
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DD890BBCAA9C11F19F04260F3311F970.roa
File: DD890BBCAA9C11F19F04260F3311F970.roa (raw, json)
Hash identifier: dc58Ik+rvtv7DPEkUFFu4gn25qgDCCMkoi43G75u9yg=
Subject key identifier: F8:0D:9D:66:1A:85:38:4F:88:4A:8A:64:53:3B:E4:7F:8E:D1:27:97
Certificate issuer: /CN=A91D7818/serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9
Certificate serial: 02
Authority key identifier: 42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DD890BBCAA9C11F19F04260F3311F970.roa
Signing time: Mon 07 Sep 2026 09:16:53 +0000
ROA not before: Mon 07 Sep 2026 09:16:53 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 137047
IP address blocks: 163.52.68.0/24 maxlen: 24
163.52.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl
rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7818, serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9
Validity
Not Before: Sep 7 09:16:53 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a9e8105-9de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:0b:9a:52:21:83:ae:8c:6f:52:bb:9c:80:
65:7b:a0:a3:79:9d:47:a5:ad:e2:3f:9c:78:5f:6e:
8e:b5:4c:56:59:7f:ae:66:45:6b:24:1a:a8:f7:01:
a3:c9:71:77:d3:b7:36:c2:c4:c7:53:3f:2c:68:56:
98:b1:f0:09:79:ed:68:05:55:34:0f:31:6a:e7:66:
2d:01:a1:16:a4:36:3f:c6:3a:a1:c0:d7:15:45:6f:
ab:6b:7b:03:f2:78:44:35:6d:f3:ea:69:6f:99:1a:
cd:79:fe:f6:40:39:57:b7:8a:0f:53:55:9f:7a:58:
1d:50:71:29:ba:89:35:75:15:c0:15:a4:25:82:d0:
43:37:26:ba:0a:89:34:ea:aa:e2:34:02:04:31:41:
31:ee:1c:2d:e5:c0:3c:5c:40:f9:5f:ab:a7:3e:b2:
2b:4e:43:4f:2e:b5:d5:06:19:7f:4c:36:c3:2a:08:
62:07:09:e9:3d:5c:61:c9:89:1f:dd:78:f1:12:2d:
7c:fc:d3:f6:3c:cc:cd:f3:dd:ab:8e:f3:37:05:2d:
44:18:90:6a:95:ac:2b:3e:36:fd:9a:2d:32:28:83:
68:50:f6:87:a1:3b:e7:13:0d:ac:5e:06:8c:e2:cb:
e1:85:59:93:b1:89:59:ca:91:a6:41:1d:9e:eb:ce:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0D:9D:66:1A:85:38:4F:88:4A:8A:64:53:3B:E4:7F:8E:D1:27:97
X509v3 Authority Key Identifier:
keyid:42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DD890BBCAA9C11F19F04260F3311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.68.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:e6:40:8c:b1:83:3e:49:0b:3d:a9:5e:75:b7:56:5e:1e:52:
ab:16:2f:9b:43:d3:34:e5:d6:52:72:16:47:9a:53:53:51:a3:
1c:0a:99:43:23:4c:91:5f:65:f6:b5:20:3d:6f:24:12:83:96:
1a:fc:fc:f5:66:ef:c6:d3:6d:c4:24:af:9a:28:17:2d:c1:d0:
b3:97:e8:b2:7f:5e:99:15:1f:7c:c6:02:89:e3:18:cc:1d:c1:
17:a0:45:0a:1a:16:6a:24:d1:ca:12:e9:89:94:53:96:4a:35:
ac:26:43:9c:0f:07:58:9e:8b:cb:bf:5b:f3:c1:0e:68:2b:7b:
43:78:9b:1b:f1:6f:ee:75:fa:b8:03:6a:2d:b2:d9:0c:03:b7:
6a:2b:8c:16:14:64:90:f0:77:50:bd:cb:16:79:0c:60:b5:24:
39:0a:01:f5:84:6c:d2:0d:39:dd:d9:96:37:b5:26:96:3a:f2:
6a:c9:b2:d5:40:1e:93:0b:ba:ca:2c:82:10:aa:98:6e:70:d9:
6d:6f:c9:cb:c7:ea:1e:ba:e8:25:29:1d:18:fc:9a:28:47:bb:
7b:38:fb:9c:32:fb:f3:f4:2e:9f:cf:43:7a:92:6f:a1:98:d1:
14:6c:b5:4d:38:89:ee:e6:7c:fc:89:06:16:d0:2c:23:68:a1:
b1:74:ad:3c
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NzgxODExMC8GA1UEBRMoNDI1QTY3OUY2QjlERURFMzFDNTM4MEYwODM3QkUwMjIz
N0Q0Q0NCOTAeFw0yNjA5MDcwOTE2NTNaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhOWU4MTA1LTlkZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvPAuaUiGDroxvUrucgGV7oKN5nUelreI/nHhfbo61TFZZf65mRWskGqj3AaPJ
cXfTtzbCxMdTPyxoVpix8Al57WgFVTQPMWrnZi0BoRakNj/GOqHA1xVFb6trewPy
eEQ1bfPqaW+ZGs15/vZAOVe3ig9TVZ96WB1QcSm6iTV1FcAVpCWC0EM3JroKiTTq
quI0AgQxQTHuHC3lwDxcQPlfq6c+sitOQ08utdUGGX9MNsMqCGIHCek9XGHJiR/d
ePESLXz80/Y8zM3z3auO8zcFLUQYkGqVrCs+Nv2aLTIog2hQ9oehO+cTDaxeBozi
y+GFWZOxiVnKkaZBHZ7rztz3AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU+A2dZhqF
OE+ISopkUzvkf47RJ5cwHwYDVR0jBBgwFoAUQlpnn2ud7eMcU4Dwg3vgIjfUzLkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3ODE4LzdBNDg0QUI4QUE5
QzExRjFBM0Q3NERDRTMyMTFGOTcwL1FscG5uMnVkN2VNY1U0RHdnM3ZnSWpmVXpM
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUWxwbm4ydWQ3ZU1jVTREd2czdmdJamZVekxrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzgxOC83QTQ4NEFCOEFBOUMxMUYxQTNENzREQ0UzMjExRjk3MC9ERDg5MEJCQ0FB
OUMxMUYxOUYwNDI2MEYzMzExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGjNEQwDQYJKoZIhvcNAQELBQADggEBAEzmQIyxgz5JCz2pXnW3Vl4e
UqsWL5tD0zTl1lJyFkeaU1NRoxwKmUMjTJFfZfa1ID1vJBKDlhr8/PVm78bTbcQk
r5ooFy3B0LOX6LJ/XpkVH3zGAonjGMwdwRegRQoaFmok0coS6YmUU5ZKNawmQ5wP
B1iei8u/W/PBDmgre0N4mxvxb+51+rgDai2y2QwDt2orjBYUZJDwd1C9yxZ5DGC1
JDkKAfWEbNINOd3Zlje1JpY68mrJstVAHpMLusosghCqmG5w2W1vycvH6h666CUp
HRj8mihHu3s4+5wy+/P0Lp/PQ3qSb6GY0RRstU04ie7mfPyJBhbQLCNoobF0rTw=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:23:08 2026 by rpki-client