
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/53224C1ADDA311ECA6964F20C4F9AE02.roa
File: 53224C1ADDA311ECA6964F20C4F9AE02.roa (raw, json)
Hash identifier: 5dm2GJppnwQLxyI+/KHCtnHpzvdwIeBlG+Uq2+xIBLk=
Subject key identifier: 57:38:D1:24:53:CB:66:07:69:B3:9E:B8:B0:C9:CF:8A:4A:89:B6:9A
Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial: 099E
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/53224C1ADDA311ECA6964F20C4F9AE02.roa
Signing time: Wed 22 Jul 2026 21:21:18 +0000
ROA not before: Wed 22 Jul 2026 21:21:18 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 55286
IP address blocks: 45.249.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:21:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2462 (0x99e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Validity
Not Before: Jul 22 21:21:18 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a61344e-3dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f2:b7:6a:cd:f0:56:ec:2c:5e:dc:cb:ff:96:
78:8f:91:c4:0c:7a:df:39:ad:32:1c:47:33:89:3a:
85:ba:09:19:b7:c4:ae:21:6e:f4:68:d0:e2:99:29:
d0:12:37:d8:3d:0c:b1:85:ed:a0:7d:93:e6:f4:39:
98:19:dc:8a:08:14:b7:c0:a5:13:22:57:2d:da:fb:
bf:21:75:ff:a5:60:f9:98:e5:18:38:0a:0f:01:d8:
30:5f:48:be:60:a0:e0:7b:78:6e:3d:b5:9f:fc:98:
98:ab:c3:fd:16:64:4c:7c:9b:57:c2:95:f4:08:f2:
41:ca:54:6f:94:97:e6:98:a6:e9:7c:7a:3a:d9:ec:
07:23:77:02:02:16:3f:6d:a4:6b:99:2e:a1:d9:c6:
74:b7:ea:73:ba:49:10:8f:74:0b:63:bd:17:d1:9e:
b5:f0:d2:2b:7d:43:b0:a7:d4:96:5c:0c:9f:aa:f7:
d8:6c:3c:c9:e0:f6:cb:08:6f:bc:18:ca:52:00:d1:
7d:32:99:6e:95:66:e2:8d:1b:b2:a1:50:91:68:b0:
96:65:ca:e6:64:81:5e:55:ae:d4:be:37:7a:72:d4:
d9:8e:63:71:99:bd:d0:63:9f:72:f7:1a:2c:56:79:
41:7e:73:69:22:cc:27:92:ee:d1:ce:93:61:f0:2f:
b9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:38:D1:24:53:CB:66:07:69:B3:9E:B8:B0:C9:CF:8A:4A:89:B6:9A
X509v3 Authority Key Identifier:
keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/53224C1ADDA311ECA6964F20C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.249.54.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:ec:10:34:61:16:fd:52:3a:e8:89:58:41:a3:36:c5:4e:53:
ea:c6:0d:14:8b:db:02:05:dc:28:9a:ca:90:de:98:33:c4:52:
ee:ad:62:0f:72:68:68:b7:db:a9:f0:13:76:2b:07:8c:c3:55:
13:8f:49:e0:79:48:f0:bd:9c:64:68:b7:29:f8:6f:87:15:25:
47:51:7f:5f:e2:68:84:27:a6:34:3a:ac:86:ee:9e:23:c0:be:
b3:a8:84:96:0c:a8:ae:74:2f:28:53:05:e9:f4:df:6b:15:9c:
7c:9e:4e:a2:34:57:cc:28:5b:cc:e2:66:cf:15:e7:74:11:97:
fe:cf:25:f5:16:bd:32:78:9c:c8:61:b4:59:ef:d9:70:ed:47:
46:26:09:5c:a7:df:11:a8:da:46:e8:2b:23:e8:8e:e7:32:d9:
b4:30:73:e7:b0:93:35:d9:4d:43:bc:f3:1b:37:db:23:b8:e2:
28:a7:e3:47:7f:d4:a4:ce:2d:a5:97:8c:a3:ce:8d:79:a2:87:
53:ed:9c:7a:58:07:46:e9:ab:1e:61:d9:9d:ad:3a:ca:94:a9:
06:c5:5c:fb:d5:d6:86:e5:8e:66:1b:11:55:e4:1f:92:47:cd:
7c:bb:54:21:5f:f1:b7:1f:3f:e3:f3:8e:f7:9d:f3:32:b5:84:
50:0a:ad:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:30 2026 by rpki-client