
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/53019A023C7B11F1B0CB2EC97EEE528E.roa
File: 53019A023C7B11F1B0CB2EC97EEE528E.roa (raw, json)
Hash identifier: M3iMcgHJGqo7ewXbliP4Rc0morYWpPz1VYKQET0JHNc=
Subject key identifier: 85:3E:B3:A9:03:A8:3D:17:36:8A:56:0E:0F:23:F1:06:6C:B0:CD:77
Certificate issuer: /CN=A91D09BC/serialNumber=7D613FB72D19982A5A092964F48BC38090B0FD19
Certificate serial: 02
Authority key identifier: 7D:61:3F:B7:2D:19:98:2A:5A:09:29:64:F4:8B:C3:80:90:B0:FD:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/53019A023C7B11F1B0CB2EC97EEE528E.roa
Signing time: Mon 20 Apr 2026 05:39:40 +0000
ROA not before: Mon 20 Apr 2026 05:39:40 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138026
IP address blocks: 2001:df4:a3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.crl
rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09BC, serialNumber=7D613FB72D19982A5A092964F48BC38090B0FD19
Validity
Not Before: Apr 20 05:39:40 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69e5bc1b-d916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:9b:5a:c9:41:ba:61:7e:82:87:a6:b7:be:
ef:4f:99:eb:1f:87:ec:3c:4a:6c:ac:31:bb:e2:57:
7d:01:51:c7:82:d4:7a:be:5e:4b:cd:86:c3:11:db:
5a:a6:9f:b5:01:3f:9a:92:d6:98:06:72:67:1c:8e:
5a:70:0c:22:07:da:b0:ea:d6:7c:7d:47:87:84:6c:
81:9f:e1:7a:84:ef:27:78:c7:0a:36:f5:06:38:9c:
0a:10:20:1f:00:f8:1e:9d:87:82:1c:ee:1b:f2:bd:
ad:8e:79:69:c4:eb:7a:86:34:81:e9:bf:d3:46:18:
ba:6d:3a:c5:2c:0b:69:b9:eb:bb:37:5f:45:11:7d:
24:13:6a:f9:cf:34:0d:03:b9:90:bf:53:c1:94:1b:
57:86:60:bd:a6:f7:f5:97:42:89:93:0a:ca:13:6d:
e9:26:f3:a8:b5:41:0b:d0:a0:71:d7:8e:16:42:d1:
c8:e3:a8:5c:78:f5:91:f5:f0:c9:8b:15:2e:f6:1b:
43:92:2d:30:b0:e6:79:3b:83:d1:47:0c:6a:ff:c8:
e8:22:2a:dc:69:16:44:b4:7e:25:8a:ad:15:a3:05:
3d:74:1d:2d:a4:49:2c:f7:17:db:82:12:9f:69:f1:
44:de:f4:81:0f:98:3e:c7:b1:32:9a:f1:c3:36:ca:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3E:B3:A9:03:A8:3D:17:36:8A:56:0E:0F:23:F1:06:6C:B0:CD:77
X509v3 Authority Key Identifier:
keyid:7D:61:3F:B7:2D:19:98:2A:5A:09:29:64:F4:8B:C3:80:90:B0:FD:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/53019A023C7B11F1B0CB2EC97EEE528E.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:a3c0::/48
Signature Algorithm: sha256WithRSAEncryption
a8:0d:59:41:4a:52:00:ba:3e:56:09:e6:be:fa:a0:53:ce:41:
b8:76:a1:47:74:e1:80:8f:c4:ca:75:fc:45:4c:5a:41:fc:0d:
