
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/5E652FFCCC5511F1BBB1CA9A0966CEF9.roa
File: 5E652FFCCC5511F1BBB1CA9A0966CEF9.roa (raw, json)
Hash identifier: VJykqI4ITRXqMu3TQx4C+P7Yg8nBiRXbMpSe9f/sAd8=
Subject key identifier: E1:61:6B:3A:87:27:0A:B8:E9:84:DA:92:47:95:D4:25:EC:1F:86:FC
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0F3E
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/5E652FFCCC5511F1BBB1CA9A0966CEF9.roa
Signing time: Tue 20 Oct 2026 07:10:45 +0000
ROA not before: Tue 20 Oct 2026 07:10:45 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 136809
IP address blocks: 61.18.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 06:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3902 (0xf3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Oct 20 07:10:45 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ad713f5-2e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b0:37:a4:a0:2b:ab:32:63:46:45:7a:bb:eb:
72:de:c6:81:e0:ee:7a:ce:2b:c5:8c:dd:b6:dc:da:
0f:04:1e:5e:98:0d:7a:b2:95:c1:9b:56:c7:40:16:
fe:26:bc:40:4d:0d:7c:7d:81:85:7c:f4:20:68:b1:
8c:e4:60:16:c4:1a:20:40:66:ff:54:fe:75:7c:4f:
8e:22:4e:81:90:1b:4a:ee:cf:6e:54:23:11:94:50:
45:f3:0d:62:74:77:b0:6c:39:0b:52:f2:fb:2b:cb:
be:5c:c8:9f:9a:3d:f2:13:36:d9:2d:ba:ba:d1:b2:
3d:75:75:78:32:16:6a:d2:5d:c3:af:3e:41:d1:2f:
56:3f:6b:c3:42:e7:4c:ae:a2:53:a0:ad:7a:26:ee:
b8:88:bf:12:33:69:ee:01:3d:ac:68:1e:4c:50:d7:
c4:1d:59:b3:84:d2:68:33:8d:6e:d4:bb:ca:8c:d9:
21:00:05:9a:71:de:9f:8b:e7:f7:32:4f:80:17:5d:
10:11:77:e5:f9:86:86:5d:14:2a:36:5a:f0:06:d8:
49:84:8f:d5:25:a1:a2:cd:49:ae:8c:e1:98:86:71:
7d:3c:23:72:ae:8c:2b:42:86:62:c7:f0:a5:90:0b:
6a:1d:6c:57:ce:25:31:95:e3:23:da:58:11:97:16:
3a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:61:6B:3A:87:27:0A:B8:E9:84:DA:92:47:95:D4:25:EC:1F:86:FC
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/5E652FFCCC5511F1BBB1CA9A0966CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
61.18.253.0/24
Signature Algorithm: sha256WithRSAEncryption
92:02:30:99:64:dd:e2:55:02:3c:0b:db:7f:e0:85:cc:73:ca:
17:77:02:54:99:aa:ed:db:37:43:23:57:60:8b:21:f4:aa:0d:
09:9d:10:73:09:94:f3:b0:58:3e:c0:47:f8:f6:30:d8:c6:1f:
d6:ac:54:79:b3:c9:31:39:7d:1a:02:4a:4a:ad:13:71:86:da:
1b:9a:fa:79:ba:1e:d0:0c:0d:62:9e:17:ac:47:64:f0:34:11:
7d:04:cc:e4:fb:29:33:d1:87:a3:80:9f:30:12:f1:c9:eb:02:
2a:ae:94:a4:5d:5f:4f:dc:ad:59:a5:0c:a3:42:62:4b:2d:ef:
32:ad:75:e8:9d:c5:bc:d0:8e:f8:9b:19:0f:0d:38:c6:40:0c:
82:74:12:c3:a6:f8:72:20:26:7c:1c:fa:a4:d7:09:e9:58:e0:
fd:0a:02:1a:ff:38:54:2a:29:3f:e6:59:7c:d2:4c:f8:d1:e7:
b8:d7:c1:e8:02:25:a0:70:09:b9:80:88:2e:b2:02:46:5f:59:
d2:33:a0:36:62:c8:18:4e:14:4c:4d:96:86:54:b2:a0:ac:1b:
87:97:02:0e:56:fd:57:a7:0e:45:50:33:ee:03:ad:eb:5f:a5:
73:dc:57:18:7a:3a:61:5e:44:0d:77:1a:fb:2c:bf:05:32:0c:
bd:00:77:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:56:19 2026 by rpki-client