgwFoAU5XM7E/2GojaUcCw+KPP/CUl6k3Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREOTJELzI0RDhFM0RDMzZG
NTExRjE4NTlBQjRGRUI5ODMzNzczLzVYTTdFXzJHb2phVWNDdy1LUFBfQ1VsNmsz
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNVhNN0VfMkdvamFVY0N3LUtQUF9DVWw2azNFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDkyRC8yNEQ4RTNEQzM2RjUxMUYxODU5QUI0RkVCOTgzMzc3My9FNzA2NDgzQzM2
RjUxMUYxQkI4QUEyNTdCQTgzMzc3My5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAGjgNgwDQQCAAIwBwMFACQCVyAwDQYJKoZIhvcNAQELBQADggEBAAYU
hTbDxiy5ZBAbc+0MDEiqzXFaZIZ8AAt1OyWSwSfla0B7bIuN6qQnQPVnUvrNya/x
mYoZxXkjMvGRJWZgTKKPummcwScn47Bw8WqpR7nPZRNEGOex/v1ZU2o4bT13p0kn
e8oTpOHWjd+nAmkwRFp/S+PSwuMgF9uzcTYR3qG7kWAKDbbMUA0pWryilpzFFv5Q
2hhmOB/h4eu9DSwNRT/eKqVGxtoncGOZP3e/JVqXCYitKSNmiPob2BZ2QpuyRjtS
MNrDD4BFpbb5dDuePleI+J0tm5f+XLu/BjDNy1V6waEalPWuvVxSpswbXu7tDpGj
AZMy/FF5aWB3k8DbSD8=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:43 2026 by rpki-client