
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/954A1F62788311F1A6E4ADD87DA30FBC.roa
File: 954A1F62788311F1A6E4ADD87DA30FBC.roa (raw, json)
Hash identifier: VVusp1LVrEPiw3xk3JuI7mvGnSUbfEQkG4KhD4ELLO0=
Subject key identifier: 4B:B1:FC:6F:6F:25:81:E8:E4:A6:7B:79:DB:1B:A1:8D:15:D9:3B:D8
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 039B
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/954A1F62788311F1A6E4ADD87DA30FBC.roa
Signing time: Sun 05 Jul 2026 15:09:57 +0000
ROA not before: Sun 05 Jul 2026 15:09:57 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 8220
IP address blocks: 202.134.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923 (0x39b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Jul 5 15:09:57 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a4a73c4-c3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:1d:1c:c0:a0:7d:2b:75:22:fb:79:f8:12:
10:91:13:5c:56:29:83:f9:f7:6a:98:ea:89:6a:87:
62:f1:30:8b:a1:3e:f6:57:18:26:70:61:64:f7:a3:
17:b7:f2:88:ad:d9:02:3d:79:f1:e5:74:33:fd:98:
8b:29:c7:30:74:b0:b0:8b:67:84:8a:0a:e9:4c:33:
29:83:65:e4:0d:9c:c0:f5:dd:d2:9f:cf:56:d6:72:
d4:fe:f2:81:5d:72:4a:9f:c6:0c:b6:25:7f:a6:ef:
79:29:e0:64:48:ae:5e:1d:57:a1:c2:a9:86:0e:b6:
6c:ac:a2:0e:a5:dc:0c:61:a7:91:85:b2:06:fc:8e:
d4:27:04:2c:44:dc:23:c2:c5:6b:ec:fe:6d:62:b8:
35:65:4b:51:ac:30:02:4f:bb:da:93:40:81:a9:08:
68:d9:de:4d:07:67:3f:22:55:51:29:4d:9c:fc:ac:
fa:5c:9a:09:56:b0:f8:85:ec:89:a0:a8:b6:d0:e3:
6e:eb:0a:43:14:80:3a:fa:68:a4:46:46:86:fc:67:
2d:06:a1:4f:df:a8:56:6c:7d:19:12:64:04:87:09:
6c:e9:86:7d:cd:b9:7a:71:87:5d:00:9a:79:b5:fe:
e0:2b:a3:c9:b6:d1:bf:93:2d:42:94:98:26:5a:4f:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B1:FC:6F:6F:25:81:E8:E4:A6:7B:79:DB:1B:A1:8D:15:D9:3B:D8
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/954A1F62788311F1A6E4ADD87DA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
202.134.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:59:e2:3f:96:26:8a:85:e8:ec:7f:52:c0:c3:7a:fe:6d:f9:
4d:af:89:1a:d1:7c:9c:66:95:2c:9f:49:f3:6c:bb:74:74:68:
52:ec:d2:c2:e9:ea:0e:19:00:1f:05:7d:7f:f8:3c:2e:36:49:
ab:93:1d:ab:41:78:77:d2:53:d4:16:a0:8e:65:a4:ef:df:79:
2f:72:7d:13:dc:0d:ed:4e:44:1c:11:cc:13:5f:5d:10:93:0c:
ce:ac:c4:5d:63:0b:03:f2:5f:da:af:78:98:16:58:49:8a:d0:
7c:94:ce:cd:3e:f7:f9:f3:ad:60:19:b3:f4:72:f5:c3:d4:00:
7d:ba:80:b6:6b:5a:ca:86:9e:21:8e:f2:90:a5:06:6e:6f:74:
38:b1:1c:b0:8a:d6:69:17:24:83:8d:37:ba:71:e4:11:db:87:
a6:05:59:06:43:fd:44:cb:78:ee:49:92:e8:9e:2c:26:a9:5f:
9a:84:a5:2d:7f:b9:45:27:be:cf:14:da:fc:bc:d0:02:83:da:
c7:1d:d8:b0:0a:9b:89:49:b9:1d:e3:77:4c:d8:a1:82:84:75:
0e:8d:a3:bf:0f:ca:df:06:6a:3f:e6:a4:b1:16:d5:a5:13:fe:
52:61:98:cc:e3:6e:0a:75:f7:1f:22:8f:49:85:dd:fb:ff:e6:
d2:76:5e:2e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1NTAxMTAvBgNVBAUTKDQ1NkVFQTA2OTJDNkE0RjI2RjUzRDJEMjM3RDFDQjRE
Q0Q3ODMzMDUwHhcNMjYwNzA1MTUwOTU3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRhNzNjNC1jM2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqqQdHMCgfSt1Ivt5+BIQkRNcVimD+fdqmOqJaodi8TCLoT72VxgmcGFk96MX
t/KIrdkCPXnx5XQz/ZiLKccwdLCwi2eEigrpTDMpg2XkDZzA9d3Sn89W1nLU/vKB
XXJKn8YMtiV/pu95KeBkSK5eHVehwqmGDrZsrKIOpdwMYaeRhbIG/I7UJwQsRNwj
wsVr7P5tYrg1ZUtRrDACT7vak0CBqQho2d5NB2c/IlVRKU2c/Kz6XJoJVrD4heyJ
oKi20ONu6wpDFIA6+mikRkaG/GctBqFP36hWbH0ZEmQEhwls6YZ9zbl6cYddAJp5
tf7gK6PJttG/ky1ClJgmWk8yvQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEux/G9v
JYHo5KZ7edsboY0V2TvYMB8GA1UdIwQYMBaAFEVu6gaSxqTyb1PS0jfRy03NeDMF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU1MC84NDAwOTU0QUNF
QzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQSnZVOUxTTjlITFRjMTRN
d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzY1NTAvODQwMDk1NEFDRUM0MTFFRDhBODNGQjExQzRGOUFFMDIvOTU0QTFGNjI3
ODgzMTFGMUE2RTRBREQ4N0RBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyob9MA0GCSqGSIb3DQEBCwUAA4IBAQAsWeI/liaKhejsf1LAw3r+
bflNr4ka0XycZpUsn0nzbLt0dGhS7NLC6eoOGQAfBX1/+DwuNkmrkx2rQXh30lPU
FqCOZaTv33kvcn0T3A3tTkQcEcwTX10QkwzOrMRdYwsD8l/ar3iYFlhJitB8lM7N
Pvf5861gGbP0cvXD1AB9uoC2a1rKhp4hjvKQpQZub3Q4sRywitZpFySDjTe6ceQR
24emBVkGQ/1Ey3juSZLoniwmqV+ahKUtf7lFJ77PFNr8vNACg9rHHdiwCpuJSbkd
43dM2KGChHUOjaO/D8rfBmo/5qSxFtWlE/5SYZjM424KdfcfIo9Jhd37/+bSdl4u
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:34 2026 by rpki-client