
$ rpki-client -vvf rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/41339BFA973D11F184508C1C3711F970.roa
File: 41339BFA973D11F184508C1C3711F970.roa (raw, json)
Hash identifier: ErCTpmbM2VNJ1hvCRE7AmqqAa2l2NDuA3762i8vtV40=
Subject key identifier: 9F:10:6B:39:FA:0A:EF:ED:04:7D:6A:C4:DC:5D:48:53:4F:0F:35:2A
Certificate issuer: /CN=A91443EA/serialNumber=1737CE56F40B1FBE85E6E5EB034FD6B2A1646FCC
Certificate serial: 02
Authority key identifier: 17:37:CE:56:F4:0B:1F:BE:85:E6:E5:EB:03:4F:D6:B2:A1:64:6F:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzfOVvQLH76F5uXrA0_WsqFkb8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/41339BFA973D11F184508C1C3711F970.roa
Signing time: Thu 13 Aug 2026 17:34:37 +0000
ROA not before: Thu 13 Aug 2026 17:34:37 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 154831
IP address blocks: 163.52.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.crl
rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzfOVvQLH76F5uXrA0_WsqFkb8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91443EA, serialNumber=1737CE56F40B1FBE85E6E5EB034FD6B2A1646FCC
Validity
Not Before: Aug 13 17:34:37 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a7e002d-9a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:09:91:b0:49:27:67:c7:8a:3f:b6:10:b2:
7d:96:c6:cc:8f:fc:eb:59:e2:4e:da:83:6d:1f:81:
03:8a:68:98:3d:bc:9b:49:ee:df:79:00:58:52:62:
e6:9a:b7:17:d3:28:97:24:a2:2d:1a:72:43:61:05:
ca:ed:77:70:f7:27:30:d1:46:8e:d6:60:ef:cf:dd:
16:87:ca:6b:14:ef:39:3d:e2:c7:53:7e:8e:36:6c:
6d:ea:06:93:74:53:dc:7f:7d:d5:64:62:6c:69:63:
21:4f:a6:36:8c:30:83:e9:d3:68:94:cc:83:c5:3d:
df:f6:08:1c:29:4e:c3:ea:1f:86:b6:40:b3:00:36:
b1:e5:ac:85:57:da:8f:45:ef:b6:33:14:30:a7:20:
ec:43:fa:06:8b:da:e6:c5:e8:5c:6f:4c:4b:3a:bb:
b3:ea:aa:62:9c:a8:b0:4c:6b:f7:33:e2:fc:4c:92:
4a:f1:ea:55:d5:c7:ce:14:34:e4:b6:3a:4c:85:06:
bb:12:d9:61:28:5f:03:c0:e1:71:c2:03:91:6e:e5:
d0:d5:04:38:95:c9:e9:61:e8:5f:11:28:ec:4b:d4:
df:90:69:d7:14:37:45:c7:ad:6f:04:cd:d2:3d:0e:
b1:b2:8f:4c:47:19:aa:16:76:f8:20:f1:0c:75:db:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:10:6B:39:FA:0A:EF:ED:04:7D:6A:C4:DC:5D:48:53:4F:0F:35:2A
X509v3 Authority Key Identifier:
keyid:17:37:CE:56:F4:0B:1F:BE:85:E6:E5:EB:03:4F:D6:B2:A1:64:6F:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzfOVvQLH76F5uXrA0_WsqFkb8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/41339BFA973D11F184508C1C3711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.0.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:ef:71:ac:89:f6:54:4d:dc:b4:ee:bb:a6:d9:74:c2:d8:3f:
4d:96:5f:cb:79:12:e3:1b:7b:0d:ed:c7:a1:a1:7c:e8:87:08:
9a:9d:54:e2:35:36:34:64:29:b1:b9:d4:f2:f7:3e:ee:1f:e0:
5a:da:76:e0:98:12:ce:e1:bc:e9:e4:c6:88:01:e9:f6:12:ea:
17:04:8f:3e:f1:4c:c8:1b:96:96:a0:65:ed:8d:ab:36:72:02:
5c:b6:bc:3a:48:61:61:32:4d:81:f7:5f:64:0a:cf:91:b7:9c:
79:69:4b:b3:2e:81:ff:19:e9:15:e9:e3:99:4d:7b:f6:fe:47:
05:e3:1c:30:6c:33:a5:f8:f8:72:6c:c9:82:cb:57:44:6f:d6:
3b:7f:cb:fb:c0:23:3c:fb:c0:d1:77:37:ff:d4:97:92:23:7e:
b5:20:d4:e1:d9:4f:b7:cf:76:db:d3:df:5b:bc:52:c0:7f:08:
75:33:84:94:81:65:3c:0a:01:82:26:e0:a6:e9:94:57:5c:b6:
ee:14:9d:51:40:81:41:f7:a3:79:a8:63:f9:dd:11:3d:f5:de:
79:5e:2f:8a:2e:6b:d6:01:c4:f4:e0:1b:2e:4e:d5:21:20:e2:
c2:67:9e:88:40:23:f6:8f:8c:cf:7e:7e:b7:82:9f:f3:63:a3:
4a:c3:18:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:08 2026 by rpki-client