
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/54B32544D84711EF81BD1E0BC4F9AE02.roa
File: 54B32544D84711EF81BD1E0BC4F9AE02.roa (raw, json)
Hash identifier: gP6gufX38UElSO8C26tQ9wbRqOVT/gY7F2DssjnF8Go=
Subject key identifier: 87:F8:39:69:31:FD:C7:D9:45:9A:F8:3E:D8:E6:3F:DF:B7:79:2F:E3
Certificate issuer: /CN=A9111926/serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C
Certificate serial: 0C7E
Authority key identifier: 6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/54B32544D84711EF81BD1E0BC4F9AE02.roa
Signing time: Thu 02 Apr 2026 19:23:09 +0000
ROA not before: Thu 02 Apr 2026 19:23:09 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 38442
IP address blocks: 27.123.128.0/18 maxlen: 24
103.244.228.0/22 maxlen: 24
183.81.128.0/20 maxlen: 24
2401:5100::/32 maxlen: 40
2401:5100:300::/48 maxlen: 48
2401:5100:301::/48 maxlen: 48
2401:5100:302::/48 maxlen: 48
2401:5100:303::/48 maxlen: 48
2401:5100:308::/48 maxlen: 48
2401:5100:309::/48 maxlen: 48
2401:5100:30a::/48 maxlen: 48
2401:5100:30b::/48 maxlen: 48
2401:5100:2300::/46 maxlen: 46
2401:5100:2300::/48 maxlen: 48
2401:5100:2301::/48 maxlen: 48
2401:5100:2302::/48 maxlen: 48
2401:5100:2303::/48 maxlen: 48
2401:5100:2308::/48 maxlen: 48
2401:5100:2309::/48 maxlen: 48
2401:5100:230a::/48 maxlen: 48
2401:5100:230b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl
rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3198 (0xc7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111926, serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C
Validity
Not Before: Apr 2 19:23:09 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69cec21d-5062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:b2:f3:61:9c:f1:10:7f:bd:3a:3c:19:86:
ba:a1:90:eb:18:c8:b2:3f:78:b2:fc:d6:cc:8e:3e:
20:46:f3:48:c8:fa:05:10:3f:c9:39:37:10:b4:b8:
a3:d8:c4:51:6b:35:78:79:06:a1:5c:bd:87:b9:2a:
d0:ac:e1:80:e3:03:bd:78:eb:60:dc:e3:06:c1:99:
39:da:ff:ed:aa:00:12:8f:96:87:78:93:28:be:dc:
fe:68:33:d2:df:d6:d1:c4:2e:60:9a:ed:15:81:22:
3a:6d:27:8a:c4:a8:de:5b:23:09:6a:52:43:9e:a0:
8a:e7:ed:a9:a3:0b:d2:35:47:4b:db:1e:17:ff:fc:
fb:23:9a:80:c7:f0:aa:45:03:08:61:57:44:41:13:
d4:2f:7b:fd:dc:fc:e4:12:12:ab:76:70:ba:26:15:
82:61:3e:aa:ac:fa:44:fe:99:7d:8d:94:39:7c:3b:
77:59:10:71:15:14:e8:81:7b:5b:a8:23:05:5c:30:
2b:54:04:97:0a:f8:2e:96:24:18:c9:4c:03:6b:6a:
e1:74:99:18:87:10:58:e9:8d:60:ef:b8:cc:ef:90:
d5:19:97:2a:bb:6d:db:7a:33:69:0a:d5:85:d6:6a:
70:c1:d2:7c:fc:1a:ab:05:41:d0:61:4f:7b:83:5a:
ee:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F8:39:69:31:FD:C7:D9:45:9A:F8:3E:D8:E6:3F:DF:B7:79:2F:E3
X509v3 Authority Key Identifier:
keyid:6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/54B32544D84711EF81BD1E0BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.123.128.0/18
103.244.228.0/22
183.81.128.0/20
IPv6:
2401:5100::/32
Signature Algorithm: sha256WithRSAEncryption
98:fd:c6:16:0f:f1:d0:99:d4:3f:65:e6:16:af:9f:99:26:58:
5a:81:30:b2:c7:44:4f:0e:e2:92:6f:28:01:00:e1:13:3a:d3:
25:ce:c9:ad:64:b9:a4:eb:53:2a:c3:50:a7:af:44:a6:83:ac:
15:22:23:93:31:82:c3:2b:98:31:e1:3a:fe:7d:27:4c:67:e2:
9c:00:c9:8a:06:24:01:12:dd:9f:b1:cc:aa:68:60:36:a0:61:
56:ca:fc:b5:15:8b:57:65:31:72:49:0e:34:90:83:44:4e:0d:
04:57:d7:ce:8c:7d:2d:26:42:8c:a4:dc:45:8c:c9:e6:8e:a4:
0c:f4:e9:bd:36:93:4d:71:de:fc:6b:72:bd:2d:ac:46:8e:56:
3b:f0:a9:1b:4c:85:66:7f:b9:fd:1e:49:40:2b:7f:3d:a6:73:
8a:ea:70:dc:70:15:41:65:a3:45:ae:61:7c:cc:f4:91:98:02:
be:98:d8:3a:41:68:7e:b3:70:60:54:6b:3e:ae:f1:83:4b:54:
06:ce:09:97:47:8c:03:28:6f:4d:9d:72:34:e2:44:bb:42:d0:
82:c5:1e:3d:d9:81:f7:90:37:e2:13:68:95:21:f0:59:54:01:
14:84:0c:90:86:63:67:98:f7:37:1a:75:d5:85:a2:8d:8c:0a:
42:82:8e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:31:25 2026 by rpki-client