
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/6C523164E03F11EE87838439C4F9AE02.roa
File: 6C523164E03F11EE87838439C4F9AE02.roa (raw, json)
Hash identifier: j08RGf04FdX/xIitHauHUQrvUNZaizkLeJ3LyPUNoUg=
Subject key identifier: 53:5B:B5:93:F9:00:D0:17:BA:4A:21:91:FC:76:00:52:95:67:6D:FB
Certificate issuer: /CN=A91E1498/serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617
Certificate serial: 0181
Authority key identifier: AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/6C523164E03F11EE87838439C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:15:24 +0000
ROA not before: Tue 29 Apr 2025 05:41:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152637
IP address blocks: 202.37.52.0/23 maxlen: 23
202.37.52.0/24 maxlen: 24
202.37.53.0/24 maxlen: 24
2401:8860::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl
rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1498, serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617
Validity
Not Before: Apr 29 05:41:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a59b7c-6ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:da:68:37:08:89:03:d2:04:1b:9c:82:5b:
8c:4b:18:1f:a1:02:80:e1:74:a2:f1:58:4c:b0:f7:
d6:b5:25:2e:ad:12:af:cc:76:54:74:58:a8:5e:20:
9c:8e:71:74:f8:b6:de:c3:09:78:e5:59:fc:ad:88:
11:ec:a0:9d:7a:5a:a3:93:bb:c4:4b:53:10:d8:3a:
d2:7f:76:78:6a:0c:e0:d3:d3:26:c9:49:04:ae:7f:
84:7a:e4:14:e3:8b:07:c2:ee:17:40:e2:6e:12:73:
3d:64:81:89:02:39:ac:8a:a1:4a:24:b8:23:d6:da:
1f:69:da:73:03:3e:ae:e2:47:db:94:55:a8:63:c9:
ec:dc:bd:cb:3b:ee:31:30:cd:84:b5:05:3c:7b:58:
6c:17:4e:9d:65:af:d5:89:01:a0:65:a2:e2:05:1d:
63:bc:a0:5d:b9:fa:31:51:7a:67:5a:8c:2a:b2:85:
33:e2:4a:48:92:66:38:c5:01:e8:52:0f:6c:14:d3:
8a:10:ab:21:5f:15:a9:e8:81:f7:7f:53:98:af:9e:
c7:a2:84:9d:fd:7c:da:df:47:36:49:4a:f8:3d:ae:
81:e4:e7:af:ed:f2:8c:3f:a6:14:03:e6:51:a6:35:
14:57:d2:cd:a2:e2:d9:df:2d:0d:cb:97:5f:55:c0:
d6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5B:B5:93:F9:00:D0:17:BA:4A:21:91:FC:76:00:52:95:67:6D:FB
X509v3 Authority Key Identifier:
keyid:AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/6C523164E03F11EE87838439C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.37.52.0/23
IPv6:
2401:8860::/32
Signature Algorithm: sha256WithRSAEncryption
ae:a8:00:a6:18:ea:c1:9d:d7:db:dc:e1:16:0d:44:ba:fd:0e:
79:d8:85:40:5f:ae:5c:d3:61:c4:61:cf:8b:89:b3:1d:af:0c:
f3:73:03:ae:02:59:69:d0:26:b5:48:e4:dd:70:9f:76:cb:48:
61:49:bd:f2:53:b3:64:8d:16:f1:c8:46:74:88:ef:59:42:dc:
52:5c:9f:80:20:ee:64:9e:99:ee:ce:25:6d:a1:94:4f:62:e4:
76:14:69:79:89:c0:4a:12:ba:e3:be:fd:53:05:78:5d:85:4f:
d4:c7:52:6c:25:47:b8:76:c1:d1:7a:d4:f6:cb:a8:af:80:3c:
e4:72:3a:00:35:f6:b7:69:ed:00:8a:06:f2:75:15:46:f9:a5:
8e:5c:45:36:2b:0d:7b:5f:08:f1:fe:14:0a:f6:76:65:d0:5e:
50:e1:05:35:c1:31:b4:33:eb:19:70:d9:62:cc:33:36:af:72:
ba:8d:5a:a5:b0:88:32:76:b0:16:9f:09:44:fc:f0:90:68:85:
92:57:95:72:6a:64:e6:1a:60:5a:d9:ca:07:aa:a0:db:db:35:
34:71:e7:02:47:cd:01:c4:c1:66:7f:a9:0f:53:17:f7:76:c0:
e2:b9:74:12:8e:1d:bf:97:3b:2b:06:23:51:1b:98:7c:da:d8:
b6:25:3b:fd
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE0OTgxMTAvBgNVBAUTKEFEQ0Q1QTREQjU5OUM3MUFFRDkzRDA5NkFCMTRDQUZB
MDgxNUU2MTcwHhcNMjUwNDI5MDU0MTU3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWI3Yy02YWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4/TaaDcIiQPSBBucgluMSxgfoQKA4XSi8VhMsPfWtSUurRKvzHZUdFioXiCc
jnF0+Lbewwl45Vn8rYgR7KCdelqjk7vES1MQ2DrSf3Z4agzg09MmyUkErn+EeuQU
44sHwu4XQOJuEnM9ZIGJAjmsiqFKJLgj1tofadpzAz6u4kfblFWoY8ns3L3LO+4x
MM2EtQU8e1hsF06dZa/ViQGgZaLiBR1jvKBdufoxUXpnWowqsoUz4kpIkmY4xQHo
Ug9sFNOKEKshXxWp6IH3f1OYr57HooSd/Xza30c2SUr4Pa6B5Oev7fKMP6YUA+ZR
pjUUV9LNouLZ3y0Ny5dfVcDWmQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFNbtZP5
ANAXukohkfx2AFKVZ237MB8GA1UdIwQYMBaAFK3NWk21mcca7ZPQlqsUyvoIFeYX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTQ5OC9CM0M4QTk3Q0RG
QjUxMUVFQjdBRDhGMkVDNEY5QUUwMi9yYzFhVGJXWnh4cnRrOUNXcXhUSy1nZ1Y1
aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JjMWFUYldaeHhydGs5Q1dxeFRLLWdnVjVoYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTE0OTgvQjNDOEE5N0NERkI1MTFFRUI3QUQ4RjJFQzRGOUFFMDIvNkM1MjMxNjRF
MDNGMTFFRTg3ODM4NDM5QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQByiU0MA0EAgACMAcDBQAkAYhgMA0GCSqGSIb3DQEBCwUAA4IBAQCu
qACmGOrBndfb3OEWDUS6/Q552IVAX65c02HEYc+LibMdrwzzcwOuAllp0Ca1SOTd
cJ92y0hhSb3yU7NkjRbxyEZ0iO9ZQtxSXJ+AIO5knpnuziVtoZRPYuR2FGl5icBK
Errjvv1TBXhdhU/Ux1JsJUe4dsHRetT2y6ivgDzkcjoANfa3ae0AigbydRVG+aWO
XEU2Kw17Xwjx/hQK9nZl0F5Q4QU1wTG0M+sZcNlizDM2r3K6jVqlsIgydrAWnwlE
/PCQaIWSV5VyamTmGmBa2coHqqDb2zU0cecCR80BxMFmf6kPUxf3dsDiuXQSjh2/
lzsrBiNRG5h82ti2JTv9
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:53 2026 by rpki-client