
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57370A4C541A11F1A6DC56E096833773.roa
File: 57370A4C541A11F1A6DC56E096833773.roa (raw, json)
Hash identifier: ZsVGtegTGQsj16vRj+9ULdFgvMhhwvD8FE+3MYY/pa0=
Subject key identifier: DD:53:D0:4A:E2:D2:2B:1E:77:47:8E:69:6F:5D:8D:52:9E:61:B9:B6
Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial: C4
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57370A4C541A11F1A6DC56E096833773.roa
Signing time: Wed 20 May 2026 07:05:54 +0000
ROA not before: Wed 20 May 2026 07:05:53 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 200772
IP address blocks: 74.52.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Validity
Not Before: May 20 07:05:53 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a0d5d51-0a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:e2:53:43:c8:f4:9c:2f:bf:7b:87:84:72:
10:d2:a4:da:51:c6:3a:15:86:1f:a9:5c:9f:bd:84:
be:ed:52:9a:b5:59:53:8e:8d:0e:0c:77:35:45:ed:
78:6a:8d:98:5d:21:a8:89:c8:13:17:04:4c:a9:a5:
5a:ee:3c:ce:f6:ed:6f:31:11:63:7f:cd:63:26:8d:
41:83:51:48:86:34:23:9d:ea:88:14:b6:5a:d3:10:
67:39:9a:ed:d4:1f:e0:24:36:3a:19:22:27:8f:e6:
ba:a9:ac:9f:65:39:7f:fe:90:2c:98:ad:05:0d:82:
2b:39:ed:fa:76:cb:74:9f:12:b5:f3:06:41:dc:ef:
f7:74:8b:1d:b8:85:ee:24:17:5e:0a:43:a1:1e:9d:
4c:1d:2a:ec:d0:f6:4c:e4:81:2d:6a:f2:ad:4d:2c:
3c:c7:0f:76:86:ba:95:33:48:2a:85:02:00:c3:2f:
05:ca:75:df:37:30:0d:5d:34:bf:d4:99:db:69:65:
3c:af:82:95:41:5a:06:98:f7:ce:3b:bd:54:8e:95:
a9:41:2d:4e:23:00:41:ac:f6:bc:67:5d:df:35:c6:
12:80:05:98:2d:56:78:d2:3c:51:ae:af:e1:e1:eb:
e1:26:e4:42:2e:d8:0e:89:b8:23:04:7d:72:53:17:
04:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:53:D0:4A:E2:D2:2B:1E:77:47:8E:69:6F:5D:8D:52:9E:61:B9:B6
X509v3 Authority Key Identifier:
keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57370A4C541A11F1A6DC56E096833773.roa
sbgp-ipAddrBlock: critical
IPv4:
74.52.12.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:ce:87:44:c6:ed:e7:86:60:09:db:c4:0c:30:8e:b1:f0:5b:
8b:5d:0e:ab:0e:2f:97:4f:55:d7:58:a5:2f:1d:ae:a4:ca:d6:
57:cc:c7:9b:ea:fc:aa:0c:88:ee:7c:77:6e:40:8a:db:0f:4e:
e6:db:ff:20:35:58:08:f3:7a:ca:5a:98:13:04:5f:e6:05:2a:
de:fa:9e:7f:8d:30:a3:57:1c:bd:cf:7e:18:5f:12:69:d5:ee:
a8:f8:03:d2:e2:3f:fb:de:c1:18:cf:6f:ba:3d:f3:c4:fc:4e:
0f:d2:00:9e:dc:5e:46:88:ca:fb:67:c4:a4:00:e6:82:37:cd:
8b:ac:2f:57:8a:4a:4b:28:d3:f2:80:01:04:12:6e:a9:7d:3c:
f6:8f:2b:c0:0a:3a:bd:61:30:5b:95:31:61:f9:3f:b5:09:07:
a8:f3:ca:ec:fe:21:fb:87:78:eb:6b:85:cb:93:e1:9e:e8:76:
7c:f5:e7:48:a5:58:ec:42:90:92:ea:72:76:cb:2c:a8:b4:0f:
53:53:42:4b:93:82:2f:99:49:b2:1f:0e:6c:fe:f2:79:69:6c:
64:d6:61:5d:9d:ae:31:1a:4f:31:04:ad:7c:c3:e7:f9:3b:d1:
ab:43:ff:51:13:03:00:c0:2e:4b:76:05:28:f0:24:d8:b1:6e:
e6:b8:04:2e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG
Mzc2OUI0REUwHhcNMjYwNTIwMDcwNTUzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTBkNWQ1MS0wYTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvW7iU0PI9Jwvv3uHhHIQ0qTaUcY6FYYfqVyfvYS+7VKatVlTjo0ODHc1Re14
ao2YXSGoicgTFwRMqaVa7jzO9u1vMRFjf81jJo1Bg1FIhjQjneqIFLZa0xBnOZrt
1B/gJDY6GSInj+a6qayfZTl//pAsmK0FDYIrOe36dst0nxK18wZB3O/3dIsduIXu
JBdeCkOhHp1MHSrs0PZM5IEtavKtTSw8xw92hrqVM0gqhQIAwy8FynXfNzANXTS/
1JnbaWU8r4KVQVoGmPfOO71UjpWpQS1OIwBBrPa8Z13fNcYSgAWYLVZ40jxRrq/h
4evhJuRCLtgOibgjBH1yUxcEvwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN1T0Eri
0ised0eOaW9djVKeYbm2MB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz
NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvNTczNzBBNEM1
NDFBMTFGMUE2REM1NkUwOTY4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBSjQMMA0GCSqGSIb3DQEBCwUAA4IBAQAszodExu3nhmAJ28QMMI6x
8FuLXQ6rDi+XT1XXWKUvHa6kytZXzMeb6vyqDIjufHduQIrbD07m2/8gNVgI83rK
WpgTBF/mBSre+p5/jTCjVxy9z34YXxJp1e6o+APS4j/73sEYz2+6PfPE/E4P0gCe
3F5GiMr7Z8SkAOaCN82LrC9XikpLKNPygAEEEm6pfTz2jyvACjq9YTBblTFh+T+1
CQeo88rs/iH7h3jra4XLk+Ge6HZ89edIpVjsQpCS6nJ2yyyotA9TU0JLk4IvmUmy
Hw5s/vJ5aWxk1mFdna4xGk8xBK18w+f5O9GrQ/9REwMAwC5LdgUo8CTYsW7muAQu
-----END CERTIFICATE-----
Generated at Thu May 28 18:28:23 2026 by rpki-client