
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/E51B21C4965311F1B6AAEF027011F970.roa
File: E51B21C4965311F1B6AAEF027011F970.roa (raw, json)
Hash identifier: biq88vO9CEHjMnLulBtUgawpd/kQwxBTdW+v2csmjzk=
Subject key identifier: 43:1C:FB:86:B7:E9:61:17:75:03:E3:50:F4:A8:36:C3:DA:4F:60:26
Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial: 0119
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/E51B21C4965311F1B6AAEF027011F970.roa
Signing time: Wed 12 Aug 2026 13:44:10 +0000
ROA not before: Wed 12 Aug 2026 13:44:10 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 154047
IP address blocks: 74.52.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 20:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Validity
Not Before: Aug 12 13:44:10 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a7c78a9-3481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:27:9c:f6:62:0f:8b:53:63:39:d6:99:dc:
e6:cd:98:f9:1e:b5:8d:0e:97:41:8c:f9:fc:2d:05:
b6:45:35:6f:e0:e0:98:fb:86:49:d7:f3:d6:36:86:
56:30:bc:f1:f0:d2:d6:06:89:7a:0b:59:fe:8a:92:
d3:07:6d:9a:ff:b8:6f:cb:20:c9:4e:9d:af:96:fd:
2b:3a:88:16:51:0f:33:8b:9d:86:12:70:be:2c:6f:
54:90:87:dc:03:8e:ad:5e:d6:d4:21:51:8e:fd:61:
80:41:5b:5e:6c:e9:09:cb:51:78:a4:1e:9f:61:1b:
7a:31:20:db:54:51:22:c1:ac:76:c4:d6:3a:67:a4:
19:a8:22:7c:71:68:f0:4b:5f:e8:71:ab:79:93:f1:
22:e1:f6:70:d0:07:50:96:28:a8:e5:60:f5:6a:b1:
dc:20:f5:51:aa:1f:81:2c:87:d0:ce:77:4b:3a:d3:
8b:81:b5:2c:e6:b3:54:3d:3b:20:90:65:e4:8f:91:
1c:ee:e8:07:d0:4b:80:23:6b:c4:6d:94:df:20:73:
4c:ec:5e:e5:25:0f:2b:32:00:6f:c6:cb:15:30:67:
90:e5:21:4a:34:84:2d:d6:13:16:6b:c3:5a:98:bc:
3b:1f:57:5b:f4:4c:ed:ef:6a:0b:a1:fd:3b:14:93:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1C:FB:86:B7:E9:61:17:75:03:E3:50:F4:A8:36:C3:DA:4F:60:26
X509v3 Authority Key Identifier:
keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/E51B21C4965311F1B6AAEF027011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
74.52.3.0/24
Signature Algorithm: sha256WithRSAEncryption
52:88:13:35:4e:3a:d9:31:df:15:6c:fb:7c:59:80:69:3f:5b:
4f:9c:88:dc:9a:db:1b:17:35:db:37:63:44:21:66:30:cc:7a:
ed:3a:9a:05:35:c4:c8:b7:bd:fc:97:81:64:ab:46:4a:05:1e:
08:31:90:ad:59:84:af:89:6c:bf:be:d8:9c:74:20:5b:70:e3:
32:d5:30:55:1a:89:35:c5:61:8b:df:03:25:f2:76:d4:52:56:
6f:78:55:f1:c9:47:4e:ef:72:a7:be:4d:98:14:5a:28:88:50:
b1:4d:31:a0:0a:f6:11:a9:e1:59:a4:70:51:8d:36:0f:2b:a2:
38:e0:cb:7c:77:2f:8f:49:a2:ea:f6:3b:5b:f6:13:82:ca:f0:
2a:63:d8:0a:52:5c:a3:33:51:50:ff:2f:32:79:74:e0:f3:08:
96:b4:bc:90:be:47:98:08:cd:fe:79:8b:74:49:78:5a:f4:dc:
cc:3d:c8:e9:4b:52:92:fd:e8:34:5b:e8:c0:7b:84:3f:e8:68:
f4:de:94:24:37:e5:ed:90:b0:6b:25:b6:1f:5f:f4:80:47:aa:
28:d1:bf:7b:25:ba:d6:7b:01:ee:02:1d:62:7c:65:78:05:c5:
72:48:35:fa:78:97:54:e4:8f:95:f3:b1:27:a4:00:91:b1:69:
09:48:1f:bb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG
Mzc2OUI0REUwHhcNMjYwODEyMTM0NDEwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdjNzhhOS0zNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqqcnnPZiD4tTYznWmdzmzZj5HrWNDpdBjPn8LQW2RTVv4OCY+4ZJ1/PWNoZW
MLzx8NLWBol6C1n+ipLTB22a/7hvyyDJTp2vlv0rOogWUQ8zi52GEnC+LG9UkIfc
A46tXtbUIVGO/WGAQVtebOkJy1F4pB6fYRt6MSDbVFEiwax2xNY6Z6QZqCJ8cWjw
S1/ocat5k/Ei4fZw0AdQliio5WD1arHcIPVRqh+BLIfQzndLOtOLgbUs5rNUPTsg
kGXkj5Ec7ugH0EuAI2vEbZTfIHNM7F7lJQ8rMgBvxssVMGeQ5SFKNIQt1hMWa8Na
mLw7H1db9Ezt72oLof07FJOQ1wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEMc+4a3
6WEXdQPjUPSoNsPaT2AmMB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz
NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvRTUxQjIxQzQ5
NjUzMTFGMUI2QUFFRjAyNzAxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQASjQDMA0GCSqGSIb3DQEBCwUAA4IBAQBSiBM1TjrZMd8VbPt8WYBp
P1tPnIjcmtsbFzXbN2NEIWYwzHrtOpoFNcTIt738l4Fkq0ZKBR4IMZCtWYSviWy/
vticdCBbcOMy1TBVGok1xWGL3wMl8nbUUlZveFXxyUdO73Knvk2YFFooiFCxTTGg
CvYRqeFZpHBRjTYPK6I44Mt8dy+PSaLq9jtb9hOCyvAqY9gKUlyjM1FQ/y8yeXTg
8wiWtLyQvkeYCM3+eYt0SXha9NzMPcjpS1KS/eg0W+jAe4Q/6Gj03pQkN+XtkLBr
JbYfX/SAR6oo0b97JbrWewHuAh1ifGV4BcVySDX6eJdU5I+V87EnpACRsWkJSB+7
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:56 2026 by rpki-client