
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/2D55F42CB0F611E5B464E359C4F9AE02.roa
File: 2D55F42CB0F611E5B464E359C4F9AE02.roa (raw, json)
Hash identifier: s8TTg9P3l8A2JinlhgnrgySiNnwBKzYcLgd2CwnP9lU=
Subject key identifier: 77:30:36:1B:4F:98:B7:37:F5:5D:1A:B4:0C:C0:3C:2F:A2:2A:5D:AA
Certificate issuer: /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Certificate serial: 235D
Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/2D55F42CB0F611E5B464E359C4F9AE02.roa
Signing time: Tue 28 Apr 2026 16:20:37 +0000
ROA not before: Tue 28 Apr 2026 16:20:37 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 56200
IP address blocks: 203.215.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9053 (0x235d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Validity
Not Before: Apr 28 16:20:37 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f0de54-83ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:99:60:73:6c:19:01:38:94:ad:82:77:e0:
55:1b:be:7f:0b:7d:cd:42:89:1f:ff:7e:2b:ce:49:
c8:0f:1e:b0:7d:5b:41:bf:28:81:d0:db:c8:74:6d:
66:0e:b2:7c:bc:5c:d5:e0:8d:e3:ae:0e:ba:90:83:
aa:64:83:44:eb:97:aa:cd:a0:05:d9:c8:a8:fb:f4:
c2:e3:4c:a0:ae:3d:df:40:1d:4d:c4:a4:2d:7a:0f:
72:71:91:44:fe:ad:f0:88:93:85:70:eb:78:ad:93:
3e:a8:f8:d8:ea:b8:c8:48:df:b3:b6:a1:69:ca:e9:
1c:27:ad:97:a4:d8:44:23:b5:83:5d:d0:b0:b2:e7:
5c:72:82:99:e5:d4:91:af:62:18:1d:3b:d4:33:07:
55:32:0e:cf:84:19:bf:fa:52:e5:c8:da:7c:07:ae:
d4:d1:49:c7:98:39:08:60:fc:70:ee:7e:82:9e:88:
51:32:91:0d:7d:da:1e:8a:42:fa:7c:fd:29:1c:75:
e2:c8:98:19:22:bf:7c:dd:e8:66:b8:5f:36:2b:4a:
17:1c:01:ce:24:8c:de:e7:0d:a7:64:b8:4c:1a:5e:
56:bd:c6:c8:c1:a8:49:26:8f:d9:4b:e9:28:d3:65:
ed:78:d7:21:b4:51:7b:64:a4:bf:73:87:72:b5:08:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:30:36:1B:4F:98:B7:37:F5:5D:1A:B4:0C:C0:3C:2F:A2:2A:5D:AA
X509v3 Authority Key Identifier:
keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/2D55F42CB0F611E5B464E359C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.215.52.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:af:4e:dd:10:d3:21:c2:6c:d7:6a:84:b5:5c:13:ce:09:94:
73:ea:7c:a5:3d:0c:42:8a:6c:2a:d6:d3:37:72:2c:c9:e4:eb:
15:e3:37:da:ae:9c:96:40:9f:5c:36:99:55:68:73:45:3c:c5:
7f:0e:4d:66:5d:b9:31:06:f7:56:86:ca:eb:ae:c4:cc:73:92:
93:7f:71:b3:d0:5a:9e:ed:9d:aa:0c:35:5c:24:ea:9e:14:51:
92:68:0c:f7:c2:51:5e:9a:ee:d6:51:12:f8:39:ab:c8:d2:14:
e0:15:21:f3:47:57:25:01:3b:95:92:a9:66:92:ce:06:e7:18:
b0:46:1a:c1:42:4b:b9:27:21:37:6c:b1:8c:b8:c9:12:6d:3c:
07:c8:59:ea:47:5d:74:c1:5a:85:30:17:7f:b9:35:a4:39:82:
c4:39:40:f7:e6:12:9d:ab:47:c8:7f:26:61:b8:15:8a:2e:1d:
9f:21:f0:31:5d:a2:41:3b:74:7e:51:75:5e:2f:a1:7e:05:0a:
91:df:69:d1:f5:90:3d:10:92:f2:11:54:97:55:fc:99:1e:a1:
88:88:df:5c:7a:b7:cd:20:a0:e8:ab:51:b2:1e:e6:78:23:d5:
90:74:58:be:b0:42:88:72:20:02:67:35:86:eb:a5:ff:8b:d0:
ce:d6:39:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:49:09 2026 by rpki-client