
$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/CD5D6E32457411F1A79BF008B4833773.roa
File: CD5D6E32457411F1A79BF008B4833773.roa (raw, json)
Hash identifier: ov2cn0hdjIaDQDbU24O0PtbCpiSn8/k/CW+RbhycUxs=
Subject key identifier: 39:22:AC:54:DE:28:95:E8:7E:90:8F:1D:CF:D2:EF:79:93:FA:57:BA
Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial: 0161
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/CD5D6E32457411F1A79BF008B4833773.roa
Signing time: Fri 01 May 2026 15:45:39 +0000
ROA not before: Fri 01 May 2026 15:45:39 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 54113
IP address blocks: 64.251.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Validity
Not Before: May 1 15:45:39 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69f4caa3-bc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:05:d4:96:24:dc:e9:53:20:7c:ec:b2:36:
80:9d:31:11:ba:6d:70:af:00:0f:ed:18:36:7d:a2:
40:c1:3c:29:3f:0e:ef:e1:99:28:fc:dc:08:d3:8e:
2b:2e:3c:e7:8c:e2:9d:79:08:9f:ec:f0:93:f8:dc:
63:7f:b6:19:87:c6:fb:b4:fb:6b:04:5b:da:2f:91:
d7:32:57:a4:32:e3:a4:9f:79:32:4a:7a:60:49:14:
77:22:f7:b4:df:ff:2e:e9:14:3d:be:fb:46:e5:fd:
65:f8:47:a3:44:53:29:a2:cd:c2:db:66:cf:b0:1e:
b8:a4:9b:22:df:f9:2e:db:16:ff:9d:49:3e:80:06:
f5:26:df:19:99:05:38:ba:33:5b:15:5b:74:29:8c:
7e:08:3e:76:ec:60:6b:56:69:a5:f1:6a:c2:fe:7e:
6e:e5:22:8e:96:ce:dc:04:3f:6a:a0:ca:fd:e5:13:
85:ce:68:9e:47:fe:db:d1:62:4d:ad:fa:67:7e:7a:
66:ae:0c:77:76:3b:93:7e:dc:a6:73:90:58:8b:ca:
17:10:25:25:ef:f7:61:b2:eb:5d:3a:66:6d:dd:61:
da:b3:3d:0c:a4:4c:40:2f:9a:b3:ed:6c:b3:3c:47:
76:6d:7d:ea:b1:6f:1c:c3:08:29:8b:69:61:2f:90:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:AC:54:DE:28:95:E8:7E:90:8F:1D:CF:D2:EF:79:93:FA:57:BA
X509v3 Authority Key Identifier:
keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/CD5D6E32457411F1A79BF008B4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
64.251.201.0/24
Signature Algorithm: sha256WithRSAEncryption
58:de:b6:3e:bd:5f:a4:d9:b4:48:b4:c8:4c:c7:e1:a3:6a:5e:
8b:9d:77:0e:12:a6:c8:ee:eb:0d:53:45:90:da:93:40:8b:77:
57:d3:40:cd:82:7f:93:28:a3:8d:5d:85:56:cb:13:b6:85:2c:
e9:cb:76:90:53:56:98:b5:a7:97:bf:85:ac:dd:05:24:38:23:
e1:11:8e:b3:4b:ef:ba:92:e9:35:e2:fa:75:ab:39:04:f4:c9:
dd:1e:b1:55:1a:4b:22:8c:da:3a:97:a4:30:04:84:6a:72:d4:
95:79:1a:40:13:67:e5:97:a2:23:58:69:f4:ba:83:1b:bb:54:
09:b8:af:4e:72:ca:7f:33:54:b8:7c:85:4d:29:81:26:d9:eb:
e8:6d:69:bb:d1:cc:96:37:20:44:44:d8:cf:19:5d:60:c7:6c:
c5:5b:c6:a7:60:83:b3:c8:5c:e1:6a:ae:d6:c1:f0:51:5b:57:
0d:98:50:75:2c:d9:67:f3:10:ae:4f:a8:f3:eb:78:7b:22:01:
2e:72:7a:d7:aa:11:5a:b8:d7:b0:80:a0:98:32:5b:1d:c8:84:
8e:f2:93:d7:ec:5a:52:ba:eb:d0:cd:91:a4:e6:a5:49:fa:58:
90:df:a0:e0:28:39:fa:23:4b:c8:94:bd:8a:fd:98:54:12:6f:
00:86:04:62
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODgzRDMxMTAvBgNVBAUTKEVCM0M4RjI0QkJBREM5NDEzNDg3MUQ2RTVGRDBCN0M1
OEI0OUQzQzkwHhcNMjYwNTAxMTU0NTM5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY0Y2FhMy1iYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsVYF1JYk3OlTIHzssjaAnTERum1wrwAP7Rg2faJAwTwpPw7v4Zko/NwI044r
LjznjOKdeQif7PCT+Nxjf7YZh8b7tPtrBFvaL5HXMlekMuOkn3kySnpgSRR3Ive0
3/8u6RQ9vvtG5f1l+EejRFMpos3C22bPsB64pJsi3/ku2xb/nUk+gAb1Jt8ZmQU4
ujNbFVt0KYx+CD527GBrVmml8WrC/n5u5SKOls7cBD9qoMr95ROFzmieR/7b0WJN
rfpnfnpmrgx3djuTftymc5BYi8oXECUl7/dhsutdOmZt3WHasz0MpExAL5qz7Wyz
PEd2bX3qsW8cwwgpi2lhL5DrRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDkirFTe
KJXofpCPHc/S73mT+le6MB8GA1UdIwQYMBaAFOs8jyS7rclBNIcdbl/Qt8WLSdPJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy84RDAzRUYzNjVF
MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi82enlQSkx1dHlVRTBoeDF1WDlDM3hZdEow
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZ6eVBKTHV0eVVFMGh4MXVYOUMzeFl0SjA4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODgzRDMvOEQwM0VGMzY1RTM2MTFFRkFDOTJEMzE0QzRGOUFFMDIvQ0Q1RDZFMzI0
NTc0MTFGMUE3OUJGMDA4QjQ4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAQPvJMA0GCSqGSIb3DQEBCwUAA4IBAQBY3rY+vV+k2bRItMhMx+Gj
al6LnXcOEqbI7usNU0WQ2pNAi3dX00DNgn+TKKONXYVWyxO2hSzpy3aQU1aYtaeX
v4Ws3QUkOCPhEY6zS++6kuk14vp1qzkE9MndHrFVGksijNo6l6QwBIRqctSVeRpA
E2fll6IjWGn0uoMbu1QJuK9Ocsp/M1S4fIVNKYEm2evobWm70cyWNyBERNjPGV1g
x2zFW8anYIOzyFzhaq7WwfBRW1cNmFB1LNln8xCuT6jz63h7IgEucnrXqhFauNew
gKCYMlsdyISO8pPX7FpSuuvQzZGk5qVJ+liQ36DgKDn6I0vIlL2K/ZhUEm8AhgRi
-----END CERTIFICATE-----
Generated at Sun May 3 17:49:59 2026 by rpki-client