97:07:87:3b:f8:c1:fd:df:da:df:e1:a0:b8:4f:64:14:39:8b:
ac:52:d3:1c:90:6d:1f:f1:77:18:61:34:69:0e:1d:53:23:ee:
c8:2b:65:5b:eb:63:67:32:37:29:bb:36:27:cb:46:2d:9a:86:
a8:7f:0f:0a:dd:f4:99:17:b3:6e:1d:70:7d:de:dd:34:b6:57:
77:3c:43:f3:5a:12:44:a8:d2:78:0c:85:85:b2:2e:e3:ec:5f:
70:5b:9e:6c:1c:17:17:f6:59:06:16:0b:97:f7:2c:73:a9:1e:
8b:20:97:8f:c1:72:5c:90:d3:5f:4b:65:f6:db:f1:86:64:47:
de:8d:4c:5d:b7:a9:4e:d0:8d:11:02:6b:c9:d8:2e:03:c3:6c:
97:0b:ba:8d:a6:92:26:df:7c:1b:4b:21:ce:e6:bf:6e:eb:09:
f8:06:b4:a7:09:2d:41:97:62:b8:19:3b:f4:b5:12:4b:bc:a6:
fd:58:82:d2:b0:03:5d:1a:7e:b3:f9:1d:91:43:7a:d2:64:2a:
32:c9:de:ed:cb:31:b4:81:60:39:b4:91:50:a2:86:cc:d1:4f:
94:d8:0e:d8
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MDlCQzExMC8GA1UEBRMoN0Q2MTNGQjcyRDE5OTgyQTVBMDkyOTY0RjQ4QkMzODA5
MEIwRkQxOTAeFw0yNjA0MjAwNTM5NDBaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZTViYzFiLWQ5MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7dJtayUG6YX6Ch6a3vu9Pmesfh+w8SmysMbviV30BUceC1Hq+XkvNhsMR21qm
n7UBP5qS1pgGcmccjlpwDCIH2rDq1nx9R4eEbIGf4XqE7yd4xwo29QY4nAoQIB8A
+B6dh4Ic7hvyva2OeWnE63qGNIHpv9NGGLptOsUsC2m567s3X0URfSQTavnPNA0D
uZC/U8GUG1eGYL2m9/WXQomTCsoTbekm86i1QQvQoHHXjhZC0cjjqFx49ZH18MmL
FS72G0OSLTCw5nk7g9FHDGr/yOgiKtxpFkS0fiWKrRWjBT10HS2kSSz3F9uCEp9p
8UTe9IEPmD7HsTKa8cM2ytxFAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUhT6zqQOo
PRc2ilYODyPxBmywzXcwHwYDVR0jBBgwFoAUfWE/ty0ZmCpaCSlk9IvDgJCw/Rkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOUJDL0QzNUIwODJFQTcw
NzExRUY5OUE1Nzc0MUM0RjlBRTAyL2ZXRV90eTBabUNwYUNTbGs5SXZEZ0pDd19S
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZldFX3R5MFptQ3BhQ1NsazlJdkRnSkN3X1JrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDlCQy9EMzVCMDgyRUE3MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi81MzAxOUEwMjND
N0IxMUYxQjBDQjJFQzk3RUVFNTI4RS5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ30o8AwDQYJKoZIhvcNAQELBQADggEBAKgNWUFKUgC6PlYJ5r76
oFPOQbh2oUd04YCPxMp1/EVMWkH8DZcHhzv4wf3f2t/hoLhPZBQ5i6xS0xyQbR/x
dxhhNGkOHVMj7sgrZVvrY2cyNym7NifLRi2ahqh/Dwrd9JkXs24dcH3e3TS2V3c8
Q/NaEkSo0ngMhYWyLuPsX3BbnmwcFxf2WQYWC5f3LHOpHosgl4/BclyQ019LZfbb
8YZkR96NTF23qU7QjRECa8nYLgPDbJcLuo2mkibffBtLIc7mv27rCfgGtKcJLUGX
YrgZO/S1Eku8pv1YgtKwA10afrP5HZFDetJkKjLJ3u3LMbSBYDm0kVCihszRT5TY
Dtg=
-----END CERTIFICATE-----
Generated at Wed May 13 02:19:29 2026 by rpki-client