
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/53AD6F32DA5E11EBA323F462C4F9AE02.roa
File: 53AD6F32DA5E11EBA323F462C4F9AE02.roa (raw, json)
Hash identifier: KJ2mFEWkTtrCEZw9NVFYAAnTanzrSc/7NwbR3vngF7g=
Subject key identifier: E3:AC:9F:53:E2:F1:F2:E9:1A:18:F7:CD:D8:55:ED:04:48:8F:C6:4C
Certificate issuer: /CN=A91E2B66/serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05
Certificate serial: 0619
Authority key identifier: B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/53AD6F32DA5E11EBA323F462C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:38:10 +0000
ROA not before: Thu 26 Jun 2025 23:33:44 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.168.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl
rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1561 (0x619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2B66, serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05
Validity
Not Before: Jun 26 23:33:44 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a43332-d552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:98:a3:bd:dc:fe:5b:4d:9f:57:e0:bb:6e:
86:75:bf:b4:8c:ee:95:77:51:d7:18:4b:be:95:e1:
49:bf:c5:71:26:94:a8:d0:d2:af:0e:8b:d0:cc:bd:
ae:4f:3c:b9:70:ff:db:c2:fc:66:98:e1:41:b2:1f:
6c:be:28:9d:e9:5c:19:2c:f9:3c:65:8f:8e:c8:f6:
e3:0d:52:43:47:16:be:e5:97:12:52:f5:84:b3:ad:
b4:69:52:1b:d1:37:4e:e2:07:fe:a9:a0:0a:be:a5:
07:f2:b4:5b:b3:54:1d:c4:ad:83:ef:ee:aa:b4:84:
d3:fe:ec:fa:7c:ab:d1:4e:db:0d:93:95:85:49:2e:
0a:7c:70:7f:25:86:6c:bd:ed:ac:80:4f:26:c4:1d:
d6:f8:0b:49:ce:e2:84:52:3b:6b:42:ac:7a:eb:e8:
30:37:8e:ea:32:de:10:12:ea:db:76:0c:64:62:0b:
b1:a6:e9:a3:59:04:55:c0:39:1b:80:da:98:ed:d0:
21:32:da:71:f4:7c:a5:a7:3c:8e:9d:8f:98:a1:7b:
db:fc:1f:40:75:47:20:c8:3e:a7:d8:e6:21:0d:a0:
0c:22:89:a7:2c:95:a8:af:ae:cf:c7:5d:39:d6:4d:
5e:7a:cb:d9:42:e3:a9:9c:cc:39:59:34:33:c9:c3:
38:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AC:9F:53:E2:F1:F2:E9:1A:18:F7:CD:D8:55:ED:04:48:8F:C6:4C
X509v3 Authority Key Identifier:
keyid:B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/53AD6F32DA5E11EBA323F462C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.209.0/24
Signature Algorithm: sha256WithRSAEncryption
85:43:75:ea:de:00:7b:27:2d:90:d4:c6:da:d1:11:bc:77:8c:
9f:83:ab:7b:7e:5a:f1:d6:54:78:e5:d6:b4:a7:fa:ee:0b:51:
43:9f:7f:3f:96:f1:ae:62:9a:d4:16:2b:b5:c6:11:7e:b4:3b:
15:bd:a8:fb:ff:52:4f:87:a5:c7:c8:62:04:f4:39:0e:79:11:
ac:b6:53:1e:3d:83:e3:0b:7b:76:d4:7b:3c:eb:36:fd:2d:e4:
e1:69:30:a1:b0:4f:9b:75:3d:4a:a3:27:91:28:7d:f1:13:6d:
47:69:d9:45:37:2d:e2:40:47:7f:d3:3d:62:a5:0b:f5:d6:24:
54:d1:90:e0:4d:ac:d2:06:ce:d8:8f:f2:93:f2:5c:42:d1:10:
52:27:ea:ed:d8:c2:01:c3:72:d5:0a:46:47:f8:6e:f7:eb:24:
7d:32:93:a6:ef:b0:80:57:89:c0:8e:2a:bf:24:3c:8f:6d:b2:
3e:50:ea:ce:97:b7:a4:a1:71:df:22:48:c1:67:40:1a:73:0f:
1a:08:03:28:97:26:9a:ac:d6:9e:db:22:c4:ec:c1:c3:8d:90:
61:1a:9a:d1:d3:42:3b:e4:da:a5:5f:17:47:75:03:e3:c7:f1:
c4:da:bf:42:40:24:ce:61:80:ac:2f:a8:be:91:57:e7:bf:ab:
7e:93:fb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:39 2026 by rpki-client