
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/DB208FD4175911EC87322F85C4F9AE02.roa
File: DB208FD4175911EC87322F85C4F9AE02.roa (raw, json)
Hash identifier: cJTkfxanvIj+RM9OMhYOY3C3bXPLhNB/j9ZiLmWvJ4M=
Subject key identifier: C6:D2:86:45:1A:D3:DB:87:39:AF:E3:2C:2A:73:52:59:6D:F1:AB:52
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 0697
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/DB208FD4175911EC87322F85C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:37:17 +0000
ROA not before: Sun 03 Aug 2025 00:06:31 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 56080
IP address blocks: 59.154.80.0/24 maxlen: 24
119.225.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1687 (0x697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Aug 3 00:06:31 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4875d-621e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:71:37:6e:c8:91:70:c6:63:a7:55:92:39:
d5:83:98:d3:11:ac:84:8f:f2:8b:bc:4b:1a:57:f1:
58:da:a9:4c:e9:bb:55:05:06:29:ed:00:94:3d:6d:
23:cc:04:e5:d7:11:1c:77:e5:2f:0e:29:87:17:df:
4c:51:ba:01:52:d6:14:ed:62:03:75:83:e7:dd:4b:
1e:de:d4:95:05:f0:c3:07:27:a7:5d:05:6d:26:2d:
f7:c7:5d:67:94:3d:99:fc:dd:73:ac:4e:01:d1:cf:
11:ee:67:ef:b1:ac:01:52:7a:57:7c:ba:fe:b9:0e:
2c:44:b6:fe:90:e6:2b:de:fe:20:36:9a:77:e5:a6:
19:48:41:3c:ae:5a:22:0c:3b:ee:ad:63:30:30:e9:
e5:0e:52:72:f5:8b:f7:b3:f2:13:d4:43:39:16:70:
1e:be:9d:3a:5c:79:72:ea:e8:65:6d:74:4c:56:48:
ea:79:2b:62:56:f8:53:e1:45:1a:9a:d8:2d:95:db:
15:cd:18:ed:bc:21:d5:86:d2:e1:00:a5:85:e8:a9:
85:64:d2:ba:db:85:dd:e9:30:6b:28:90:95:d0:3e:
c7:37:57:e3:97:99:39:b3:e9:de:c9:e9:d0:c7:5b:
7d:53:f7:ee:2d:e8:eb:f9:e5:aa:08:96:e8:c9:0a:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D2:86:45:1A:D3:DB:87:39:AF:E3:2C:2A:73:52:59:6D:F1:AB:52
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/DB208FD4175911EC87322F85C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
59.154.80.0/24
119.225.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:77:55:82:c3:cb:01:bd:b7:00:9d:b2:fc:0d:be:54:2d:96:
1f:0f:47:50:e5:6d:ea:37:67:30:a7:00:27:50:fd:6a:88:cc:
46:40:49:ce:d1:42:4e:12:06:90:63:1c:6e:15:74:3f:97:b6:
3a:e5:0e:35:85:a9:ef:bd:27:0e:33:b7:ab:c5:6c:8d:7c:78:
f1:e3:7b:06:75:6b:32:b9:13:e6:b1:85:d9:17:a4:02:44:fb:
a8:c0:18:cc:32:97:b6:a2:cd:c6:94:ac:1a:ab:4f:9c:76:12:
df:36:97:91:45:e5:e7:c6:d3:84:02:ed:0d:fc:5e:c3:8c:f0:
c2:58:66:3a:65:e2:0f:14:1b:38:f9:39:40:9f:4e:c7:c0:28:
44:cd:08:7b:6f:64:14:e2:13:68:37:24:a2:81:dd:e5:28:8a:
04:3e:40:41:e8:a8:c6:3e:55:2e:39:d7:05:3f:f0:86:ea:91:
b1:56:21:3c:48:ac:02:44:24:ac:c3:da:79:03:f7:73:8f:f2:
f9:67:4e:68:93:3c:99:b9:55:7f:7f:73:28:46:50:fd:96:e8:
bb:e6:9b:62:c7:99:61:07:d3:3f:00:46:43:69:d6:5d:aa:14:
43:88:1e:a7:64:69:ab:3f:83:d6:89:8d:97:c6:15:33:96:a7:
dd:89:a1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:03 2026 by rpki-client