
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/A53DC7E2B62311F1852DC0305E11F970.roa
File: A53DC7E2B62311F1852DC0305E11F970.roa (raw, json)
Hash identifier: caN5yNsqTHwL3R/kSlOGRzLAHrpHuzWN9rHohkO/Zq0=
Subject key identifier: A2:04:80:C3:71:85:C3:2F:80:9B:59:E2:12:5A:25:FB:51:B5:38:AC
Certificate issuer: /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Certificate serial: 013D
Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/A53DC7E2B62311F1852DC0305E11F970.roa
Signing time: Tue 22 Sep 2026 03:02:18 +0000
ROA not before: Tue 22 Sep 2026 03:02:18 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 153377
IP address blocks: 163.61.237.0/24 maxlen: 24
2001:df5:2640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91565C6, serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Validity
Not Before: Sep 22 03:02:18 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ab1efba-00fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:23:c0:3e:66:c8:bf:6c:33:1e:65:9f:b5:
79:d2:e4:21:00:cd:b1:f5:f2:c7:bd:59:a1:e6:30:
dc:ca:ea:b0:b9:c3:7d:86:13:f1:38:cf:db:6a:c6:
fc:0f:62:a9:3d:18:d8:e9:51:58:f6:e8:6b:12:47:
c9:d8:54:b8:d2:54:73:48:9d:e8:51:ab:1e:9f:42:
73:4c:e7:d4:74:3e:2d:54:8b:59:b2:7d:ec:70:e2:
7b:91:f2:bc:5f:1d:13:e0:98:87:73:73:2d:de:e1:
83:38:6b:c8:fa:c3:3d:19:dc:db:0d:13:a2:f2:3f:
9f:23:84:b3:ef:8c:d7:2f:14:a3:0f:31:0a:23:8a:
6e:da:08:4a:e3:6f:74:6e:51:7e:b1:da:51:89:47:
21:c1:af:ed:9e:49:e5:8d:f6:24:71:42:8c:38:11:
4a:dc:10:4d:f9:90:da:ca:4d:8d:9d:1b:7a:d1:29:
77:71:46:8a:9a:15:02:60:d5:89:d8:45:84:91:a0:
de:a7:d7:20:14:c4:8b:00:5e:c2:8b:de:e1:15:b4:
df:c0:11:6a:2d:72:a9:25:89:2c:96:1a:92:05:01:
8d:43:e5:cb:9d:b6:b7:bd:5d:ba:92:45:62:c6:3c:
c6:97:1c:05:1b:e6:9a:60:f7:3e:53:f2:ff:7e:fb:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:04:80:C3:71:85:C3:2F:80:9B:59:E2:12:5A:25:FB:51:B5:38:AC
X509v3 Authority Key Identifier:
keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/A53DC7E2B62311F1852DC0305E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.237.0/24
IPv6:
2001:df5:2640::/48
Signature Algorithm: sha256WithRSAEncryption
6d:20:a8:cb:b5:f8:45:75:5c:54:f6:da:fa:43:af:d9:c1:57:
87:68:28:88:d1:16:75:62:5d:02:55:2b:d2:93:68:ab:9e:21:
b3:d3:04:64:21:7a:f4:f4:75:51:34:a9:ca:24:a5:3c:b6:ff:
cc:5d:38:11:25:86:32:44:e9:80:e9:b8:ba:7a:d5:61:1f:0d:
2f:ff:5c:f1:a7:a7:dc:55:02:cd:1b:d3:ac:96:74:58:7b:5b:
3e:53:7c:c7:35:61:48:44:c7:3b:c7:d5:8c:c1:a0:8a:1d:f4:
d7:fd:24:86:8e:83:69:0e:72:3b:39:dc:c0:00:aa:92:f6:12:
15:2f:40:2d:b0:a3:6a:c4:2e:95:94:b1:37:ea:27:ed:2f:77:
8d:b8:f1:f8:19:4d:4e:46:79:e2:67:a2:bf:b2:86:db:19:fe:
bc:85:ea:b9:38:63:6a:47:8e:47:7b:4e:10:59:de:a6:50:f2:
46:6c:d6:0c:ea:40:04:93:bd:31:70:eb:07:ec:96:cd:e0:2b:
06:ec:3c:27:c0:f2:6f:d1:77:d8:b7:3f:27:b7:08:cf:3f:f8:
32:0d:60:b8:1c:bb:29:a1:ea:ea:b3:34:59:d8:18:c8:47:dc:
60:09:ae:d9:0b:17:88:c5:5d:e8:76:11:32:6d:1f:13:4b:4d:
6e:69:be:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:16:20 2026 by rpki-client