
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/553798E2FB2E11EFB488A95EC4F9AE02.roa
File: 553798E2FB2E11EFB488A95EC4F9AE02.roa (raw, json)
Hash identifier: iO6/ie5EFEIbKoC8oTYdIPXDgP44RM24bM76Sl8j9K4=
Subject key identifier: 45:AC:D6:6D:19:0D:31:CB:45:B3:EB:0D:B3:1B:FE:B9:FE:7A:A0:4B
Certificate issuer: /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Certificate serial: B2
Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/553798E2FB2E11EFB488A95EC4F9AE02.roa
Signing time: Tue 27 Jan 2026 05:28:46 +0000
ROA not before: Tue 27 Jan 2026 05:28:46 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 7712
IP address blocks: 118.67.200.0/22 maxlen: 24
2405:aa00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Validity
Not Before: Jan 27 05:28:46 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69784d0e-c4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:43:6c:87:17:1e:30:69:9d:b7:69:83:45:
71:39:c1:85:3f:9e:82:92:a6:bf:0c:5f:d7:b1:2f:
e4:86:a7:bf:ac:0a:82:f9:00:35:2a:2c:99:84:e1:
fe:be:f3:18:97:b7:97:fe:ed:6c:62:00:f8:ec:62:
86:9b:9f:26:33:be:91:41:16:f5:b8:bc:82:bb:62:
fe:7c:6c:53:74:ee:8a:f5:36:32:85:a6:d1:6e:d7:
24:68:3f:64:d0:6a:50:37:59:90:cf:90:56:28:56:
b2:84:e0:3b:27:8b:a1:9f:11:71:5d:9d:40:0d:50:
c1:70:4d:5b:fc:04:be:f7:4c:39:fa:9a:30:92:de:
60:5f:b0:ed:60:22:a0:9e:30:5b:c5:70:20:99:fd:
54:64:21:c1:9b:2a:30:6e:91:f9:4f:28:b4:5f:f1:
1b:d6:8f:86:e6:f8:ba:7b:42:5f:cd:bb:dd:61:9a:
e4:0e:11:07:60:86:8c:8b:6d:c9:a3:f1:bb:3e:fb:
e9:3f:e0:a8:b1:89:3e:78:44:07:63:7a:59:e9:8b:
cd:c5:67:8f:b1:59:78:8e:2b:63:d8:69:de:30:24:
3d:b1:90:8b:3e:4a:05:9c:42:5c:7f:3f:8f:d0:4a:
52:67:17:2e:ba:7b:16:79:dd:37:df:57:f6:53:4d:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AC:D6:6D:19:0D:31:CB:45:B3:EB:0D:B3:1B:FE:B9:FE:7A:A0:4B
X509v3 Authority Key Identifier:
keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/553798E2FB2E11EFB488A95EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.67.200.0/22
IPv6:
2405:aa00::/32
Signature Algorithm: sha256WithRSAEncryption
5c:67:c1:bf:f4:2a:fc:60:61:11:6e:94:93:59:fa:f4:b0:13:
e2:b9:3f:cf:e2:6d:2b:7a:99:e8:c9:ee:e6:46:f2:9d:4c:7d:
84:ab:ff:e6:0e:61:c3:9e:8d:b3:95:13:48:1b:1c:a3:1d:8a:
61:8f:43:65:e9:e4:28:a4:93:10:b7:5f:bc:eb:ff:66:9d:ef:
79:c0:a4:8f:c4:ad:22:dc:43:4e:0b:70:e1:99:9c:34:fd:94:
f6:b0:84:cb:5b:89:ad:23:49:62:2c:be:75:76:ed:07:19:76:
90:6e:79:10:85:16:1c:5d:92:f4:fa:1d:8d:b4:08:b4:30:0f:
77:e3:c2:28:2a:46:dd:9e:2f:46:11:42:86:7a:5b:25:df:2e:
3c:78:aa:5e:9f:28:e7:6b:c6:39:de:b1:77:2f:07:b9:33:75:
1a:4f:30:a9:a1:9a:26:ca:50:a7:7b:63:0c:c6:f4:a0:04:da:
9b:2b:ef:b5:8b:0b:42:15:25:27:ee:f5:e6:36:1d:2e:ef:31:
32:d9:ef:3e:3d:99:bb:51:80:dd:73:51:82:2c:dd:54:8b:15:
57:0d:22:89:d0:55:f7:e3:ab:9d:d4:bf:2c:00:d2:f1:88:c8:
61:46:ea:8c:47:e0:dc:98:ff:cb:e3:e1:0a:7c:9d:fa:a4:c6:
c7:6d:1e:5a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MUU1MDIxMTAvBgNVBAUTKDM4NkMzMDBFRDcyRjEyQjkwNTQ3OEEzM0NFRjI3Nzk5
MjU0QTY5MUMwHhcNMjYwMTI3MDUyODQ2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTc4NGQwZS1jNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwJFDbIcXHjBpnbdpg0VxOcGFP56Ckqa/DF/XsS/khqe/rAqC+QA1KiyZhOH+
vvMYl7eX/u1sYgD47GKGm58mM76RQRb1uLyCu2L+fGxTdO6K9TYyhabRbtckaD9k
0GpQN1mQz5BWKFayhOA7J4uhnxFxXZ1ADVDBcE1b/AS+90w5+powkt5gX7DtYCKg
njBbxXAgmf1UZCHBmyowbpH5Tyi0X/Eb1o+G5vi6e0JfzbvdYZrkDhEHYIaMi23J
o/G7PvvpP+CosYk+eEQHY3pZ6YvNxWePsVl4jitj2GneMCQ9sZCLPkoFnEJcfz+P
0EpSZxcuunsWed0331f2U02CvQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEWs1m0Z
DTHLRbPrDbMb/rn+eqBLMB8GA1UdIwQYMBaAFDhsMA7XLxK5BUeKM87yd5klSmkc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwMi84N0MzRkQwQUZC
MjkxMUVGQjc2NkRDNzZDNEY5QUUwMi9PR3d3RHRjdkVya0ZSNG96enZKM21TVkth
UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09Hd3dEdGN2RXJrRlI0b3p6dkozbVNWS2FSdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUU1MDIvODdDM0ZEMEFGQjI5MTFFRkI3NjZEQzc2QzRGOUFFMDIvNTUzNzk4RTJG
QjJFMTFFRkI0ODhBOTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJ2Q8gwDQQCAAIwBwMFACQFqgAwDQYJKoZIhvcNAQELBQAD
ggEBAFxnwb/0KvxgYRFulJNZ+vSwE+K5P8/ibSt6mejJ7uZG8p1MfYSr/+YOYcOe
jbOVE0gbHKMdimGPQ2Xp5CikkxC3X7zr/2ad73nApI/ErSLcQ04LcOGZnDT9lPaw
hMtbia0jSWIsvnV27QcZdpBueRCFFhxdkvT6HY20CLQwD3fjwigqRt2eL0YRQoZ6
WyXfLjx4ql6fKOdrxjnesXcvB7kzdRpPMKmhmibKUKd7YwzG9KAE2psr77WLC0IV
JSfu9eY2HS7vMTLZ7z49mbtRgN1zUYIs3VSLFVcNIonQVffjq53UvywA0vGIyGFG
6oxH4NyY/8vj4Qp8nfqkxsdtHlo=
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:49:28 2026 by rpki-client