
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/7735E9749B8E11F1B01CD25F4711F970.roa
File: 7735E9749B8E11F1B01CD25F4711F970.roa (raw, json)
Hash identifier: Dn/lygEx/cri14p8G6aMYCPWxOy9p7ueQx407UvV7KY=
Subject key identifier: 9A:51:DE:26:FB:82:50:90:68:F6:D7:59:3D:35:16:B3:62:8D:22:62
Certificate issuer: /CN=A91E38D3/serialNumber=38371C24242B2FF2DFE0045148EE41B21354AA5B
Certificate serial: 08
Authority key identifier: 38:37:1C:24:24:2B:2F:F2:DF:E0:04:51:48:EE:41:B2:13:54:AA:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ODccJCQrL_Lf4ARRSO5BshNUqls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/7735E9749B8E11F1B01CD25F4711F970.roa
Signing time: Wed 19 Aug 2026 05:35:41 +0000
ROA not before: Wed 19 Aug 2026 05:35:41 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 154848
IP address blocks: 163.52.22.0/23 maxlen: 23
163.52.22.0/24 maxlen: 24
163.52.23.0/24 maxlen: 24
2001:df7:61c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/ODccJCQrL_Lf4ARRSO5BshNUqls.crl
rsync://rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/ODccJCQrL_Lf4ARRSO5BshNUqls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ODccJCQrL_Lf4ARRSO5BshNUqls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 05:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E38D3, serialNumber=38371C24242B2FF2DFE0045148EE41B21354AA5B
Validity
Not Before: Aug 19 05:35:41 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a8540ad-1cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3b:b7:33:7d:dd:e7:6f:0f:d9:79:fe:77:dd:
f2:42:5c:82:f6:53:6e:21:73:f0:d9:bb:51:bb:65:
17:93:5c:c0:e8:10:66:1b:13:90:0f:41:f8:17:9c:
60:01:17:5d:f6:30:51:c5:b9:a5:ef:46:fc:d1:7c:
4b:64:eb:74:34:ff:7e:53:9b:d2:3d:9e:e8:7c:dd:
65:84:4c:b9:f5:b2:66:fe:80:e6:bd:f1:99:c7:cc:
9f:23:a4:7e:08:58:11:ca:df:1a:60:b5:c8:d9:83:
a4:fa:3c:f6:db:a3:be:64:46:f9:3c:9d:3a:4a:fc:
83:d8:84:fe:bd:f7:06:2a:01:9d:82:b7:7e:a0:8b:
31:34:d5:89:91:cc:33:bc:98:f8:d4:94:66:d2:61:
51:31:cd:74:95:1d:e3:bc:64:01:d1:43:bc:4e:45:
a0:33:86:cd:0a:f6:bf:fc:6f:46:2e:eb:36:45:76:
a0:63:a5:0f:bd:0c:b9:f5:fa:77:28:84:8d:af:b0:
a9:14:63:c5:dc:a3:21:26:f5:4d:70:b5:bd:47:7d:
a2:0e:60:16:9b:dc:9d:5c:33:67:64:00:d3:68:61:
9f:c4:1a:7c:ba:0a:bd:bc:8c:c2:4f:81:89:f3:25:
a3:f5:90:11:c7:17:81:2d:07:2b:68:c8:bb:29:59:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:51:DE:26:FB:82:50:90:68:F6:D7:59:3D:35:16:B3:62:8D:22:62
X509v3 Authority Key Identifier:
keyid:38:37:1C:24:24:2B:2F:F2:DF:E0:04:51:48:EE:41:B2:13:54:AA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/ODccJCQrL_Lf4ARRSO5BshNUqls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ODccJCQrL_Lf4ARRSO5BshNUqls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/7735E9749B8E11F1B01CD25F4711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.22.0/23
