
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/63B9CFC4601411F1877882318A47A888.roa
File: 63B9CFC4601411F1877882318A47A888.roa (raw, json)
Hash identifier: /dUV29a5JWdPNy1oP9PAybXKl1uAj0Fu+u4R9AbUVu4=
Subject key identifier: 82:D6:77:43:96:0D:95:11:6B:25:83:26:D0:9D:93:57:40:C7:2F:39
Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial: D9
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/63B9CFC4601411F1877882318A47A888.roa
Signing time: Thu 04 Jun 2026 12:53:32 +0000
ROA not before: Thu 04 Jun 2026 12:53:31 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 20055
IP address blocks: 74.52.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Validity
Not Before: Jun 4 12:53:31 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a21754b-5b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:5a:cc:de:d0:bf:d3:3d:30:8c:bf:b6:34:
3e:64:c8:05:99:03:ab:6d:55:3c:12:59:d8:81:cf:
dd:36:86:76:cc:a4:50:4c:51:ce:82:bd:67:38:f1:
9b:ef:47:d2:6e:c5:51:57:1e:99:06:a8:a4:52:4c:
a1:20:94:73:8a:be:cf:cd:9a:96:7b:6b:42:e0:a1:
5a:e1:67:5f:96:ca:13:69:11:fa:9e:dd:ea:72:69:
f1:95:63:29:56:42:ca:13:5d:a1:56:73:c8:2c:9f:
c9:3a:a5:d8:b5:fb:89:76:08:91:69:9f:e2:59:5f:
b7:e9:76:02:e0:bb:79:95:af:d4:40:8b:82:0a:14:
ea:c2:44:14:db:26:65:89:f6:32:44:18:1b:92:75:
aa:39:4f:49:61:82:72:76:08:7e:17:5c:4b:4c:ed:
f7:cc:0c:8f:1f:36:d7:34:30:af:03:56:0a:16:7b:
6e:58:22:3c:7c:fc:d2:70:bf:8d:e9:02:01:8e:87:
bd:d9:2b:ca:49:48:02:17:3c:9f:74:4b:d7:08:bd:
80:c3:d4:03:4e:f0:26:2d:36:75:8b:bf:31:c7:ff:
a7:53:82:2a:a7:de:31:ac:1b:c9:28:1e:5c:a3:d8:
43:0e:29:44:c9:45:2d:52:e2:dd:b1:de:20:2d:7e:
d0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D6:77:43:96:0D:95:11:6B:25:83:26:D0:9D:93:57:40:C7:2F:39
X509v3 Authority Key Identifier:
keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/63B9CFC4601411F1877882318A47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
74.52.128.0/17
Signature Algorithm: sha256WithRSAEncryption
ac:5d:1f:b9:b5:9f:b7:3e:fe:df:89:a3:f8:f7:b1:4b:3f:e6:
02:81:2b:f9:b6:da:04:07:ac:c9:23:11:bd:8f:db:ab:c6:91:
3c:83:79:13:09:84:43:01:7c:ca:a0:5e:b4:53:4f:26:b1:72:
8a:10:9b:3e:3e:62:86:7e:48:7f:f1:8f:5e:09:d5:bd:dd:89:
ea:99:07:a6:02:dc:38:c4:c0:8f:75:2e:d4:fc:50:48:12:e2:
47:f2:55:d5:e7:b9:49:05:2a:87:61:30:48:75:b4:d3:ca:5e:
c5:32:f6:ce:85:cd:9c:de:b8:3e:68:92:ac:cc:56:ec:39:09:
9b:06:49:3f:d4:21:c0:4f:9f:e3:62:3d:26:eb:90:6a:d8:6b:
aa:a8:0d:5b:98:c0:2e:9b:d3:3f:28:b2:a1:fa:a3:88:de:be:
ad:21:3c:de:79:11:05:09:16:0f:8d:ac:bc:9f:4f:cc:9d:ce:
4b:24:5a:66:17:60:43:2e:1f:8a:ee:cd:9d:23:09:fc:31:b2:
61:87:38:d6:87:41:06:89:01:e5:2c:2a:be:6e:63:85:99:2a:
63:ae:23:62:e5:c5:39:31:1e:e7:1e:85:2a:6d:50:d8:20:85:
10:58:c9:4d:e9:24:fb:5f:96:97:45:e0:6e:b7:5f:68:9a:ec:
0e:57:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:10:29 2026 by rpki-client