
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/9ECB0CF0275211F09DB11A29C4F9AE02.roa
File: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (raw, json)
Hash identifier: 5ZDy+q95r5zdw+R7DnGV36oaHIDbY23gtfzUTt//mwc=
Subject key identifier: 4A:22:6E:8F:34:F8:11:CD:56:7C:FE:A8:9F:9E:88:FD:35:7B:B9:BD
Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Certificate serial: DE
Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/9ECB0CF0275211F09DB11A29C4F9AE02.roa
Signing time: Mon 25 May 2026 07:39:31 +0000
ROA not before: Mon 25 May 2026 07:39:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153305
IP address blocks: 203.123.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Validity
Not Before: May 25 07:39:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a13fcb3-1d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:70:aa:74:56:d6:c2:6a:ac:94:4d:73:75:7f:
5d:b9:6d:f4:a9:01:3a:2f:e6:a8:82:bd:d2:d7:77:
4b:2b:2a:78:b1:2e:93:ed:7c:db:89:ab:28:bf:7f:
fb:aa:1a:03:3c:a8:00:31:e6:50:a3:0e:9e:80:47:
47:3f:d5:94:0f:85:df:ae:19:ca:0d:b1:17:f9:61:
ac:bd:b4:14:7c:9d:6c:84:6a:12:a7:5c:6b:10:d5:
6c:36:57:12:9a:fb:9d:a6:7a:6e:1a:3b:5b:41:85:
f3:ba:60:2e:8b:d4:27:8a:2e:02:9a:fa:5a:23:5f:
a5:82:07:da:e3:7f:74:c2:76:ea:61:37:1d:ee:34:
14:18:23:31:c8:56:c4:35:46:74:eb:2e:ca:15:2b:
8b:f8:56:5e:d7:3a:7e:0c:ef:61:31:10:b5:34:d0:
9a:a0:65:8f:d1:af:ea:9d:9c:09:ec:86:44:cb:6a:
7d:c8:a9:b9:b8:9f:31:eb:a7:df:b0:bb:e7:54:30:
18:a8:58:e9:cb:8b:ca:f0:84:09:16:3a:b3:7c:83:
a7:d0:f0:cd:e1:4b:99:2a:47:fc:69:14:77:46:1a:
df:96:79:c3:4b:2d:56:44:46:51:05:f6:a2:ec:ab:
57:8f:ce:07:6a:bd:6d:2b:a1:85:15:d1:12:43:eb:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:22:6E:8F:34:F8:11:CD:56:7C:FE:A8:9F:9E:88:FD:35:7B:B9:BD
X509v3 Authority Key Identifier:
keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/9ECB0CF0275211F09DB11A29C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.123.53.0/24
Signature Algorithm: sha256WithRSAEncryption
48:80:4e:14:8a:f7:14:01:52:52:a2:4c:b1:74:20:20:8f:20:
23:17:f6:27:e1:eb:eb:c9:d0:a0:9c:44:48:6e:60:3a:e5:3c:
e4:23:44:a8:ff:29:39:07:a3:ea:2a:93:b1:f7:0f:dd:d9:46:
a2:ff:a2:98:f0:21:50:9c:4c:7c:a7:ae:0a:85:c4:1f:ab:ec:
ef:a7:57:60:d3:92:6b:22:b1:fe:f7:09:61:1c:0e:e8:24:e7:
46:4a:87:6d:aa:4e:de:83:fb:13:a1:8e:83:d9:23:73:1f:f3:
3c:3c:ee:88:6f:11:dd:7b:f4:d8:25:9a:2c:3a:2c:00:b6:eb:
6c:47:d9:a0:7a:48:59:ec:24:b9:7d:22:f2:ac:e7:3c:45:36:
90:b5:71:ab:1b:2d:32:52:db:bd:78:74:8c:84:de:65:1d:9c:
10:49:a4:b4:11:f3:46:8a:3a:98:25:bb:b2:36:c7:18:e8:0d:
85:51:c0:e2:d9:82:7d:ac:06:79:94:d6:bb:89:f3:55:98:48:
48:a5:e5:0c:13:ec:af:68:af:1d:ae:c9:f2:7a:93:32:f2:e0:
9c:5c:ce:f2:b2:f3:58:e0:94:ca:e4:c6:93:21:47:88:fa:f9:
30:48:93:da:45:72:28:65:f6:b0:5a:24:7c:1f:17:3e:af:1e:
e9:64:ba:60
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdBNzUxMTAvBgNVBAUTKDk3QUNEREUyOTExQTA5RjM5MzVGMTg2MERCMDU3RDRD
RkY0NkIyQzUwHhcNMjYwNTI1MDczOTMxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEzZmNiMy0xZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4XCqdFbWwmqslE1zdX9duW30qQE6L+aogr3S13dLKyp4sS6T7Xzbiasov3/7
qhoDPKgAMeZQow6egEdHP9WUD4XfrhnKDbEX+WGsvbQUfJ1shGoSp1xrENVsNlcS
mvudpnpuGjtbQYXzumAui9Qnii4CmvpaI1+lggfa4390wnbqYTcd7jQUGCMxyFbE
NUZ06y7KFSuL+FZe1zp+DO9hMRC1NNCaoGWP0a/qnZwJ7IZEy2p9yKm5uJ8x66ff
sLvnVDAYqFjpy4vK8IQJFjqzfIOn0PDN4UuZKkf8aRR3RhrflnnDSy1WREZRBfai
7KtXj84Har1tK6GFFdESQ+sItwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEoibo80
+BHNVnz+qJ+eiP01e7m9MB8GA1UdIwQYMBaAFJes3eKRGgnzk18YYNsFfUz/RrLF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E3NS9FNkY0QjZEQTI3
NTExMUYwQUNGMEFGMjRDNEY5QUUwMi9sNnpkNHBFYUNmT1RYeGhnMndWOVRQOUdz
c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w2emQ0cEVhQ2ZPVFh4aGcyd1Y5VFA5R3NzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTdBNzUvRTZGNEI2REEyNzUxMTFGMEFDRjBBRjI0QzRGOUFFMDIvOUVDQjBDRjAy
NzUyMTFGMDlEQjExQTI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy3s1MA0GCSqGSIb3DQEBCwUAA4IBAQBIgE4UivcUAVJSokyxdCAg
jyAjF/Yn4evrydCgnERIbmA65TzkI0So/yk5B6PqKpOx9w/d2Uai/6KY8CFQnEx8
p64KhcQfq+zvp1dg05JrIrH+9wlhHA7oJOdGSodtqk7eg/sToY6D2SNzH/M8PO6I
bxHde/TYJZosOiwAtutsR9mgekhZ7CS5fSLyrOc8RTaQtXGrGy0yUtu9eHSMhN5l
HZwQSaS0EfNGijqYJbuyNscY6A2FUcDi2YJ9rAZ5lNa7ifNVmEhIpeUME+yvaK8d
rsnyepMy8uCcXM7ysvNY4JTK5MaTIUeI+vkwSJPaRXIoZfawWiR8Hxc+rx7pZLpg
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:30:17 2026 by rpki-client