
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/8533A604448D11F19D9C22A9A7833773.roa
File: 8533A604448D11F19D9C22A9A7833773.roa (raw, json)
Hash identifier: ud2XdvTOeMSMCgpchf7dcf0qY7ZIOdm72flkkkj9uWg=
Subject key identifier: 96:6F:0A:EC:56:37:8A:C5:25:E9:4F:2A:E8:41:99:82:D7:26:0F:52
Certificate issuer: /CN=A91D1E2D/serialNumber=5EFE71B96126CF6DBEDFFB0E7B46E61186848C30
Certificate serial: 0F
Authority key identifier: 5E:FE:71:B9:61:26:CF:6D:BE:DF:FB:0E:7B:46:E6:11:86:84:8C:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/8533A604448D11F19D9C22A9A7833773.roa
Signing time: Thu 07 May 2026 22:21:07 +0000
ROA not before: Thu 07 May 2026 22:21:07 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 154540
IP address blocks: 163.128.39.0/24 maxlen: 24
2001:df6:d040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl
rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1E2D, serialNumber=5EFE71B96126CF6DBEDFFB0E7B46E61186848C30
Validity
Not Before: May 7 22:21:07 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69fd1053-8bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:a8:04:24:6e:02:a7:b9:e9:25:30:8f:71:
20:21:1a:4f:6a:94:4a:8f:ec:5d:25:7c:5e:21:1b:
6d:2e:c0:5d:e2:8f:67:ac:3b:12:1b:4a:e5:a4:d7:
af:0a:44:55:63:3f:ea:93:9a:60:49:5d:53:f5:55:
7d:10:14:45:b9:46:f6:94:07:61:ab:0d:2e:62:40:
95:39:d5:29:86:58:c8:bc:02:00:3f:5c:56:38:a4:
70:3e:0d:dd:c1:5c:ec:89:6f:09:82:0e:30:e5:01:
5e:61:ef:35:81:f0:0f:ee:45:d0:17:9c:94:df:76:
38:6d:51:50:5e:a3:97:c3:68:c3:27:4a:4d:99:1d:
00:77:4f:3f:e9:8d:2b:e3:cf:79:1f:13:b5:83:39:
d7:c9:da:05:16:70:ec:a8:43:ed:28:9a:52:a3:0a:
19:3d:51:68:7c:0e:71:bf:90:45:fa:75:4b:4a:f1:
58:b7:11:6e:e4:35:1f:76:55:cc:df:e0:f4:c2:db:
b4:81:5e:d4:eb:b7:48:bf:78:69:cb:9a:88:b6:96:
79:e2:96:30:b0:02:41:8e:fa:89:5c:ca:c5:9e:71:
94:a0:21:3e:58:30:f1:5b:b7:98:57:c5:fe:87:e6:
e4:80:05:84:99:21:b6:f1:24:c2:ee:a1:51:25:72:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6F:0A:EC:56:37:8A:C5:25:E9:4F:2A:E8:41:99:82:D7:26:0F:52
X509v3 Authority Key Identifier:
keyid:5E:FE:71:B9:61:26:CF:6D:BE:DF:FB:0E:7B:46:E6:11:86:84:8C:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/8533A604448D11F19D9C22A9A7833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.39.0/24
IPv6:
2001:df6:d040::/48
Signature Algorithm: sha256WithRSAEncryption
6d:d8:02:53:df:6c:bb:35:36:3a:a1:2d:be:85:ab:48:63:8d:
38:08:b4:b5:7b:f0:f2:cc:3c:bd:36:09:89:6f:0d:d3:d6:5a:
51:46:c6:8d:fa:34:de:ef:99:8c:a0:ed:2e:b6:a3:e0:17:84:
3a:0f:32:ec:e1:84:c0:18:81:1d:63:cd:88:50:d1:26:05:d1:
01:33:83:11:7f:6a:f2:c4:54:4d:2b:f7:28:35:2d:d7:b2:52:
c0:0d:6b:67:ca:a9:e8:bb:17:52:9b:fb:17:75:fd:f1:84:ed:
04:56:af:2e:b0:6c:e1:ed:03:d3:f3:d7:f4:44:fc:e2:0d:ba:
88:43:a4:a3:a2:33:c9:b7:5f:e6:1a:08:68:f7:d8:e0:3f:fe:
ee:c2:b3:d0:66:d1:9c:02:00:0d:7e:f4:09:c8:25:22:2b:08:
2f:67:0f:a9:0c:b1:f8:40:2f:72:00:b0:17:8a:10:61:85:01:
11:2a:dd:52:a0:4a:81:c8:41:71:09:15:45:71:8f:27:ec:96:
da:45:e9:d0:7a:f5:00:4d:78:a7:69:ac:e9:f6:ff:db:2d:39:
9a:ec:d4:af:6e:05:d8:69:e8:bb:48:de:5e:71:3d:51:d7:01:
b7:ce:f0:98:78:3c:da:e9:68:56:cf:9e:45:94:03:50:3e:f2:
1a:a2:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:10 2026 by rpki-client