
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DE194D08AA9C11F19F04260F3311F970.roa
File: DE194D08AA9C11F19F04260F3311F970.roa (raw, json)
Hash identifier: sjmWl1oslUuNyOaGiFybs67KITawAWqRvbDugu37hTA=
Subject key identifier: EB:97:7E:18:1A:7A:7C:8B:70:CB:0D:29:1F:39:16:13:15:0A:A9:05
Certificate issuer: /CN=A91D7818/serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9
Certificate serial: 03
Authority key identifier: 42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DE194D08AA9C11F19F04260F3311F970.roa
Signing time: Mon 07 Sep 2026 09:16:54 +0000
ROA not before: Mon 07 Sep 2026 09:16:54 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 149768
IP address blocks: 163.52.68.0/24 maxlen: 24
163.52.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl
rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7818, serialNumber=425A679F6B9DEDE31C5380F0837BE02237D4CCB9
Validity
Not Before: Sep 7 09:16:54 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a9e8106-ec47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:05:5f:9a:36:a3:68:ce:a7:ed:08:82:1d:
05:73:76:36:d6:28:4f:89:24:0e:45:ab:86:77:93:
13:c9:0b:69:a6:08:a7:9a:a0:cd:f3:c9:5d:fb:a7:
b6:56:9e:4c:a7:0f:ce:0e:05:5d:bd:be:c0:f8:d5:
fc:f2:f6:66:c3:fd:83:55:76:28:41:6e:a9:3a:e2:
e3:fb:55:b5:e2:55:88:5d:b7:f4:d2:29:b3:53:6b:
c3:75:cb:1a:2c:ff:fa:3f:4d:08:38:d2:5a:4e:be:
03:b5:6a:6d:71:08:47:2b:25:aa:be:eb:50:46:65:
a9:4f:5f:63:a5:e7:dc:59:9e:d4:d5:29:38:b6:0f:
dd:87:b5:35:ec:1e:a8:1b:da:ef:30:cc:30:d2:81:
78:16:dc:78:57:e8:4c:61:40:ff:92:7c:85:06:cc:
2c:27:39:af:58:41:7c:8b:3e:7b:68:bb:79:85:5b:
97:02:47:52:0f:65:8e:2f:eb:57:3b:62:a7:16:f3:
7d:f9:40:91:be:be:7a:42:bb:6c:89:8e:c6:f9:4a:
d5:f6:19:75:22:ee:d3:d6:b9:bb:b1:c7:b7:d6:fc:
72:dd:65:47:d6:3b:66:2c:5c:4d:bf:85:75:60:23:
85:fe:76:ee:c3:a5:60:27:f5:7e:c1:d5:85:8f:6e:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:97:7E:18:1A:7A:7C:8B:70:CB:0D:29:1F:39:16:13:15:0A:A9:05
X509v3 Authority Key Identifier:
keyid:42:5A:67:9F:6B:9D:ED:E3:1C:53:80:F0:83:7B:E0:22:37:D4:CC:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qlpnn2ud7eMcU4Dwg3vgIjfUzLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7818/7A484AB8AA9C11F1A3D74DCE3211F970/DE194D08AA9C11F19F04260F3311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.68.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:c1:2f:cf:aa:fb:82:f0:e5:db:7e:c8:19:ba:ab:dd:0b:78:
28:be:0b:af:15:8d:a9:61:47:96:f6:eb:c2:a6:c7:9d:ca:3a:
1d:c7:39:36:7c:39:3c:53:f0:ca:84:44:a0:02:b0:9d:94:b2:
f6:f8:e5:87:41:1f:2b:ec:df:2a:38:d0:1f:da:b1:37:7a:ee:
6c:ec:c4:f2:cb:ff:96:b8:39:d3:a6:17:d0:ae:b4:11:26:f6:
74:9d:d0:8a:56:ed:b0:bc:57:bf:c1:aa:9e:66:7d:da:3b:aa:
29:6d:0a:b9:69:68:9a:69:fe:3b:71:3a:50:1b:de:41:de:a5:
5c:89:a6:a5:b8:44:40:ca:e4:61:97:3f:0d:2c:de:04:52:8a:
08:52:7a:97:22:c0:ac:3a:20:1f:71:1f:ab:fe:52:53:05:c1:
65:13:af:f5:8e:cf:93:a7:4a:f3:4c:ab:37:31:67:ac:5d:f0:
29:ab:6c:0c:09:e4:5c:69:61:c4:51:7e:f8:fb:06:60:80:13:
88:bc:3f:6b:d1:bf:1f:f9:46:76:a9:87:66:a0:c9:86:8e:6e:
84:87:e9:37:36:3d:1c:ce:ff:32:8d:91:69:9a:d7:5a:13:bb:
7f:aa:47:05:d5:97:71:18:1f:10:26:22:a2:97:26:47:17:13:
14:4d:30:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:23:10 2026 by rpki-client