
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F04860C28C5611E792848B4AC4F9AE02.roa
File: F04860C28C5611E792848B4AC4F9AE02.roa (raw, json)
Hash identifier: t1OURYtTlAtfNdWLrnHxkvZF4FFX+C17Jb19CIwfihg=
Subject key identifier: 33:88:E5:A0:22:3A:75:F2:58:C6:6D:FA:A0:0A:35:BA:46:D8:F0:7E
Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial: 2894
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F04860C28C5611E792848B4AC4F9AE02.roa
Signing time: Tue 31 Mar 2026 16:19:35 +0000
ROA not before: Tue 31 Mar 2026 16:19:35 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 132853
IP address blocks: 122.53.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10388 (0x2894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Validity
Not Before: Mar 31 16:19:35 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cbf417-61ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:46:da:26:0c:bf:ac:eb:ff:3e:91:a8:2d:
65:33:2c:d1:89:de:78:f0:19:6b:ec:28:0f:03:ee:
e9:6d:51:f4:53:1b:b0:ef:7c:72:9e:f1:3f:37:d0:
51:be:55:f1:7b:d7:0b:ae:35:5f:a7:dd:d4:1e:44:
eb:78:93:da:80:02:43:5f:52:97:fc:bd:36:d9:d7:
57:a4:f4:d0:29:4c:25:b6:e9:32:52:03:2d:03:f7:
b8:15:f0:3e:b3:da:8b:7b:ac:d1:7a:93:73:e8:df:
80:df:b7:4d:93:73:0c:89:8f:6a:d7:3c:a1:5a:fb:
f0:77:d8:d7:73:1c:b0:8a:8e:a4:4b:d4:52:a0:39:
55:99:3b:aa:04:14:c1:20:1d:69:67:ae:21:15:a2:
ee:38:34:0c:ff:87:e6:9f:f8:c5:0d:d7:7d:90:64:
55:26:ae:d9:da:aa:48:b5:8c:a2:85:5c:e7:75:08:
66:cc:7c:bd:12:bc:63:e3:d1:cf:3c:80:ab:a2:03:
9e:1d:db:9c:36:eb:b8:c3:59:82:52:23:32:93:c5:
4e:ae:21:56:e7:23:56:b5:dd:74:fd:dc:19:64:da:
a5:a1:43:61:08:c2:f2:a9:a4:55:dc:62:7e:72:70:
64:80:78:5c:ac:e8:ad:46:cb:0a:44:e0:65:9a:70:
91:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:88:E5:A0:22:3A:75:F2:58:C6:6D:FA:A0:0A:35:BA:46:D8:F0:7E
X509v3 Authority Key Identifier:
keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F04860C28C5611E792848B4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.53.123.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e6:fd:ab:30:0a:9a:90:40:10:35:c0:2c:17:1e:6f:cd:77:
36:7c:eb:63:0a:7f:57:69:a2:7f:19:46:21:c9:91:8a:b1:e9:
4f:77:9b:77:0d:b8:32:d1:c3:7a:8f:e8:31:2d:c6:aa:ba:ef:
46:03:5d:b1:b4:41:55:f3:20:2a:9d:25:20:ec:d5:64:9d:e0:
44:db:b0:a1:9c:7e:2e:c3:f1:13:05:f3:15:9f:c6:57:28:e5:
1c:b2:4f:22:0d:3f:49:f6:3a:29:77:42:4c:f5:07:c8:03:1f:
d5:ae:e6:0c:74:8d:3a:43:8e:db:23:f9:56:da:67:db:6b:00:
f0:8f:90:e0:75:eb:c6:4f:fb:9f:84:ce:6a:77:57:34:19:2e:
51:9f:7b:63:a4:58:39:52:3d:f1:80:17:12:99:fd:49:05:0f:
2d:7d:35:b6:bf:09:44:6a:fa:84:5b:9d:8b:97:ba:85:a9:06:
71:95:8a:1b:fa:32:89:b1:57:cd:58:f5:cd:a7:ad:0a:6d:6e:
8e:81:e5:36:a9:df:56:da:a1:48:06:ce:53:44:9a:46:82:03:
d5:a9:1d:b5:6f:eb:4d:87:4f:0a:06:26:df:f1:0b:54:e6:7a:
8b:bc:7a:7f:4b:00:6e:cd:ce:90:b3:43:da:91:3b:96:db:17:
91:5a:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:38:42 2026 by rpki-client