
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/5376E736BDC711F09FB1B25EC4F9AE02.roa
File: 5376E736BDC711F09FB1B25EC4F9AE02.roa (raw, json)
Hash identifier: RMhXCQUoZqaIdULmHSrEIahkX1757z06KKcWkJ122PU=
Subject key identifier: 2F:E3:C6:33:86:49:84:CC:65:A9:C9:AD:13:E7:E0:60:F0:82:04:9B
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 02C6
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/5376E736BDC711F09FB1B25EC4F9AE02.roa
Signing time: Sun 09 Nov 2025 23:53:44 +0000
ROA not before: Sun 09 Nov 2025 23:53:44 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 23679
IP address blocks: 202.134.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 18 Nov 2025 00:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710 (0x2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Nov 9 23:53:44 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69112988-7017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:6c:42:69:d6:15:c6:c3:07:fe:e0:be:23:
cb:45:d3:07:28:1a:9f:71:5b:b5:df:08:85:3c:71:
15:b3:53:d8:30:8d:1e:57:64:d7:b6:0d:e3:8b:a3:
b3:f2:73:f2:7c:69:f2:4b:90:08:8b:8e:53:01:50:
7a:ed:aa:79:98:ea:89:d5:e0:39:a8:46:21:d5:21:
a2:f5:55:7b:1f:41:a2:b5:a1:cd:fd:d2:54:87:ae:
0e:dc:29:8a:98:65:9d:fa:d4:7b:03:cb:71:d5:d7:
39:d2:1d:69:5c:79:b4:66:48:06:c8:4e:3a:3c:86:
7d:1c:cb:b3:6a:5d:c0:f1:82:5b:6d:9d:cd:9d:bf:
33:b5:e7:3f:64:5b:de:be:ac:8a:35:f4:df:a6:e2:
1d:0c:37:6b:cf:90:61:68:c1:ce:2b:81:a2:50:cc:
6c:4c:5f:78:0f:8d:e2:5b:ba:c6:20:f8:0c:04:b8:
81:21:0d:45:f8:d0:db:25:49:0c:bd:01:06:31:eb:
41:75:e3:f8:49:a8:d7:2a:48:da:df:b9:2d:40:26:
e8:4c:ba:0d:f9:c0:56:32:f9:4d:89:4b:eb:1f:55:
47:df:7a:8c:5e:3c:7d:13:81:81:9b:f3:3c:2a:96:
3a:4a:76:19:03:6c:6f:cd:e3:d2:e5:7d:64:f9:89:
a5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E3:C6:33:86:49:84:CC:65:A9:C9:AD:13:E7:E0:60:F0:82:04:9B
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/5376E736BDC711F09FB1B25EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.134.236.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:f5:08:83:0f:d0:78:ac:41:f4:64:54:76:38:f9:c9:16:fa:
9d:39:a8:45:bc:42:55:5c:fa:ef:40:32:7c:ec:9b:1a:12:47:
d0:04:df:2f:a8:3e:70:ae:96:00:1d:2a:bf:55:64:da:11:be:
06:56:59:de:3f:6e:22:c6:e0:4c:5f:ec:5e:22:f4:c1:42:a6:
2b:57:db:b0:34:b8:2d:1a:23:6b:b1:82:a0:46:d6:ac:58:e7:
2b:46:84:4b:63:0e:25:bc:dc:32:95:80:ca:54:86:ec:f7:b3:
8d:ae:41:66:62:da:9f:ee:bb:a5:e9:db:60:57:17:3a:24:b0:
24:b9:8c:7a:34:40:21:74:48:46:c1:0c:ae:a9:8d:2f:10:d4:
65:02:a5:d3:41:43:b2:6c:18:bf:41:26:34:af:dc:7b:1b:e1:
ea:b6:e9:5b:c1:5b:97:de:98:2e:f9:a3:7d:15:95:f4:23:04:
30:e2:9d:d6:fb:23:b6:08:e2:0d:fb:a1:e7:1f:6c:2f:65:9d:
57:4a:ee:a6:8e:75:87:0a:c1:49:28:d1:59:f6:f1:25:95:31:
f6:90:62:5c:bf:ef:88:b0:64:c5:e3:ef:a5:c9:d3:bb:b2:85:
2d:ed:e7:e2:05:43:96:16:da:e1:44:06:22:eb:3a:ee:ca:83:
25:d3:00:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 20:54:39 2025 by rpki-client