
$ rpki-client -vvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/53C1347EB60D11F0AD4B0751C4F9AE02.roa
File: 53C1347EB60D11F0AD4B0751C4F9AE02.roa (raw, json)
Hash identifier: cYz3Bt/NzG3jsypwU8wZb70N3q4qzO53RXOkiUxW3vQ=
Subject key identifier: 1D:3D:80:E3:89:9F:B3:FB:DD:CB:3D:EF:CF:4F:4D:85:C3:69:F5:5B
Certificate issuer: /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
Certificate serial: 0B5A
Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/53C1347EB60D11F0AD4B0751C4F9AE02.roa
Signing time: Fri 26 Jun 2026 20:23:20 +0000
ROA not before: Fri 26 Jun 2026 20:23:20 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 56214
IP address blocks: 202.44.60.0/24 maxlen: 24
202.44.61.0/24 maxlen: 24
202.44.62.0/24 maxlen: 24
202.44.63.0/24 maxlen: 24
2400:7700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl
rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:36:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2906 (0xb5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
Validity
Not Before: Jun 26 20:23:20 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3edfb8-d43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:1e:0a:c3:c0:12:a5:86:5e:98:2c:de:f0:
ff:dc:67:67:b7:17:d6:5c:10:6c:75:e5:06:91:4e:
74:6e:b1:c5:87:0f:62:1e:02:a2:23:e5:6c:72:33:
23:9b:48:82:ec:8f:da:90:6a:f7:ce:ae:e7:2d:f9:
5a:d3:f2:63:9c:78:72:1b:48:09:7d:ca:97:17:bb:
da:47:10:23:eb:96:8c:00:f5:02:6e:cd:8f:7d:00:
f1:a2:29:84:93:a0:1a:9d:01:9f:7f:a0:75:65:1d:
72:34:06:c8:e9:44:2b:50:1c:9b:fe:3d:9d:3d:c9:
55:70:71:32:29:97:ab:a0:83:b9:55:c3:59:f2:95:
f4:f3:e4:55:cf:36:46:fb:f8:b7:5e:a4:12:86:2f:
60:71:04:f4:59:73:b9:86:24:ed:a1:e0:87:a7:f1:
9d:68:d6:f0:ce:29:05:b0:af:f7:c8:50:12:fc:8e:
fe:d6:e3:e6:44:b4:1d:cf:81:8a:82:c7:b4:48:81:
db:d7:b1:a4:51:5f:d1:53:ab:53:a1:26:5b:fe:a3:
ef:30:8e:b9:71:4c:32:5d:a4:1e:16:ff:b9:39:0b:
8a:86:5d:60:a7:a9:25:30:6d:de:fc:e7:a1:99:6d:
e1:11:0e:77:21:7d:8a:2b:b2:e2:12:ed:ab:72:ff:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3D:80:E3:89:9F:B3:FB:DD:CB:3D:EF:CF:4F:4D:85:C3:69:F5:5B
X509v3 Authority Key Identifier:
keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/53C1347EB60D11F0AD4B0751C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.44.60.0/22
IPv6:
2400:7700::/32
Signature Algorithm: sha256WithRSAEncryption
16:cf:ec:2d:d6:64:0e:aa:51:a8:82:8d:79:98:24:8c:a5:c8:
ef:93:84:9d:93:6b:33:bb:49:eb:c5:c9:d5:bc:7d:29:44:f5:
34:7e:07:c6:f4:eb:97:5c:01:95:2b:a5:ca:5f:0e:6b:68:f6:
fd:bd:8b:7d:a0:15:67:5c:5e:79:31:1c:de:c6:99:af:66:e1:
71:53:0d:e6:d8:6e:cd:3d:1c:b5:fb:75:2b:3d:f2:be:90:af:
39:68:93:ae:22:97:ee:e6:24:39:7d:ce:d0:ce:3c:8a:c2:c6:
16:bc:13:df:c2:e9:0a:5b:8f:02:1e:48:d2:f3:7b:ea:0e:da:
4e:54:39:89:36:71:5a:70:21:29:c1:cd:46:d6:5d:55:79:10:
7d:df:07:d7:aa:5a:60:28:1c:00:75:16:e6:4b:f1:f4:ae:f1:
e4:e2:9d:bf:8b:8f:03:7a:81:6f:92:4c:ca:fc:68:78:20:a2:
87:55:0e:38:cf:55:56:11:11:e0:68:73:84:f9:23:77:42:f0:
38:a7:65:99:d7:81:6c:4f:52:47:93:e9:69:26:67:4f:78:0e:
5c:a0:22:c5:a2:e0:dd:26:35:ab:66:ba:ca:dc:f6:a8:65:f3:
48:11:c8:b6:4f:9d:d6:8b:c0:65:92:08:83:52:4f:09:77:4c:
c1:9e:54:f0
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICC1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc0OEMxMTAvBgNVBAUTKDI4OTYyNEIyRTAwQjc3NEQzRDM5MEY1QTBBRDEwQjVC
QzM1RjU2RDgwHhcNMjYwNjI2MjAyMzIwWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNlZGZiOC1kNDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwCgeCsPAEqWGXpgs3vD/3GdntxfWXBBsdeUGkU50brHFhw9iHgKiI+VscjMj
m0iC7I/akGr3zq7nLfla0/JjnHhyG0gJfcqXF7vaRxAj65aMAPUCbs2PfQDxoimE
k6AanQGff6B1ZR1yNAbI6UQrUByb/j2dPclVcHEyKZeroIO5VcNZ8pX08+RVzzZG
+/i3XqQShi9gcQT0WXO5hiTtoeCHp/GdaNbwzikFsK/3yFAS/I7+1uPmRLQdz4GK
gse0SIHb17GkUV/RU6tToSZb/qPvMI65cUwyXaQeFv+5OQuKhl1gp6klMG3e/Oeh
mW3hEQ53IX2KK7LiEu2rcv/cDQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFB09gOOJ
n7P73cs9789PTYXDafVbMB8GA1UdIwQYMBaAFCiWJLLgC3dNPTkPWgrRC1vDX1bY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ4Qy9BNzREQTc3MjY0
QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQwMDlPUTlhQ3RFTFc4TmZW
dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tKWWtzdUFMZDAwOU9ROWFDdEVMVzhOZlZ0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODc0OEMvQTc0REE3NzI2NEI0MTFFQUIzOEEzNDBEQzRGOUFFMDIvNTNDMTM0N0VC
NjBEMTFGMEFENEIwNzUxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCyiw8MA0EAgACMAcDBQAkAHcAMA0GCSqGSIb3DQEBCwUAA4IBAQAW
z+wt1mQOqlGogo15mCSMpcjvk4Sdk2szu0nrxcnVvH0pRPU0fgfG9OuXXAGVK6XK
Xw5raPb9vYt9oBVnXF55MRzexpmvZuFxUw3m2G7NPRy1+3UrPfK+kK85aJOuIpfu
5iQ5fc7QzjyKwsYWvBPfwukKW48CHkjS83vqDtpOVDmJNnFacCEpwc1G1l1VeRB9
3wfXqlpgKBwAdRbmS/H0rvHk4p2/i48DeoFvkkzK/Gh4IKKHVQ44z1VWERHgaHOE
+SN3QvA4p2WZ14FsT1JHk+lpJmdPeA5coCLFouDdJjWrZrrK3PaoZfNIEci2T53W
i8BlkgiDUk8Jd0zBnlTw
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:38:43 2026 by rpki-client