
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/53E9C44CFB2E11EFB488A95EC4F9AE02.roa
File: 53E9C44CFB2E11EFB488A95EC4F9AE02.roa (raw, json)
Hash identifier: 1XSenOkAnlFdjvUl+eDchgWp3sHF8P6YI+t3PzOdoKs=
Subject key identifier: 39:0E:63:59:DF:36:B4:74:4B:30:44:E8:45:7E:B1:98:98:49:50:5A
Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Certificate serial: AF
Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/53E9C44CFB2E11EFB488A95EC4F9AE02.roa
Signing time: Tue 27 Jan 2026 05:28:43 +0000
ROA not before: Tue 27 Jan 2026 05:28:43 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 133588
IP address blocks: 103.237.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Validity
Not Before: Jan 27 05:28:43 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69784d0a-672a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:b8:1e:aa:37:31:8f:9d:52:5a:92:74:db:
7b:7b:bf:90:e0:56:bd:c0:22:38:4d:eb:9a:56:4d:
82:f3:cd:42:b8:4c:a5:68:2e:71:51:dc:0d:fe:3c:
23:65:b3:32:6d:77:eb:c9:45:7b:f4:29:f8:0b:10:
6a:06:67:87:27:9e:e5:53:c8:5b:c7:18:f2:83:70:
a9:0d:65:8f:7a:e9:8d:85:d1:e5:44:e4:64:32:9d:
2e:6c:03:4b:0d:5e:19:93:90:4d:67:d1:35:aa:1a:
46:71:a7:49:e3:71:aa:cc:3d:fc:c2:04:4c:d0:6f:
81:18:1d:e0:3d:46:62:8b:30:35:91:3f:f7:4a:de:
5b:58:e2:82:82:78:90:3f:5c:51:94:83:e5:f1:f6:
2f:35:41:40:47:51:b5:ff:7d:d6:22:3d:10:23:a4:
48:f6:61:34:f0:6f:67:4f:4f:1e:29:d4:0b:ad:7f:
28:d5:99:d9:ae:1a:91:4f:f9:a1:e8:a2:c8:1d:3d:
0f:15:79:fd:b4:1b:04:61:2a:26:a6:3c:96:8c:2f:
29:82:c1:bb:d6:33:99:27:a5:c5:cd:77:76:fb:c9:
13:a2:51:5f:fe:6d:8f:62:ce:3d:d1:cf:a5:cf:a7:
3b:51:b8:b4:b0:ef:62:5a:a7:1f:01:86:f0:10:f3:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0E:63:59:DF:36:B4:74:4B:30:44:E8:45:7E:B1:98:98:49:50:5A
X509v3 Authority Key Identifier:
keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/53E9C44CFB2E11EFB488A95EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.53.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:55:52:f3:33:4f:84:79:d6:bf:61:d6:f0:f8:ee:52:c6:c3:
eb:cf:d8:68:01:97:f8:d7:fe:6f:d0:94:9e:55:6b:ba:f2:05:
99:c6:ba:a1:0b:9b:20:c0:f6:32:97:60:45:1c:17:de:21:9f:
52:6c:5e:7f:98:ac:5b:70:3c:9c:67:49:aa:2e:62:c9:ba:24:
53:45:5b:54:0c:f0:0c:04:0f:6e:53:c7:45:56:e5:bd:a7:59:
3b:bd:38:ac:df:44:57:40:3d:18:c7:4b:65:7a:19:80:a8:61:
88:eb:a0:02:7f:1e:34:e3:0a:6d:14:0f:b1:2a:1c:fc:6d:df:
70:9d:bb:f6:d7:97:02:7a:a0:4a:4f:23:42:be:a5:8e:75:58:
58:4d:5c:49:89:2c:a7:0f:a9:45:5e:c9:09:58:65:57:ae:e5:
bd:ab:a1:22:3e:dd:37:da:d3:38:49:92:be:5a:12:21:74:ef:
63:73:5c:e8:8e:eb:92:b4:96:e3:a1:29:6e:7a:de:86:b2:01:
26:f2:9a:e1:91:78:d4:1b:60:59:5c:37:67:79:4a:56:7e:69:
a7:36:8a:ef:86:a3:51:d2:fd:87:29:23:84:70:da:1c:ae:4d:
90:b5:31:6c:2f:5a:5e:06:3b:6a:cb:d0:75:8d:c2:d1:ac:d9:
09:2c:2b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:49:28 2026 by rpki-client