
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/534E797A4F7811F1AC63D401CC833773.roa
File: 534E797A4F7811F1AC63D401CC833773.roa (raw, json)
Hash identifier: dAbQc+dld6yEP+cMR+R2W2FXFJfIm0ApZqmWogVGSbI=
Subject key identifier: 0E:2A:87:93:19:46:88:2D:88:F6:4C:20:24:23:3A:EF:05:83:BC:33
Certificate issuer: /CN=A91547E4/serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C
Certificate serial: 88
Authority key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/534E797A4F7811F1AC63D401CC833773.roa
Signing time: Tue 21 Jul 2026 09:36:11 +0000
ROA not before: Tue 21 Jul 2026 09:36:11 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38460
IP address blocks: 123.242.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl
rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 09:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C
Validity
Not Before: Jul 21 09:36:11 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5f3d8b-f5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:3b:02:81:2f:75:dd:03:4b:e8:ca:63:53:
f3:88:00:4b:b7:f5:90:6b:a8:48:54:66:f2:22:57:
75:db:cc:14:39:3f:ac:31:41:f9:84:8e:92:0b:ee:
08:2f:43:a4:52:f7:74:53:03:d5:c6:27:83:38:7a:
78:c9:b6:40:b7:c8:8b:6e:20:99:2c:c9:24:34:75:
04:93:d9:28:08:0d:86:97:c5:0d:d6:69:5d:b9:99:
ce:09:96:bc:0e:9b:1c:d2:6f:4c:f8:9b:6e:b2:2b:
95:3e:c9:07:61:9e:db:4a:8a:1e:97:79:9b:9c:a1:
30:2c:26:2e:0b:3a:91:cf:de:84:c4:c7:75:af:6e:
1c:68:99:79:86:2a:23:a3:ae:5e:70:61:00:14:1e:
ea:ec:27:35:6e:56:47:df:eb:2f:44:6c:01:11:62:
9f:8b:fb:7e:9b:e0:9b:89:11:2c:18:6c:7a:d2:dc:
25:9e:a6:78:16:b6:73:68:2d:5a:0f:31:0d:bb:06:
a4:62:4d:e4:52:ff:10:c4:e8:d1:65:a1:9d:5c:86:
78:fc:b6:6b:88:24:51:f4:09:4c:ed:48:0c:56:3d:
8d:a9:c8:5c:be:23:ff:3f:c7:83:10:8c:3c:2c:61:
17:81:03:63:f3:0b:18:28:fc:16:79:00:91:64:2b:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2A:87:93:19:46:88:2D:88:F6:4C:20:24:23:3A:EF:05:83:BC:33
X509v3 Authority Key Identifier:
keyid:D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/534E797A4F7811F1AC63D401CC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
123.242.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b4:8e:e3:25:00:4e:61:44:1a:8c:08:64:40:a2:a3:7e:84:
35:56:3f:23:ed:49:4d:e1:c0:98:bb:33:b4:53:33:7a:cc:f8:
bd:c0:4f:53:0d:b7:51:82:3d:49:1c:af:12:6a:07:a4:7d:a4:
4e:88:ab:e2:81:eb:60:17:a7:8b:ca:11:8e:84:81:15:11:b9:
17:b3:42:a9:18:bf:19:57:d2:a6:df:bc:01:06:62:c2:f7:19:
b8:3b:f9:08:d9:e1:dd:96:c2:73:42:9c:bd:d6:23:a1:62:ed:
a9:ec:85:9e:b5:d3:ad:7a:91:4f:1d:6a:ce:56:35:c7:81:03:
79:07:89:47:fa:da:9e:b0:cc:a9:88:0d:f4:bc:c3:de:28:70:
bd:ec:05:66:7c:02:31:e6:a1:2f:87:7f:e4:64:ee:25:bd:4c:
79:f9:02:b2:66:ab:68:b4:b3:a5:b1:4a:3e:44:e0:f7:bb:57:
00:6d:d2:b3:71:bd:f3:a6:66:a2:0d:b6:e5:c2:9a:2e:4c:3d:
ef:5f:3b:e3:0a:d0:89:29:47:2d:b7:42:9f:90:33:fd:b0:24:
15:99:83:7b:9d:5c:f2:35:b6:e4:bf:cd:65:3f:4c:21:be:ad:
00:2a:bc:2f:74:3a:3f:95:c8:dc:d9:79:30:cb:f5:43:a9:1b:
a8:27:2c:c7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ3RTQxMTAvBgNVBAUTKEQ5MzVFQ0Y3OTkxMzFCRUMyNDM4REE5REU4MkI2ODU4
OTYzQzcwNUMwHhcNMjYwNzIxMDkzNjExWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVmM2Q4Yi1mNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYk7AoEvdd0DS+jKY1PziABLt/WQa6hIVGbyIld128wUOT+sMUH5hI6SC+4I
L0OkUvd0UwPVxieDOHp4ybZAt8iLbiCZLMkkNHUEk9koCA2Gl8UN1mlduZnOCZa8
Dpsc0m9M+JtusiuVPskHYZ7bSooel3mbnKEwLCYuCzqRz96ExMd1r24caJl5hioj
o65ecGEAFB7q7Cc1blZH3+svRGwBEWKfi/t+m+CbiREsGGx60twlnqZ4FrZzaC1a
DzENuwakYk3kUv8QxOjRZaGdXIZ4/LZriCRR9AlM7UgMVj2NqchcviP/P8eDEIw8
LGEXgQNj8wsYKPwWeQCRZCtq+wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA4qh5MZ
RogtiPZMICQjOu8Fg7wzMB8GA1UdIwQYMBaAFNk17PeZExvsJDjanegraFiWPHBc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDdFNC8wMjMyRTU0OENC
NzExMUYwQTVBREVEMjJDNEY5QUUwMi8yVFhzOTVrVEctd2tPTnFkNkN0b1dKWThj
RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJUWHM5NWtURy13a09OcWQ2Q3RvV0pZOGNGdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTQ3RTQvMDIzMkU1NDhDQjcxMTFGMEE1QURFRDIyQzRGOUFFMDIvNTM0RTc5N0E0
Rjc4MTFGMUFDNjNENDAxQ0M4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAe/LPMA0GCSqGSIb3DQEBCwUAA4IBAQBPtI7jJQBOYUQajAhkQKKj
foQ1Vj8j7UlN4cCYuzO0UzN6zPi9wE9TDbdRgj1JHK8SagekfaROiKvigetgF6eL
yhGOhIEVEbkXs0KpGL8ZV9Km37wBBmLC9xm4O/kI2eHdlsJzQpy91iOhYu2p7IWe
tdOtepFPHWrOVjXHgQN5B4lH+tqesMypiA30vMPeKHC97AVmfAIx5qEvh3/kZO4l
vUx5+QKyZqtotLOlsUo+ROD3u1cAbdKzcb3zpmaiDbblwpouTD3vXzvjCtCJKUct
t0KfkDP9sCQVmYN7nVzyNbbkv81lP0whvq0AKrwvdDo/lcjc2Xkwy/VDqRuoJyzH
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:01:21 2026 by rpki-client