
$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/5FAC3CB644CE11F19BD95499BE833773.roa
File: 5FAC3CB644CE11F19BD95499BE833773.roa (raw, json)
Hash identifier: WkErIMYK/mQSKLc4lnPt53wSfKMo9LaNrKnnlPsS/9g=
Subject key identifier: 02:7A:08:CA:C6:6E:A8:D2:3C:C4:04:74:64:92:EF:96:28:8A:A8:C9
Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Certificate serial: 017B
Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/5FAC3CB644CE11F19BD95499BE833773.roa
Signing time: Thu 30 Apr 2026 19:54:18 +0000
ROA not before: Thu 30 Apr 2026 19:54:18 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 154456
IP address blocks: 36.50.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911954F, serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F
Validity
Not Before: Apr 30 19:54:18 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69f3b36a-aac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:a1:69:a7:03:4a:4c:a1:b1:f7:7c:24:33:
e3:ce:03:f7:35:00:0c:27:35:c6:50:29:44:d7:3c:
1c:64:f7:f7:79:bc:26:8b:c6:e1:ca:ea:2c:0c:09:
c7:e7:09:64:b2:0e:92:b8:59:0f:5e:8e:5c:54:2c:
60:07:9c:f9:d7:09:fc:d3:17:6b:29:ad:67:fc:2c:
e0:46:84:a1:26:38:44:58:7f:8a:09:1b:9f:21:2f:
17:16:4a:3c:b8:fe:9e:7b:70:b7:12:ce:2a:3f:34:
46:08:1b:8f:08:bf:dd:ea:12:fe:6e:32:80:0e:2d:
93:21:38:2c:c4:c9:50:bb:2f:c0:11:10:2a:3c:b4:
c4:fd:c3:65:c8:43:a8:51:df:c7:f4:7f:a1:7a:89:
bb:ed:28:0a:a3:1c:91:f8:6f:fa:a8:15:82:cc:34:
99:b8:ce:52:97:99:4e:8b:f9:b3:62:4b:76:a6:31:
be:26:ea:dd:71:05:6d:79:4b:a5:a2:1b:d9:9b:93:
2b:37:6a:b3:d9:fe:31:95:f4:b9:10:9c:31:86:29:
0b:30:30:78:34:28:c2:ef:5c:66:39:0a:43:e5:8f:
49:76:92:bc:f9:1d:29:29:08:db:91:dd:a7:29:42:
05:a7:59:5b:dd:84:38:df:48:63:fb:cc:7c:7a:3d:
04:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7A:08:CA:C6:6E:A8:D2:3C:C4:04:74:64:92:EF:96:28:8A:A8:C9
X509v3 Authority Key Identifier:
keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/5FAC3CB644CE11F19BD95499BE833773.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9b:f6:1d:f5:a3:82:ed:fe:0d:7d:8e:84:ec:40:c7:71:8d:
d5:1b:56:66:10:41:44:1d:d3:9e:38:9e:50:40:ab:c1:47:9f:
e3:b8:6f:9b:9d:00:fa:32:d2:15:ed:1a:d0:ee:bd:9e:55:70:
8b:13:e7:36:f6:70:20:31:74:b2:f6:92:7d:b9:a3:bd:18:a4:
b4:f2:7f:17:f0:d6:4e:f2:19:f5:3d:24:79:78:b7:f2:c1:b8:
c0:63:9f:87:01:89:e8:1a:12:c6:5e:70:e1:d1:be:13:fd:4b:
25:25:fb:74:b5:0b:f3:50:56:0e:bc:d5:88:14:b7:b2:9a:1d:
12:0e:41:ca:65:36:e5:bb:d6:da:ec:15:ed:01:17:9e:d2:8f:
37:03:3c:f7:3f:03:6e:c2:a3:ce:99:57:bb:d3:0e:0f:22:8d:
99:78:1b:75:64:f8:b4:14:66:c7:85:e6:db:84:cd:86:40:b4:
6f:8f:c6:f7:7f:2e:98:33:ad:01:b1:ce:cd:d2:43:71:a1:00:
3a:eb:2e:e8:2e:bd:fa:51:05:e3:36:54:17:d3:88:91:82:63:
47:87:2b:04:c9:63:a0:33:fc:6e:ff:8b:0e:5d:6d:4a:b8:1f:
a7:c7:7a:03:1f:6f:3a:47:e5:68:7d:a6:4f:dc:f1:0d:c7:23:
fa:48:9e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:05 2026 by rpki-client