
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/2F09D8DCA03D11F1ACAFAFF83911F970.roa
File: 2F09D8DCA03D11F1ACAFAFF83911F970.roa (raw, json)
Hash identifier: iSOyyo5mav1l9HpQwTOIdfMcOvVhaxQGyBb2UEsq09U=
Subject key identifier: D6:C8:93:4D:CE:F8:82:02:47:76:12:D2:2B:D9:DF:55:81:EE:47:57
Certificate issuer: /CN=A91E78B5/serialNumber=C73CD1D4A39531BB12CBEBFC1E40E4D4DB05929D
Certificate serial: 03
Authority key identifier: C7:3C:D1:D4:A3:95:31:BB:12:CB:EB:FC:1E:40:E4:D4:DB:05:92:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/2F09D8DCA03D11F1ACAFAFF83911F970.roa
Signing time: Tue 25 Aug 2026 04:26:47 +0000
ROA not before: Tue 25 Aug 2026 04:26:47 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 154858
IP address blocks: 163.52.44.0/24 maxlen: 24
2402:7120::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.crl
rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E78B5, serialNumber=C73CD1D4A39531BB12CBEBFC1E40E4D4DB05929D
Validity
Not Before: Aug 25 04:26:47 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a8d1987-4591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:fc:2e:11:fa:37:ad:33:51:e0:ec:9d:fc:
ba:96:83:92:06:07:62:77:31:e5:94:a2:ba:f7:1d:
01:22:e3:a4:a0:c2:fb:41:72:e3:36:0c:76:5e:6f:
21:51:3c:ee:63:1b:e3:40:ee:26:8a:49:a3:e3:f6:
67:d7:c4:24:b2:7a:7c:e7:8e:6b:f4:b5:d1:55:fb:
07:a3:f4:cc:23:e1:99:69:a5:49:71:36:bf:87:00:
1d:49:bf:07:05:db:43:a3:71:cb:8d:52:1f:19:15:
03:c2:ad:ef:c9:7b:1b:64:7a:25:03:1e:83:99:85:
75:6f:8b:29:b9:65:eb:2f:f7:9d:bc:de:70:02:dd:
0f:19:42:c6:92:2c:0b:5f:42:a5:3a:f2:bc:45:e2:
78:0f:36:61:17:14:1a:0b:25:ac:46:4e:84:6f:b8:
22:0f:35:72:9d:4f:a9:a1:f3:31:59:c2:26:6b:12:
0b:0b:07:71:fe:1e:85:27:94:52:4d:b6:7b:af:05:
3f:46:b5:89:5f:f4:59:6f:6b:f0:e2:b2:1f:46:d8:
bd:eb:00:f2:29:11:c8:ba:75:0c:84:c8:08:be:fd:
e8:27:52:70:f0:6a:27:78:c9:ce:8a:a4:94:19:1b:
b7:c0:8f:6d:80:59:53:4b:b0:b0:12:b4:5b:c2:cf:
e6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C8:93:4D:CE:F8:82:02:47:76:12:D2:2B:D9:DF:55:81:EE:47:57
X509v3 Authority Key Identifier:
keyid:C7:3C:D1:D4:A3:95:31:BB:12:CB:EB:FC:1E:40:E4:D4:DB:05:92:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/2F09D8DCA03D11F1ACAFAFF83911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.44.0/24
IPv6:
2402:7120::/32
Signature Algorithm: sha256WithRSAEncryption
84:91:ab:cd:72:1f:01:71:01:5b:6e:f1:91:33:c1:eb:61:36:
da:75:a1:73:a9:7c:d7:b2:5b:2d:7b:3e:ad:34:b3:87:1c:48:
ab:38:28:fb:45:00:21:7b:6d:0b:9b:a8:a1:5e:74:a3:e7:46:
d5:c1:da:46:ae:80:06:a3:7c:96:60:c5:04:6d:47:c6:72:60:
d5:57:f6:00:aa:42:d0:7a:64:82:54:aa:25:37:9d:4f:0a:35:
f8:97:20:46:08:d9:14:0d:f4:60:14:3c:09:58:cb:8d:12:f7:
15:e7:62:7a:ff:32:d0:5a:23:1d:86:cb:7b:63:82:dc:4d:20:
7c:8b:13:d4:1c:bf:80:de:d3:2a:52:9e:d4:6c:49:10:ca:4e:
71:0c:30:68:20:5d:ed:79:8b:5e:37:6e:ba:ed:f5:39:a5:f1:
92:1f:e3:a7:91:17:0f:d1:c6:4a:82:38:4d:01:7a:32:ee:3e:
78:cf:d3:2e:d0:a8:57:86:bb:ed:a6:06:44:3c:5c:44:0f:86:
74:67:04:9d:03:5c:27:0d:9e:f3:fb:fb:89:f0:a9:4a:77:2b:
35:9d:77:c6:80:b9:7e:d5:b1:97:70:21:9c:5f:1b:e8:86:ff:
86:b1:ab:e1:34:fe:56:2f:63:97:45:a1:ea:2f:11:0a:27:88:
53:4f:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:54:31 2026 by rpki-client