
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/6C523164E03F11EE87838439C4F9AE02.roa
File: 6C523164E03F11EE87838439C4F9AE02.roa (raw, json)
Hash identifier: utqnt3xdKbWSSEVxYJjavO/TyKh0RuXPfAbgTyCFYxM=
Subject key identifier: 1A:44:DD:43:01:C6:B9:C8:56:7A:EA:88:71:26:DE:FF:D1:F0:14:FA
Certificate issuer: /CN=A91E1498/serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617
Certificate serial: 01A3
Authority key identifier: AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/6C523164E03F11EE87838439C4F9AE02.roa
Signing time: Fri 01 May 2026 04:36:54 +0000
ROA not before: Fri 01 May 2026 04:36:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152637
IP address blocks: 202.37.52.0/23 maxlen: 23
202.37.52.0/24 maxlen: 24
202.37.53.0/24 maxlen: 24
2401:8860::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl
rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1498, serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617
Validity
Not Before: May 1 04:36:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f42de5-55c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:f9:1f:9c:23:25:08:73:93:48:7c:13:25:
d2:da:3f:94:2e:88:34:7b:b6:2a:20:78:c2:b6:65:
d5:1a:c1:a3:d6:59:66:f2:8b:09:5c:13:02:eb:ca:
f9:c6:e8:a4:5a:dd:ac:55:a3:03:3f:7b:5e:8c:ac:
ef:0d:6f:ca:b8:95:d9:11:2e:1f:96:78:4d:bf:fb:
ab:e9:fe:4a:5e:fe:5e:34:d1:af:46:42:0c:bf:5f:
79:b4:9b:35:91:18:d2:ae:62:d2:e2:07:a8:fd:f6:
d2:2b:68:72:2e:46:2d:c4:5b:39:f5:77:8e:cb:62:
0f:6a:39:1a:4b:6a:24:a0:20:3d:e2:14:2f:91:b2:
a0:35:b2:e2:37:4c:00:4d:23:bd:c8:69:6c:65:4d:
6e:6f:f9:1a:a3:18:b2:aa:4d:c3:d5:8e:91:57:50:
44:84:df:a6:97:e5:05:e8:03:31:a9:69:50:e7:94:
cb:5e:a8:2b:d7:d2:b1:27:a9:3c:e4:83:b8:a9:20:
db:f7:85:2a:e9:e7:d0:95:c4:74:79:c3:b6:13:12:
09:54:85:f0:0e:55:f0:7b:ce:6b:43:4c:02:8c:b5:
9a:21:84:bb:8d:34:0f:cc:70:77:32:6f:45:b6:2c:
7f:4c:22:40:59:13:7a:4f:16:17:05:39:74:44:7d:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:44:DD:43:01:C6:B9:C8:56:7A:EA:88:71:26:DE:FF:D1:F0:14:FA
X509v3 Authority Key Identifier:
keyid:AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/6C523164E03F11EE87838439C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.37.52.0/23
IPv6:
2401:8860::/32
Signature Algorithm: sha256WithRSAEncryption
0a:8b:53:24:08:b3:cd:e8:c6:2d:e2:cb:ff:7f:cc:7b:eb:fd:
b3:89:65:1e:b5:4f:a5:f2:f1:95:ea:fc:2d:d6:1c:ed:60:42:
17:36:93:27:dc:50:13:a5:f0:e1:38:a1:35:69:3b:9e:f7:d4:
9d:12:31:74:d0:25:8c:04:17:11:73:f1:94:79:87:8a:ea:d0:
20:53:70:0b:49:d9:b5:a6:0b:2d:d3:18:4e:8d:f9:6a:45:61:
72:e3:90:bc:4d:b8:5b:a9:cc:ea:d6:dc:64:c0:7e:a2:ca:ec:
21:f0:e1:41:b4:da:50:9b:d6:60:8c:a4:72:77:df:f0:17:a5:
4f:f1:a1:b6:97:74:01:9b:83:be:00:b0:e8:a7:c0:01:54:8b:
47:e7:72:b1:77:74:8e:42:9c:4b:4b:de:7b:2d:06:7a:3e:f5:
64:b5:68:17:16:2a:aa:6c:7a:f3:f1:d8:eb:43:36:47:23:5e:
c4:23:a6:c7:87:e0:55:e0:1f:4f:8f:32:9b:f4:10:ff:f7:01:
b4:1a:c9:fb:d3:34:d9:de:3d:50:66:1b:97:c1:34:a7:75:93:
f7:03:e0:8c:a8:5b:63:30:e2:47:89:9b:83:29:34:fe:78:28:
30:3d:14:8e:5e:8a:d8:8d:c9:c3:75:e0:98:6b:81:6a:39:d4:
39:f0:4a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:14:12 2026 by rpki-client