
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/53B6182C213611EAB9F02B49C4F9AE02.roa
File: 53B6182C213611EAB9F02B49C4F9AE02.roa (raw, json)
Hash identifier: 1/jQ9MAmfgrH/MlDHGH5XW5uHJapQAaNpW7+NA3g65w=
Subject key identifier: C2:70:81:B9:42:BB:35:86:C3:42:B1:79:64:0F:5F:3B:D9:D8:F2:95
Certificate issuer: /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014
Certificate serial: 0C5A
Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/53B6182C213611EAB9F02B49C4F9AE02.roa
Signing time: Mon 02 Mar 2026 04:49:12 +0000
ROA not before: Thu 18 Sep 2025 19:29:35 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 58983
IP address blocks: 45.119.160.0/22 maxlen: 22
45.119.160.0/23 maxlen: 23
45.119.160.0/24 maxlen: 24
45.119.161.0/24 maxlen: 24
45.119.162.0/23 maxlen: 23
45.119.162.0/24 maxlen: 24
45.119.163.0/24 maxlen: 24
103.240.176.0/22 maxlen: 22
103.240.176.0/23 maxlen: 23
103.240.176.0/24 maxlen: 24
103.240.177.0/24 maxlen: 24
103.240.178.0/23 maxlen: 23
103.240.178.0/24 maxlen: 24
103.240.179.0/24 maxlen: 24
2400:5880::/32 maxlen: 32
2400:5880::/33 maxlen: 33
2400:5880:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl
rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3162 (0xc5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185CF3, serialNumber=A7A2674E8484603920779A352C55804E55365014
Validity
Not Before: Sep 18 19:29:35 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a516c8-75ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:77:c9:1f:0a:97:b4:32:66:8b:e8:2b:9f:
2c:f1:47:b6:46:0c:98:86:19:62:59:0f:06:fb:3f:
d0:07:de:f8:a6:02:af:44:47:98:26:c9:0a:fe:af:
47:16:74:29:a4:f1:90:5c:e0:de:ee:39:84:78:44:
51:d2:fc:8d:4a:a9:cd:ea:6a:cb:82:7c:1d:f9:39:
55:e3:d4:6f:fa:ae:8a:d9:ab:e9:56:78:43:a3:ff:
bb:f4:d9:30:26:e1:f5:44:65:6b:de:1b:62:06:de:
24:41:3e:d7:61:15:a7:85:9b:fe:f6:dd:45:75:25:
de:49:a1:ca:03:f3:26:6b:28:6d:00:e4:9a:c1:78:
99:1b:1d:73:7d:c7:85:36:92:d4:ff:4d:7e:78:17:
94:e7:87:c0:9e:9f:3d:b9:e8:44:e0:0c:5e:2c:59:
48:a2:df:7e:64:5e:6a:59:8a:d9:04:1b:57:7f:d5:
4c:f3:e4:9c:12:5a:9d:98:cf:a1:e5:0c:95:cc:c9:
8b:6c:1e:50:32:a8:31:4c:89:09:77:16:29:1f:ab:
dc:74:ca:ec:20:af:8d:70:25:48:a7:c5:23:56:14:
7c:2f:8e:13:39:b5:cb:e7:9b:f7:09:39:61:26:5e:
e6:85:db:71:7d:36:fc:e9:9c:b2:04:e0:71:c8:79:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:70:81:B9:42:BB:35:86:C3:42:B1:79:64:0F:5F:3B:D9:D8:F2:95
X509v3 Authority Key Identifier:
keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/53B6182C213611EAB9F02B49C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.119.160.0/22
103.240.176.0/22
IPv6:
2400:5880::/32
Signature Algorithm: sha256WithRSAEncryption
27:f8:04:5e:6e:ef:34:ce:cb:30:de:d6:6f:32:03:9a:b4:9b:
55:d8:bf:5f:c5:82:28:e7:d2:58:01:55:5f:17:e4:66:7b:78:
f5:60:eb:01:4d:b8:30:33:dd:eb:81:4d:98:31:02:83:61:5f:
f9:57:69:f9:c6:51:39:a4:ff:fa:31:b0:f5:89:99:80:e7:bc:
58:b7:d2:03:67:45:fa:62:2d:0b:c6:a6:50:f7:87:b1:b2:c6:
a7:d0:25:58:6a:69:91:4b:9e:9b:ad:10:b0:8a:fb:c9:8a:4e:
03:0b:e3:7b:d1:04:c1:4e:49:40:54:a5:3e:d2:3b:db:8e:a0:
5a:3d:6b:95:55:b7:e9:07:8b:f4:87:f4:8b:d4:e4:29:34:dd:
9b:75:13:ac:cf:97:92:48:1e:17:8e:c5:68:71:fa:e8:f3:3e:
ab:d3:b3:ab:d3:16:16:63:05:a4:f2:0c:07:f4:c7:d2:87:45:
34:d7:1f:29:86:7c:08:92:fb:2a:33:6e:4d:91:2a:8b:f4:92:
2e:3a:1c:34:ef:f0:43:08:98:46:2d:6d:09:a1:2d:4f:63:b1:
53:4e:7d:0a:81:d2:ab:b7:86:73:40:cd:6a:f1:de:72:f5:8b:
a6:91:7d:3a:79:74:95:50:ca:3b:91:8a:20:54:30:78:6d:b1:
1f:fb:49:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:51:04 2026 by rpki-client