
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/534E797A4F7811F1AC63D401CC833773.roa
File: 534E797A4F7811F1AC63D401CC833773.roa (raw, json)
Hash identifier: 5mHy/Dg6sIvxshHVU1sbOr5uORhw5btfT4zUILkd6BM=
Subject key identifier: 02:73:EB:CF:DC:59:E2:90:40:F4:8E:04:D2:C0:8B:00:87:BD:53:2C
Certificate issuer: /CN=A91547E4/serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C
Certificate serial: 60
Authority key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/534E797A4F7811F1AC63D401CC833773.roa
Signing time: Thu 14 May 2026 09:36:04 +0000
ROA not before: Thu 14 May 2026 09:36:04 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 38460
IP address blocks: 123.242.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl
rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 08:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C
Validity
Not Before: May 14 09:36:04 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a059784-fd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:a6:d5:ac:ab:d0:01:7f:d5:37:16:72:6f:
f0:a2:dc:b0:ec:a3:9d:ab:dd:08:7b:15:16:c8:96:
e2:53:ff:22:fa:8c:1a:3a:6f:01:1a:7c:c5:94:9e:
ad:c8:27:b9:1c:0e:68:10:c0:49:38:c7:6d:b3:32:
a4:9e:68:37:ba:14:f3:9f:e5:ee:9b:13:0e:96:ad:
60:20:5c:7a:81:0c:8e:a3:79:68:1d:d1:78:6c:96:
6c:6d:83:c2:2d:d5:46:e1:cb:77:75:f7:5e:21:b8:
d8:3a:60:f8:47:a8:6b:16:2e:ae:37:c1:c0:bc:6b:
f3:d0:2f:6f:f0:28:eb:58:2c:e9:a0:63:3a:b3:7e:
0a:b4:16:81:97:ab:ee:f7:bd:90:ba:a7:a9:6b:92:
fe:2a:1a:59:ec:95:49:06:be:93:bf:a1:08:b6:88:
e3:cf:7a:88:3b:69:de:6b:54:13:99:03:2f:9d:ce:
53:71:ce:c1:b6:b5:84:2f:48:61:7f:f9:6e:3f:70:
81:79:76:af:e5:17:72:e8:05:d7:80:20:7a:9e:8f:
e3:37:c2:72:04:53:aa:97:18:51:f0:19:5c:b0:e6:
ee:1e:57:a8:6b:da:ab:95:41:de:0d:f9:6e:25:9f:
79:09:7a:d8:e3:e1:15:1a:c8:f2:1d:d0:58:46:0c:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:73:EB:CF:DC:59:E2:90:40:F4:8E:04:D2:C0:8B:00:87:BD:53:2C
X509v3 Authority Key Identifier:
keyid:D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/534E797A4F7811F1AC63D401CC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
123.242.207.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ac:32:38:a9:36:af:40:4e:15:39:80:8c:2c:4c:70:fc:ae:
f1:df:ea:e5:85:b9:ea:38:ce:9a:28:1d:70:49:6a:a8:33:0b:
61:ff:46:69:54:c3:42:5e:7a:a3:55:5a:27:54:de:88:08:07:
20:34:c0:9a:ac:d7:a4:db:ef:b5:8d:3a:b8:56:c4:ad:52:37:
1c:ac:43:fc:86:c2:53:64:8e:70:aa:c4:3c:d0:69:96:6f:76:
11:8b:ba:1c:13:5c:1d:f3:0d:7a:c6:e5:2f:b4:b7:4f:ae:92:
e3:f1:6b:08:84:63:60:e7:be:ac:17:fc:9a:8c:9f:ca:fc:63:
29:68:5e:36:f2:14:d0:10:b6:35:d4:43:d8:b9:b9:1b:90:38:
a7:35:b5:ab:07:3b:84:8b:60:27:75:71:8f:19:18:f8:ba:5e:
44:de:fb:1c:54:c6:a3:dd:a8:f3:71:2f:6d:c3:9a:50:2b:52:
f3:49:88:e7:9e:86:d8:1d:21:f5:aa:c0:d2:b3:2e:84:d5:1a:
17:38:a4:96:89:6c:7f:33:c9:a9:84:a5:2b:c4:4d:1d:ee:ff:
55:8c:62:da:18:60:4b:fe:8b:55:88:0e:cf:10:8b:42:ed:9e:
32:28:62:0b:11:10:72:05:d6:9a:c2:b8:16:f1:78:09:f2:54:
0a:a7:ae:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 11:12:08 2026 by rpki-client