
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5DFC320069CD11EFA0E6CC83C4F9AE02.roa
File: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (raw, json)
Hash identifier: r3Qs/dln22xhZ3ZXAFMMdEZb+Tcrw42Kr0TOaF2uwn8=
Subject key identifier: ED:1B:3A:70:63:77:5F:4E:CD:A4:AA:F3:5F:B3:D5:5A:13:76:20:1F
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 09AC
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5DFC320069CD11EFA0E6CC83C4F9AE02.roa
Signing time: Sat 10 Oct 2026 22:44:25 +0000
ROA not before: Sat 10 Oct 2026 22:44:25 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 38136
IP address blocks: 163.53.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 22:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2476 (0x9ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Oct 10 22:44:25 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acabfc9-2d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:bd:e8:61:b0:89:78:af:3a:5e:d0:fc:23:
f0:4a:b2:d5:1e:f3:b1:07:48:44:88:86:c9:2b:99:
4a:84:67:23:87:69:32:ea:1f:a8:8e:ae:04:5f:a5:
52:f7:59:cc:78:2f:90:d0:af:d8:68:a2:ad:43:49:
3d:91:1a:13:0b:a6:dc:b9:a8:ef:0e:b7:6f:01:fd:
d9:e1:7b:05:d6:49:8a:cc:10:80:7e:2a:0b:ba:09:
0d:42:27:f7:eb:c0:d3:75:72:31:d2:18:31:ac:4b:
bf:96:03:c4:d6:9b:86:e1:af:f5:bc:0e:32:63:b9:
d4:0c:9e:50:b8:c1:5f:26:05:80:5f:ca:29:f1:e0:
cd:0d:42:01:39:40:b4:a2:69:b6:74:c9:dd:b5:c6:
ad:69:ff:ea:24:b2:f4:24:ec:a0:1a:49:1c:ed:e6:
f8:92:26:2a:47:e9:f3:e4:8f:ec:23:b5:ff:c4:5d:
70:69:19:3a:c2:5e:bc:04:91:0b:36:69:d3:f6:33:
95:93:8b:9f:00:c8:d4:7a:4c:35:e1:43:d7:64:32:
ef:7c:49:bd:21:c1:56:64:a7:dc:94:20:e6:09:18:
3f:b0:dd:95:9d:34:ee:d5:38:83:9a:90:62:ba:10:
20:2d:78:67:61:f6:a5:74:19:f0:f2:c7:77:27:8e:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1B:3A:70:63:77:5F:4E:CD:A4:AA:F3:5F:B3:D5:5A:13:76:20:1F
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5DFC320069CD11EFA0E6CC83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.53.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a6:e8:48:fa:bc:a4:56:d5:5e:68:56:ca:4b:4e:fd:dd:ca:
5c:6c:d2:bb:77:c2:7d:9c:4f:24:00:c8:e6:85:36:44:80:cf:
b9:1f:9e:2e:fd:5c:3a:00:79:d5:03:a5:cb:55:3d:fe:4a:7b:
bc:56:67:fc:aa:88:4f:30:ab:97:b9:21:06:34:27:59:95:6d:
06:30:9f:02:39:9a:58:b6:9c:87:52:45:72:ef:0c:86:9a:c5:
1b:4d:81:d0:66:e3:25:4f:4a:31:99:e0:95:d1:03:6d:b3:e7:
e2:dc:41:44:22:54:cf:bb:0c:90:d1:b8:0d:0d:ec:05:12:ec:
d0:8a:c0:cf:6c:8c:3a:fe:5f:7d:a2:2c:91:8a:4c:d2:70:ae:
95:55:95:36:e0:86:8e:91:ab:12:09:c1:c8:3b:55:32:22:f1:
90:a6:27:35:4b:5e:05:21:69:41:cf:f6:d9:92:a0:9d:5c:b8:
af:cc:0a:f6:0c:25:8b:95:72:80:31:34:00:93:a7:b7:ea:4e:
c8:48:4d:e3:d3:b6:f0:81:0f:2c:b4:ce:09:b5:87:9a:50:78:
1c:e5:dd:4f:bf:a7:d1:c1:69:3c:82:42:52:fa:48:6b:5c:54:
04:c2:ad:0d:97:8e:8d:7c:b5:dd:00:04:06:fe:98:67:e8:aa:
76:8e:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:43:31 2026 by rpki-client