
$ rpki-client -vvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/53C1347EB60D11F0AD4B0751C4F9AE02.roa
File: 53C1347EB60D11F0AD4B0751C4F9AE02.roa (raw, json)
Hash identifier: QY+bthQF2Cfpys9yYvINeSfBdpf0jyAfuLij+QPlVvA=
Subject key identifier: 0E:07:0E:CE:29:D0:DB:92:FA:A8:FF:D0:C7:5F:57:DB:DD:C7:D6:EA
Certificate issuer: /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
Certificate serial: 0B19
Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/53C1347EB60D11F0AD4B0751C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:38:35 +0000
ROA not before: Fri 31 Oct 2025 03:54:40 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 56214
IP address blocks: 202.44.60.0/24 maxlen: 24
202.44.61.0/24 maxlen: 24
202.44.62.0/24 maxlen: 24
202.44.63.0/24 maxlen: 24
2400:7700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl
rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 19:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2841 (0xb19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
Validity
Not Before: Oct 31 03:54:40 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a45d7b-5937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:a9:a0:f4:d2:e0:39:ec:cd:f9:77:26:f4:
ac:88:18:80:52:ee:d6:b6:0c:c4:cc:44:2d:9c:6c:
0c:f1:7c:9f:27:e9:49:35:fd:7d:85:45:be:68:52:
e2:35:78:38:ea:18:cc:b6:a2:9d:fe:d6:9e:32:27:
a8:20:97:09:9f:54:f0:78:d8:dd:ad:2e:e4:dd:60:
97:a2:45:6b:3a:8f:65:b9:94:e4:5a:92:5d:88:26:
30:eb:07:53:e9:c9:c7:b0:88:40:01:4e:7a:09:76:
66:01:b8:ef:67:55:0a:8d:8e:f6:9d:39:c4:da:f0:
02:09:4c:03:98:e5:f4:d8:82:c8:0d:a3:7c:ce:ff:
58:c1:be:bf:84:65:fe:24:17:7b:09:5a:d7:4e:fc:
d6:c8:96:3a:20:d5:23:c0:c3:8d:e4:3f:58:10:43:
e7:0f:55:31:73:75:99:23:62:70:44:d4:c0:e9:2a:
23:9b:a1:a8:79:1d:44:89:63:f1:6f:5f:b3:93:7a:
06:23:99:dc:f6:6d:16:bd:a1:c5:4e:1c:79:4c:fd:
04:6b:38:2f:87:33:62:81:4f:16:93:b4:bd:1d:91:
4f:e6:48:4d:88:1d:75:1e:37:bc:f7:f6:da:59:64:
c0:10:3e:ff:86:7d:3c:49:8a:24:96:6e:19:13:b1:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:07:0E:CE:29:D0:DB:92:FA:A8:FF:D0:C7:5F:57:DB:DD:C7:D6:EA
X509v3 Authority Key Identifier:
keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/53C1347EB60D11F0AD4B0751C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.44.60.0/22
IPv6:
2400:7700::/32
Signature Algorithm: sha256WithRSAEncryption
5d:91:56:62:11:39:50:a9:79:9b:89:cd:00:02:16:02:d1:af:
c5:b4:e7:a5:22:55:ca:b1:2b:49:61:ab:c0:b0:60:d9:84:68:
0b:81:03:9e:dd:db:62:28:14:df:d3:82:06:d2:52:40:9b:99:
f2:3e:34:40:77:28:d3:20:53:cd:cf:a4:ca:7a:f4:1c:a8:b8:
a5:43:d9:83:f0:70:59:cf:61:11:7f:64:4a:23:56:2a:03:89:
d6:06:3b:62:f2:23:50:1b:31:d1:37:ac:4a:da:75:bb:66:2f:
cc:f0:98:2d:fa:fd:45:54:62:9b:74:b0:f9:70:73:67:b3:ff:
ea:40:37:d7:39:d9:34:8d:0f:62:d4:6f:68:f6:58:af:23:df:
90:dd:f9:42:4d:8a:02:03:97:2e:f3:68:3a:02:34:06:ff:cf:
72:0a:0c:26:6c:ff:7c:65:32:23:03:a5:19:9a:cc:e7:97:33:
e5:5f:01:15:02:2b:d1:31:3e:6a:3d:bc:2c:72:3d:1a:e4:eb:
82:22:01:96:63:c8:85:e6:6c:a9:c7:e9:95:87:85:c0:73:c2:
ac:6c:ad:1e:8b:9f:2f:29:ca:88:8b:82:8b:cc:71:0c:29:70:
73:b0:af:cc:bf:8f:1f:73:9f:a9:c2:2a:a8:4e:f1:b7:13:94:
40:1a:9e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:13:15 2026 by rpki-client