IPv6:
2001:df7:61c0::/48
Signature Algorithm: sha256WithRSAEncryption
58:4e:27:94:d5:d4:af:e7:e4:8f:e7:9e:ff:97:84:d5:a1:07:
88:b6:68:cc:a1:db:ed:71:19:b5:f6:63:63:75:68:10:9b:78:
01:2c:73:5d:4b:21:4d:ae:ed:e0:60:67:65:fe:ef:27:01:6b:
c0:16:30:55:c8:99:c5:a8:c6:f4:23:d7:c2:8d:a1:1b:e2:47:
48:23:36:db:de:da:d7:a7:ed:68:f2:03:62:aa:91:89:93:30:
b4:23:a7:d2:82:38:51:bf:58:6f:d9:b3:30:2c:1b:3e:88:6d:
26:3b:8d:8a:44:7d:a3:bd:fc:e9:ba:55:59:da:d2:01:c4:64:
ee:19:6b:82:95:1f:f2:32:70:f4:bf:b2:71:d0:ab:ac:fb:2b:
69:d4:1e:dc:a4:87:d6:65:93:68:64:42:ea:17:e2:59:66:42:
37:52:4c:42:ac:13:cd:e5:a7:75:df:99:75:ce:93:82:05:a7:
49:e8:50:eb:a0:ae:0d:be:6a:fd:fd:b0:72:5d:5c:63:0f:60:
59:7a:e1:f3:bf:94:6e:4c:7e:58:0a:0e:d6:e6:d3:ca:f0:5f:
de:dc:46:65:de:37:9c:93:d0:91:c2:12:93:17:45:7e:09:37:
32:6d:21:b5:a4:86:83:56:6a:65:c3:bd:ea:20:c3:6e:b1:a6:
9c:f9:fb:e3
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MzhEMzExMC8GA1UEBRMoMzgzNzFDMjQyNDJCMkZGMkRGRTAwNDUxNDhFRTQxQjIx
MzU0QUE1QjAeFw0yNjA4MTkwNTM1NDFaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhODU0MGFkLTFjZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDwO7czfd3nbw/Zef533fJCXIL2U24hc/DZu1G7ZReTXMDoEGYbE5APQfgXnGAB
F132MFHFuaXvRvzRfEtk63Q0/35Tm9I9nuh83WWETLn1smb+gOa98ZnHzJ8jpH4I
WBHK3xpgtcjZg6T6PPbbo75kRvk8nTpK/IPYhP699wYqAZ2Ct36gizE01YmRzDO8
mPjUlGbSYVExzXSVHeO8ZAHRQ7xORaAzhs0K9r/8b0Yu6zZFdqBjpQ+9DLn1+nco
hI2vsKkUY8XcoyEm9U1wtb1HfaIOYBab3J1cM2dkANNoYZ/EGny6Cr28jMJPgYnz
JaP1kBHHF4EtBytoyLspWS4TAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUmlHeJvuC
UJBo9tdZPTUWs2KNImIwHwYDVR0jBBgwFoAUODccJCQrL/Lf4ARRSO5BshNUqlsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzOEQzLzMwOTI1MTlDOUI4
RTExRjE5Nzc3QTg1NzQ3MTFGOTcwL09EY2NKQ1FyTF9MZjRBUlJTTzVCc2hOVXFs
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT0RjY0pDUXJMX0xmNEFSUlNPNUJzaE5VcWxzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzhEMy8zMDkyNTE5QzlCOEUxMUYxOTc3N0E4NTc0NzExRjk3MC83NzM1RTk3NDlC
OEUxMUYxQjAxQ0QyNUY0NzExRjk3MC5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE
AgABMAYDBAGjNBYwDwQCAAIwCQMHACABDfdhwDANBgkqhkiG9w0BAQsFAAOCAQEA
WE4nlNXUr+fkj+ee/5eE1aEHiLZozKHb7XEZtfZjY3VoEJt4ASxzXUshTa7t4GBn
Zf7vJwFrwBYwVciZxajG9CPXwo2hG+JHSCM2297a16ftaPIDYqqRiZMwtCOn0oI4
Ub9Yb9mzMCwbPohtJjuNikR9o7386bpVWdrSAcRk7hlrgpUf8jJw9L+ycdCrrPsr
adQe3KSH1mWTaGRC6hfiWWZCN1JMQqwTzeWndd+Zdc6TggWnSehQ66CuDb5q/f2w
cl1cYw9gWXrh87+Ubkx+WAoO1ubTyvBf3txGZd43nJPQkcISkxdFfgk3Mm0htaSG
g1ZqZcO96iDDbrGmnPn74w==
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:00 2026 by rpki-client