
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/CECE54DE1BC611ECAE421168C4F9AE02.roa
File: CECE54DE1BC611ECAE421168C4F9AE02.roa (raw, json)
Hash identifier: YJa/B3fmbY+Mqk52HoaoOUWCKj3EPvHiwST21gkBP+U=
Subject key identifier: BE:BD:75:34:0B:F3:1B:EC:8E:5E:13:12:B2:11:58:68:AF:AB:0B:B3
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 317C
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/CECE54DE1BC611ECAE421168C4F9AE02.roa
Signing time: Sat 02 May 2026 16:18:36 +0000
ROA not before: Sat 02 May 2026 16:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4755
IP address blocks: 180.87.142.0/24 maxlen: 24
2405:2000:d01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12668 (0x317c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: May 2 16:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f623dc-43c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:a2:aa:37:d0:19:b0:e5:b1:02:a2:1e:b5:
8a:ac:1f:15:0b:29:85:02:f3:09:ff:91:21:90:59:
0a:b0:75:4a:95:2b:d8:62:7d:fe:96:79:a3:47:4c:
4f:1f:e9:6a:bd:5a:ba:f5:fc:f2:f5:c7:b5:f2:83:
26:bb:78:3d:ea:64:56:17:d2:fa:5f:30:b5:87:d3:
f1:ce:9b:0d:6c:bd:c5:34:e1:f6:4b:ee:9b:36:57:
a8:a6:e0:0b:1a:9a:db:34:f9:fa:e7:e8:7c:7e:9a:
26:33:72:66:8e:77:d8:43:3b:02:b5:15:68:93:68:
11:9d:2f:50:a8:a8:2d:84:b3:57:ac:a8:65:47:2e:
2c:8a:d3:58:6c:0c:90:d2:1c:76:b0:bb:eb:75:48:
4a:d4:d3:84:31:26:53:c4:3d:05:5a:3a:4f:56:a3:
45:e8:18:0c:51:fe:82:f6:5e:b8:57:7f:54:5a:6f:
bf:e4:6f:37:ef:12:18:d8:06:0b:17:a7:cc:5d:68:
87:37:b3:34:25:9a:66:c5:5b:40:a3:23:11:70:40:
e0:2d:f4:c0:91:91:15:d6:8e:65:b5:67:55:78:50:
a2:fd:51:57:0b:68:03:f1:ab:ff:13:19:b7:71:ce:
41:24:44:5c:f4:ae:67:67:a0:3b:1b:d4:60:92:1d:
66:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BD:75:34:0B:F3:1B:EC:8E:5E:13:12:B2:11:58:68:AF:AB:0B:B3
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/CECE54DE1BC611ECAE421168C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
180.87.142.0/24
IPv6:
2405:2000:d01::/48
Signature Algorithm: sha256WithRSAEncryption
ac:82:9c:c3:d5:84:1a:53:32:93:56:11:24:37:45:8f:a0:1b:
35:f4:ae:4d:14:0b:c2:76:16:db:e4:2e:2f:5a:c7:7f:7f:1c:
7d:60:65:72:23:cd:e7:b5:e8:01:4e:00:a4:0f:ec:dd:ff:1f:
39:91:f5:fb:d3:48:7f:0c:4d:79:b0:cc:a0:9c:9c:c7:0a:4c:
37:97:29:07:67:e6:99:53:ad:bc:94:6d:6c:39:5b:5e:0d:75:
c1:98:d7:45:0b:b9:05:dd:3c:87:3f:19:c7:0d:03:27:5a:6e:
f6:bc:19:d5:cd:5d:aa:93:10:55:38:81:96:23:ce:e8:62:35:
ef:7d:c9:e1:fe:c0:9b:cc:d4:62:1a:52:70:d7:0b:dc:f8:44:
6c:4d:3d:d5:45:b6:0f:19:9a:89:cd:6f:a2:67:ae:d7:e3:b9:
1d:1b:d0:4d:9a:ed:b1:bd:7c:df:d4:1c:b9:e4:87:c3:55:5e:
4d:74:19:bc:53:3a:ba:cf:6d:b7:71:2b:58:7b:be:c9:c1:72:
6a:8e:a7:c0:b4:80:e9:d7:a2:37:5e:7b:f6:11:ad:0b:00:89:
47:c9:b1:1b:de:3b:b6:c6:06:63:78:a5:13:a9:b3:9b:64:21:
74:58:33:80:ed:bc:e6:5d:96:f3:e3:3d:20:4b:b7:6a:ff:f2:
36:4e:fb:d8
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICMXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC
Qjk2NEY2NEIwHhcNMjYwNTAyMTYxODM2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY2MjNkYy00M2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl2eiqjfQGbDlsQKiHrWKrB8VCymFAvMJ/5EhkFkKsHVKlSvYYn3+lnmjR0xP
H+lqvVq69fzy9ce18oMmu3g96mRWF9L6XzC1h9PxzpsNbL3FNOH2S+6bNleopuAL
GprbNPn65+h8fpomM3JmjnfYQzsCtRVok2gRnS9QqKgthLNXrKhlRy4sitNYbAyQ
0hx2sLvrdUhK1NOEMSZTxD0FWjpPVqNF6BgMUf6C9l64V39UWm+/5G837xIY2AYL
F6fMXWiHN7M0JZpmxVtAoyMRcEDgLfTAkZEV1o5ltWdVeFCi/VFXC2gD8av/Exm3
cc5BJERc9K5nZ6A7G9Rgkh1mzQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFL69dTQL
8xvsjl4TErIRWGivqwuzMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG
NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTU1QzgvOUNEM0U4RjZGRjU4MTFFMkJCNEIyRTNGNTkxMUVBMzIvQ0VDRTU0REUx
QkM2MTFFQ0FFNDIxMTY4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAtFeOMA8EAgACMAkDBwAkBSAADQEwDQYJKoZIhvcNAQELBQADggEB
AKyCnMPVhBpTMpNWESQ3RY+gGzX0rk0UC8J2FtvkLi9ax39/HH1gZXIjzee16AFO
AKQP7N3/HzmR9fvTSH8MTXmwzKCcnMcKTDeXKQdn5plTrbyUbWw5W14NdcGY10UL
uQXdPIc/GccNAydabva8GdXNXaqTEFU4gZYjzuhiNe99yeH+wJvM1GIaUnDXC9z4
RGxNPdVFtg8ZmonNb6JnrtfjuR0b0E2a7bG9fN/UHLnkh8NVXk10GbxTOrrPbbdx
K1h7vsnBcmqOp8C0gOnXojdee/YRrQsAiUfJsRveO7bGBmN4pROps5tkIXRYM4Dt
vOZdlvPjPSBLt2r/8jZO+9g=
-----END CERTIFICATE-----
Generated at Wed May 13 02:57:08 2026 by rpki-client