
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa
File: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (raw, json)
Hash identifier: VJCnaf5Klg6jmYuqx2mGsqpPv1Kkhc3IprBxsydE49k=
Subject key identifier: 4A:35:7E:1F:1C:A3:A9:5A:38:BB:F1:A7:8B:1E:E2:19:EE:AC:CB:27
Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial: 289F
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa
Signing time: Tue 31 Mar 2026 16:19:55 +0000
ROA not before: Tue 31 Mar 2026 16:19:55 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 152173
IP address blocks: 122.54.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10399 (0x289f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Validity
Not Before: Mar 31 16:19:55 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cbf42b-5b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:12:3e:eb:e9:02:b6:86:5d:bb:89:fd:bd:
89:e9:bd:4a:df:db:c6:f8:f7:03:a7:0f:b9:ef:81:
9d:e9:92:83:cf:41:fb:c0:80:ed:9a:a4:a7:ac:5f:
db:da:ba:00:74:8d:8f:db:91:fb:34:12:c4:e0:0e:
54:68:22:62:22:b3:b1:3d:fe:0f:29:99:46:2a:85:
18:cf:98:eb:3b:c3:59:f2:df:9e:8a:36:52:1b:27:
7e:e5:a6:eb:9f:38:09:61:49:ae:d1:8f:17:f1:97:
4a:eb:dd:69:8c:92:a4:7c:bf:5a:88:7c:81:0e:b7:
a8:d0:87:3b:3c:51:30:dc:0f:e3:56:77:15:a2:11:
eb:17:4d:9d:45:24:24:fa:e7:3f:22:b5:26:4e:26:
6d:24:c5:4e:5e:9e:7e:fc:08:df:c1:a4:5d:e0:fa:
14:1d:64:74:e0:39:20:ce:20:b5:a5:36:03:a8:59:
3a:ef:e3:e4:7b:22:94:a0:fe:2a:fd:78:68:40:a9:
99:21:a0:12:e6:41:40:58:0a:d1:15:7a:80:e1:40:
6b:2d:e6:16:e2:a2:e5:24:63:1c:e0:14:d5:1d:e6:
0f:00:85:3d:2d:2d:8c:11:36:8d:76:34:da:ad:b9:
0f:9a:43:90:ed:2c:e1:84:6f:58:4a:c3:03:d0:0c:
eb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:35:7E:1F:1C:A3:A9:5A:38:BB:F1:A7:8B:1E:E2:19:EE:AC:CB:27
X509v3 Authority Key Identifier:
keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.54.67.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:23:e6:0b:c7:df:f3:75:73:c6:f2:70:69:3c:6c:98:4f:ec:
5b:11:15:d5:d5:c6:f0:55:01:73:09:c2:87:b2:2a:29:28:b7:
3d:91:24:a6:05:63:ce:aa:3f:dc:09:f5:02:b3:1e:58:51:02:
98:76:26:75:9b:5e:10:49:e0:0f:8e:96:a6:29:80:e4:22:13:
ec:0a:31:16:30:77:2e:a9:0f:f3:01:df:7a:8b:04:6d:ca:ee:
b7:c8:83:fa:8b:be:a2:15:68:e9:8d:b7:44:c7:c5:c6:c5:5d:
bf:8a:39:b5:d2:70:4a:12:4a:00:f6:42:ac:06:da:58:3b:77:
46:ef:eb:ca:0b:9f:e9:d1:fd:01:4a:d5:88:05:cd:eb:a9:6a:
ea:f1:9d:6d:eb:d2:a0:5f:58:36:be:97:77:2c:56:c7:95:52:
ee:0f:03:2d:72:f1:2e:c1:23:f1:ec:ae:7c:fa:70:e8:cb:7e:
7b:e5:da:98:d1:3d:eb:0c:7b:70:9d:bf:7d:fb:38:9d:43:97:
c4:e7:1d:5a:f3:cc:7b:a4:c9:35:76:18:7d:69:3d:8d:3a:2b:
30:ea:5a:1f:2a:82:f8:b2:fd:bb:69:2f:14:3b:61:1b:33:90:
44:57:a3:f4:71:41:10:aa:19:2f:da:06:a4:c1:4c:df:cd:c3:
90:e9:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:38:54 2026 by rpki-client