
$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/1347AA9019FE11ECB459B141C4F9AE02.roa
File: 1347AA9019FE11ECB459B141C4F9AE02.roa (raw, json)
Hash identifier: hotXzorhi8h9NpRGm5y/zSj3yKUgfqnoMA89+EWdFIw=
Subject key identifier: DB:D5:1F:65:76:C4:E0:B1:20:91:5E:01:11:DD:10:0E:E1:D0:77:5C
Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Certificate serial: 05DB
Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/1347AA9019FE11ECB459B141C4F9AE02.roa
Signing time: Mon 18 May 2026 23:28:53 +0000
ROA not before: Mon 18 May 2026 23:28:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1221
IP address blocks: 203.20.197.0/24 maxlen: 24
203.20.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1499 (0x5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677
Validity
Not Before: May 18 23:28:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a0ba0b5-14a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a8:a9:f7:6d:d1:90:aa:a7:06:c6:d7:14:38:
fc:a5:38:59:ba:ec:8e:73:5c:fd:71:a6:f5:50:e3:
1c:9a:3a:5f:4e:e2:8e:63:70:95:1a:96:2a:49:57:
af:9d:ef:30:a8:35:69:27:46:b1:ce:e8:b3:6e:a0:
19:9c:3e:27:af:fb:01:16:2f:59:0f:62:65:cf:11:
70:c6:41:58:a5:5d:3a:28:f1:ee:5c:52:f4:fd:ed:
8d:56:e1:47:37:92:d6:09:20:c9:44:08:59:fb:14:
69:21:41:d9:56:0c:0f:6b:3d:f3:25:72:a7:48:d0:
5a:80:4e:89:bd:8a:29:0e:f4:15:21:22:de:c3:7e:
8f:95:47:10:18:77:1d:32:57:cc:23:c3:b8:4c:16:
49:cb:b1:bc:6d:90:1e:84:c1:a9:1d:1e:62:0b:4a:
69:4a:7a:ac:78:0a:b4:19:f1:4e:d5:ed:53:4b:e9:
19:92:d4:70:22:7c:35:70:5e:4b:ea:71:ec:31:24:
83:8a:80:1e:69:f7:38:a7:9b:18:ec:5a:3f:e1:21:
ef:fb:a4:12:f5:b3:7f:b4:5a:d6:cb:f5:9a:0f:78:
8e:35:4d:c1:1c:b9:83:e5:24:68:ef:0b:58:09:4c:
23:31:23:97:4c:52:a8:f5:17:46:03:c5:2d:7f:18:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D5:1F:65:76:C4:E0:B1:20:91:5E:01:11:DD:10:0E:E1:D0:77:5C
X509v3 Authority Key Identifier:
keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/1347AA9019FE11ECB459B141C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.20.197.0/24
203.20.199.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4b:55:63:80:79:28:9f:7c:5b:03:a3:b1:62:d3:7e:98:0f:
ab:37:b4:98:3e:29:f9:16:85:c0:f9:b7:c1:ec:ee:1e:da:54:
b2:15:5d:ab:4b:ac:db:34:a5:5b:71:80:08:3c:e8:dd:ac:62:
b2:cc:f5:3c:0b:a6:50:5e:0c:47:b9:10:48:98:60:b1:c7:51:
10:0d:d7:c4:06:0b:8c:a3:ea:48:1a:a2:48:44:64:67:9b:e5:
12:81:5d:8b:75:47:71:c0:3c:3b:94:fe:60:c4:0a:c6:4a:b7:
92:8a:ac:9b:64:f6:c6:52:74:d9:43:4b:1b:17:b6:8f:07:2b:
de:7f:c8:5c:6a:6b:f6:93:32:6e:07:9f:76:c4:51:4f:82:95:
cd:db:b4:af:67:1b:02:75:48:fe:e1:cd:8f:2d:47:ea:0f:78:
95:02:dd:d4:b7:b6:f4:ba:82:3a:51:dc:c3:53:b2:d8:bb:31:
0f:37:bf:50:76:74:f9:59:b6:fd:e6:57:83:97:c7:91:e7:e8:
09:79:4d:d8:c6:47:0a:7b:39:f0:6d:90:1b:26:5a:5d:95:6d:
b0:a7:a1:26:5d:8a:32:c4:e1:61:db:b5:1d:c7:0f:f2:9a:21:
42:3e:fe:61:76:29:94:8e:81:62:60:b2:6b:4b:bd:5c:4a:83:
87:db:b4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:15:55 2026 by rpki-client