
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/C54DD1F45EDA11F0A5EAB579C4F9AE02.roa
File: C54DD1F45EDA11F0A5EAB579C4F9AE02.roa (raw, json)
Hash identifier: FqZP/xwpLEICrivpR+MiIySP/UWB1Pr1kwt+h035Nxs=
Subject key identifier: 16:C3:87:47:78:EC:63:40:56:4D:DF:61:CE:80:A4:75:8A:5C:CD:F6
Certificate issuer: /CN=A91A25DF/serialNumber=D3CF64D5DB1761FCB6A552F068091330C5B5F53B
Certificate serial: CE
Authority key identifier: D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/C54DD1F45EDA11F0A5EAB579C4F9AE02.roa
Signing time: Fri 07 Aug 2026 06:56:57 +0000
ROA not before: Fri 07 Aug 2026 06:56:56 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154031
IP address blocks: 165.101.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.crl
rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A25DF, serialNumber=D3CF64D5DB1761FCB6A552F068091330C5B5F53B
Validity
Not Before: Aug 7 06:56:56 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7581b8-4993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:35:46:6f:c4:fa:41:55:26:91:07:54:98:
c5:f2:28:29:46:e0:19:26:6a:41:a1:c2:0f:82:ca:
d9:3d:d4:53:58:83:1f:b8:f0:9a:e8:6d:4b:df:0f:
07:33:0e:a4:97:83:3b:38:53:2d:ca:61:d2:1f:ee:
8b:f4:b2:5f:43:a4:8b:33:5d:22:03:92:0d:d7:f0:
26:36:94:2c:be:5e:ea:b7:4a:c4:cc:3f:c9:2a:8d:
b1:98:01:42:3e:60:fb:a6:96:3b:00:37:cd:eb:7e:
c6:04:7b:63:77:2c:25:71:da:55:bb:7a:e4:fa:d4:
7c:e4:c4:0b:4d:36:4e:ef:e7:b2:1d:57:7c:10:cb:
8d:73:57:02:cc:12:48:35:ad:37:21:61:f1:3a:e9:
00:59:62:53:ca:5b:fd:04:69:57:7e:c9:f9:16:36:
ed:5a:07:46:7f:09:f2:96:fb:0d:ea:40:80:2d:d7:
a8:c8:1a:ac:64:48:87:4e:18:96:2e:e0:2d:46:17:
bb:5f:6a:70:c9:70:f9:29:dc:b9:fd:0e:c8:a4:fb:
b0:fb:bf:06:01:c1:90:02:e7:1b:44:e8:05:d6:e4:
8f:55:7f:05:a6:3e:c1:e6:c9:71:5c:62:b4:08:27:
70:2b:c6:05:4d:c4:e3:3b:9f:f4:33:a0:7d:b8:9c:
0c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C3:87:47:78:EC:63:40:56:4D:DF:61:CE:80:A4:75:8A:5C:CD:F6
X509v3 Authority Key Identifier:
keyid:D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/C54DD1F45EDA11F0A5EAB579C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.154.0/23
Signature Algorithm: sha256WithRSAEncryption
90:f6:20:75:9c:c5:5d:07:b8:68:36:24:11:3d:d0:86:3a:cb:
50:95:52:d4:b5:08:aa:4d:71:49:11:7a:b5:c4:68:8e:52:4f:
62:e2:d3:05:2e:b5:f6:55:a9:d4:62:a0:c0:54:8d:61:73:0a:
ba:7b:f5:c9:fd:db:96:1e:57:23:15:50:6b:1b:13:f9:1a:54:
22:c9:df:15:a5:58:a0:c2:17:a3:57:29:77:a7:d3:74:8e:be:
2b:63:b1:e4:8e:5d:63:8e:f6:01:2f:e9:21:a0:ac:a8:1f:a8:
7b:c7:5d:6d:c4:f5:e6:7b:d0:11:9e:ee:c7:c5:df:4b:ce:2b:
21:1f:89:6f:a4:0c:cd:46:d3:49:cf:69:ad:a4:1c:36:fb:92:
b0:f1:6e:23:33:1e:91:c8:9a:9c:07:02:cd:8a:58:84:77:fd:
c6:57:fc:43:65:97:7a:15:04:a8:b5:28:6b:d9:a6:61:d7:4e:
89:86:e4:29:13:0f:0c:dc:e5:18:d8:63:06:19:e8:93:98:e4:
24:62:38:25:19:7c:5a:9b:57:a0:2f:84:6b:89:73:3a:cb:ed:
11:59:6c:9a:93:fb:c9:04:ff:74:8e:69:d3:55:dc:b8:05:fa:
4a:8f:04:36:8b:ca:62:ca:79:79:b3:1e:6b:8c:6e:64:27:fb:
bf:70:04:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:27:36 2026 by rpki-client