
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/53B6182C213611EAB9F02B49C4F9AE02.roa
File: 53B6182C213611EAB9F02B49C4F9AE02.roa (raw, json)
Hash identifier: Sf7T7nqoiwanNmoT5xjD/ECBTHl8a6Lp5sCrNE7TEGA=
Subject key identifier: B6:24:1C:C2:9D:1E:2E:6D:43:95:66:53:6B:3C:E4:1B:E0:A8:4A:54
Certificate issuer: /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014
Certificate serial: 0CCE
Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/53B6182C213611EAB9F02B49C4F9AE02.roa
Signing time: Thu 08 Oct 2026 19:35:48 +0000
ROA not before: Thu 08 Oct 2026 19:35:48 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 58983
IP address blocks: 45.119.160.0/22 maxlen: 22
45.119.160.0/23 maxlen: 23
45.119.160.0/24 maxlen: 24
45.119.161.0/24 maxlen: 24
45.119.162.0/23 maxlen: 23
45.119.162.0/24 maxlen: 24
45.119.163.0/24 maxlen: 24
103.240.176.0/22 maxlen: 22
103.240.176.0/23 maxlen: 23
103.240.176.0/24 maxlen: 24
103.240.177.0/24 maxlen: 24
103.240.178.0/23 maxlen: 23
103.240.178.0/24 maxlen: 24
103.240.179.0/24 maxlen: 24
2400:5880::/32 maxlen: 32
2400:5880::/33 maxlen: 33
2400:5880:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl
rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3278 (0xcce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185CF3, serialNumber=A7A2674E8484603920779A352C55804E55365014
Validity
Not Before: Oct 8 19:35:48 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac7f094-9912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:8a:f1:2d:b1:7f:6f:97:69:4e:ac:2f:ca:
08:eb:b4:50:c0:0f:2b:68:5c:07:7e:6d:f4:b8:3c:
e3:55:b6:03:51:bc:bb:86:67:7c:6f:ad:c8:fd:fa:
fe:29:d3:1d:f9:c1:f5:5e:53:f1:69:18:53:d3:fd:
b8:3b:37:5e:56:1d:a6:f5:64:a3:d8:e5:66:c3:db:
e3:6e:ee:fd:75:9b:04:90:88:1c:18:e1:cd:bc:89:
7f:8d:b0:29:3d:fc:31:53:99:97:20:2a:23:90:e8:
4f:08:ec:e1:3b:c1:86:b5:b1:bb:bb:98:ec:94:5f:
d1:50:bb:a4:6c:ad:84:9e:43:ad:8f:cb:03:a4:ea:
5a:83:bf:53:25:bc:ef:58:ef:25:91:31:99:b0:39:
48:3b:e2:44:a8:ca:1c:1b:cd:ae:cf:df:e8:7b:ed:
56:6e:16:f4:85:d0:b9:39:d0:b4:33:6d:ed:0e:39:
97:fe:32:a0:25:e2:cb:6d:18:76:9e:30:14:d8:20:
7b:e7:fa:0c:06:84:b8:b7:27:ab:0b:d5:5d:4a:a4:
d0:9e:40:b5:5c:3f:f3:8e:b7:88:c5:6d:50:e6:0d:
0f:7b:dd:e1:fa:cf:47:87:43:c6:f4:58:a3:91:08:
fb:6e:c1:ba:78:e8:a2:cb:9a:12:b8:cd:24:17:b4:
45:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:24:1C:C2:9D:1E:2E:6D:43:95:66:53:6B:3C:E4:1B:E0:A8:4A:54
X509v3 Authority Key Identifier:
keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/53B6182C213611EAB9F02B49C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.119.160.0/22
103.240.176.0/22
IPv6:
2400:5880::/32
Signature Algorithm: sha256WithRSAEncryption
35:e1:31:b8:a4:db:0f:c6:3b:c5:35:d9:aa:35:a9:2b:bb:c5:
0f:bc:c5:d4:ac:5a:82:20:13:cc:ad:c6:ae:e9:4c:14:ed:af:
33:d8:6f:25:d9:43:b8:f9:cb:00:b6:e8:98:75:ea:c2:85:bf:
51:9c:2f:4c:23:f0:57:0d:0d:91:1f:16:f5:88:39:55:0d:63:
23:25:70:9e:78:c6:99:8b:e1:74:fd:f6:79:b0:43:a9:2d:a3:
c9:09:c9:03:bc:b6:c0:85:13:24:43:8a:5a:b5:d8:7a:5b:1d:
5b:4c:ee:34:ff:6d:a6:ee:e8:91:a5:7d:ad:52:58:fc:c1:fb:
03:23:dc:24:2d:e5:de:20:f4:8c:8f:7b:de:48:23:34:f8:5e:
ee:9f:c9:10:d1:4b:25:f6:bc:45:67:81:d6:ee:20:23:92:03:
33:8c:5e:ed:f7:63:cd:fe:9a:a4:fb:31:13:42:02:11:49:0b:
da:f8:19:57:bc:25:47:c6:8c:fd:02:4f:d3:0c:96:ce:2e:50:
16:7a:ed:5b:bd:3b:a0:c8:7f:c2:8c:81:24:ce:c8:76:4c:c4:
ae:4f:c7:08:86:72:21:90:5d:e1:f2:7b:e4:60:f6:53:77:49:
ac:06:75:21:db:37:b1:ad:05:f6:66:c0:1a:ee:c5:9b:70:5f:
2d:31:3f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 03:12:40 2026 by rpki-client