
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/53F3631AE09A11F0A599D036446F56BC.roa
File: 53F3631AE09A11F0A599D036446F56BC.roa (raw, json)
Hash identifier: WoFjSSb7IQkAQ4Xj41j5FesrpjNa8U4BYhsQXgjZdyk=
Subject key identifier: D9:05:9F:21:89:F2:0F:C0:2A:E0:61:7B:D1:12:77:4C:18:EE:47:F5
Certificate issuer: /CN=A91DB53B/serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Certificate serial: 86
Authority key identifier: 86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/53F3631AE09A11F0A599D036446F56BC.roa
Signing time: Sat 22 Aug 2026 08:20:39 +0000
ROA not before: Sat 22 Aug 2026 08:20:39 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154402
IP address blocks: 2402:3d20::/32 maxlen: 32
2402:3d20::/36 maxlen: 36
2402:3d20:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 07:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB53B, serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Validity
Not Before: Aug 22 08:20:39 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a895bd7-bd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:24:2c:f7:80:5f:e3:df:39:a9:41:fa:a6:f7:
ed:fc:88:e8:38:2e:8c:16:82:de:94:cb:d5:4c:44:
ea:bb:25:0c:d3:31:45:26:19:89:43:56:3b:27:71:
d7:64:2b:5d:a9:26:d3:55:48:ba:2d:11:c7:e6:78:
d6:e0:96:5b:18:0c:49:d3:34:e3:15:b7:c3:c3:a3:
e3:de:9e:26:72:2f:7c:3c:68:db:8e:bd:bc:70:fa:
73:27:2e:ba:2c:fb:f9:7a:53:2e:14:36:94:b0:bb:
4b:86:7f:7e:3f:c0:06:fe:7e:13:a6:77:9d:93:b3:
4f:6a:3b:7e:bc:94:cf:ca:4f:83:23:03:eb:60:11:
db:87:ce:86:f4:b3:2d:26:b5:eb:39:33:7d:d8:38:
ff:eb:e9:9b:21:c7:17:20:35:06:05:2c:1f:67:9e:
3c:e4:52:0c:a5:a9:46:e1:ff:9f:e6:ed:79:7d:8a:
fc:ce:51:d4:0c:36:da:bc:68:b3:45:90:6a:ef:d8:
ac:1b:16:b9:64:a3:85:5f:4b:f4:cc:c5:c0:a4:9a:
ff:b0:7a:c9:7c:2a:c5:8b:32:63:38:d8:15:52:67:
2b:a1:82:e8:87:56:8d:3f:fe:6f:73:25:7c:e0:05:
f0:c5:87:e5:94:1e:01:67:5d:81:76:df:27:07:a0:
c6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:05:9F:21:89:F2:0F:C0:2A:E0:61:7B:D1:12:77:4C:18:EE:47:F5
X509v3 Authority Key Identifier:
keyid:86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/53F3631AE09A11F0A599D036446F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:3d20::/32
Signature Algorithm: sha256WithRSAEncryption
29:3e:ea:fc:b8:39:f9:1b:81:24:eb:7c:8e:dc:2c:41:9a:62:
c7:4a:5b:09:7b:57:81:2e:56:d1:57:8e:9a:6e:2a:d5:2b:1b:
74:43:b1:a8:a4:4f:f1:44:fc:cf:6a:30:35:64:f2:32:10:9c:
d3:07:af:09:6f:18:fb:3f:f2:f6:ed:44:cd:de:2e:bd:9f:ad:
07:41:ba:31:3b:f7:26:5d:5c:e9:a7:9f:c5:01:e5:bc:8a:fe:
63:fc:16:ae:10:2a:d2:5b:ad:72:b0:15:77:6f:59:a3:4f:e9:
53:57:97:2e:a3:1d:c0:58:99:e8:fb:cc:f1:44:a7:a0:f9:02:
d4:bf:43:41:4e:4e:7e:06:0e:cc:50:c7:20:a0:53:32:a6:81:
02:c0:05:61:72:23:37:fa:cb:30:45:ac:fb:ef:91:39:70:b9:
95:e0:d5:78:b4:fb:9e:e2:ed:84:27:8f:81:5c:b3:d4:8e:3e:
e1:81:85:29:b0:7a:b2:24:cd:d3:e5:72:0a:2d:6a:e4:1e:84:
3c:25:36:3f:6a:c5:0e:bb:a4:c9:ad:78:bc:62:2a:33:2e:04:
6e:a6:4d:f7:e7:d2:a2:bf:15:82:c3:e2:38:d1:e8:e2:29:ed:
70:ac:2e:85:5e:98:78:dc:a6:f2:6b:f3:f4:cd:05:74:92:33:
25:16:da:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:26:00 2026 by rpki-client