
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/2575F02EF56011EEACB7CB3CC4F9AE02.roa
File: 2575F02EF56011EEACB7CB3CC4F9AE02.roa (raw, json)
Hash identifier: E/Bp+DLGRsM68zJIAcm7TyJqnOn+olB8QysLXRwz0bI=
Subject key identifier: 7D:0E:86:B2:AF:4D:AC:6F:88:76:6E:F9:C5:BF:AF:81:A4:40:4B:34
Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9
Certificate serial: 0177
Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/2575F02EF56011EEACB7CB3CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:11:32 +0000
ROA not before: Sat 03 May 2025 05:12:20 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 117.55.254.0/24 maxlen: 24
117.55.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl
rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC931, serialNumber=198C4364CF032C730D9585834982096D50A752C9
Validity
Not Before: May 3 05:12:20 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a58c84-bb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2a:c8:bc:14:dc:6a:40:93:06:52:b9:b2:a8:
47:01:d9:46:f2:de:9a:16:a5:84:f6:d2:f0:f7:a6:
fe:5f:5f:db:b9:9a:eb:59:ac:49:40:1b:b2:03:b0:
d8:4d:4d:9e:06:9e:4e:01:4d:e3:9e:81:b2:34:21:
3d:ff:52:e9:2a:e8:25:1e:06:c8:b3:73:e4:c4:fc:
18:1d:10:a9:c6:68:70:0d:9a:14:ec:fa:1d:eb:30:
30:4a:c9:a5:2d:a9:54:fc:0b:7a:4e:a3:c2:3f:0c:
28:39:71:37:07:94:61:26:09:47:a8:76:8d:68:54:
5e:be:22:b3:14:9e:e8:62:55:89:87:d6:2a:8f:02:
05:3b:0f:e6:86:4a:94:94:9f:49:9e:57:b9:a7:29:
c5:b7:fe:e3:b5:a2:78:1b:ba:80:16:4f:9d:16:58:
1e:dc:70:94:13:27:81:63:af:c7:4c:4b:12:6c:97:
81:68:46:d5:7e:f3:8d:88:7b:3a:de:00:c9:cc:4f:
36:e0:bb:26:e8:58:26:09:74:aa:08:a7:7c:19:88:
c9:42:f9:b7:11:15:fb:c7:7b:2a:4f:b9:b6:93:e5:
e9:96:2b:a4:4b:fb:cb:1d:e5:2a:93:53:05:85:fc:
62:b5:77:34:26:04:f5:76:d4:d3:b4:43:ee:a7:fe:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0E:86:B2:AF:4D:AC:6F:88:76:6E:F9:C5:BF:AF:81:A4:40:4B:34
X509v3 Authority Key Identifier:
keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/2575F02EF56011EEACB7CB3CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
117.55.254.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:63:74:a8:97:7f:23:47:d9:32:54:22:10:f1:b6:f3:30:11:
e8:78:00:3a:63:8b:86:a8:33:40:b1:9f:49:d8:a3:af:78:e6:
de:f5:6c:b0:83:cd:84:5e:a2:fa:07:20:86:9f:6e:d8:ad:59:
dc:1a:48:9d:8e:9f:e7:4f:a8:ed:d3:85:59:54:c4:89:9c:8f:
62:a0:c4:89:4a:53:15:4a:bf:7f:63:86:4a:9a:00:90:d7:f1:
4c:d0:92:f6:e8:27:bd:b8:85:fa:b1:95:74:bd:01:46:5d:12:
3e:3a:dd:00:4d:9b:ee:f8:4e:da:5a:0a:76:27:47:96:4d:98:
b1:ea:fc:2d:c6:c4:61:0c:de:3f:d6:39:38:d3:77:62:17:71:
9f:17:91:c1:26:89:8c:b0:45:8f:3b:22:0b:74:5b:8d:f5:3b:
8c:0e:01:ce:e6:2b:c5:9a:78:34:91:56:0a:72:a8:74:de:40:
b2:6f:ce:d5:ac:30:b1:ea:b5:99:60:3e:94:90:57:a3:16:a0:
68:e8:eb:4b:e0:62:cf:da:20:ff:f3:1f:1a:27:a4:37:a2:e2:
8f:99:93:b9:6d:1f:b1:17:fc:00:f5:81:70:52:e8:85:30:48:
e1:6a:87:15:30:13:30:05:4a:13:d8:62:6f:72:18:12:fd:d5:
09:25:fc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:53:16 2026 by rpki-client