
$ rpki-client -vvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/B34D1A26F6C811EEBC4BE00BC4F9AE02.roa
File: B34D1A26F6C811EEBC4BE00BC4F9AE02.roa (raw, json)
Hash identifier: VvVjYiDQeO0/Kuu5dNnxQmNtzBeDEDxanFTxX0efrwo=
Subject key identifier: 02:5B:5F:3E:E8:5F:3B:8F:C4:72:48:99:42:2F:41:96:7C:9E:82:DF
Certificate issuer: /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
Certificate serial: 0245
Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/B34D1A26F6C811EEBC4BE00BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:11:47 +0000
ROA not before: Mon 27 Oct 2025 04:46:25 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 19905
IP address blocks: 119.15.0.0/22 maxlen: 24
119.15.4.0/22 maxlen: 24
119.15.8.0/24 maxlen: 24
119.15.9.0/24 maxlen: 24
119.15.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl
rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
Validity
Not Before: Oct 27 04:46:25 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a46543-7175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:e0:b9:6b:64:27:9e:a0:e6:af:a3:d1:ea:
d6:0d:6c:69:4a:13:72:a3:7e:82:62:8f:6a:24:71:
e1:a9:14:22:42:f0:08:cf:2b:76:4c:3c:89:8d:55:
5a:13:b3:43:03:47:14:55:f2:8e:0a:85:6a:35:61:
83:79:49:d9:b1:e1:67:8b:6d:28:ad:c4:ca:7d:25:
2c:e9:4c:57:16:b0:2b:ab:56:ea:4a:e5:73:9e:68:
f8:b4:ff:98:c3:d1:a7:ff:7d:06:6e:bb:19:fa:b3:
49:d7:30:5a:36:74:db:ce:4c:39:0c:35:ee:d3:05:
6c:74:f6:dd:e3:b3:55:ba:a8:22:40:e8:c2:e2:74:
82:34:5c:3e:7e:84:92:97:c4:e1:73:d1:33:bd:94:
91:d6:11:d5:28:ae:2f:37:b1:a2:a5:9f:8f:72:13:
0d:9f:b3:44:49:52:6f:59:bb:d2:7e:20:6a:b1:84:
ad:5f:7c:39:dd:9d:64:72:ad:31:66:ae:8a:cc:f9:
32:b6:52:a7:b3:3d:ab:3b:99:55:8b:2c:9a:4c:d9:
09:6e:fb:15:f6:d2:cd:d7:48:80:d3:0c:ee:66:2d:
12:f3:ea:5a:0d:c8:05:6f:a5:76:a3:0d:34:7d:67:
ad:5f:2a:ee:cd:f8:5a:de:33:56:f4:f4:a9:79:5c:
45:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5B:5F:3E:E8:5F:3B:8F:C4:72:48:99:42:2F:41:96:7C:9E:82:DF
X509v3 Authority Key Identifier:
keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/B34D1A26F6C811EEBC4BE00BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.15.0.0-119.15.9.255
119.15.13.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:cd:55:f7:3b:f2:b6:69:06:b7:db:da:5a:39:c7:fc:74:68:
e2:17:ca:d8:c1:ac:41:f4:e9:ba:8f:f3:c1:43:a5:ba:f2:8a:
dc:9f:bd:37:cc:77:ac:c1:e7:42:70:2f:df:42:e6:ff:5a:3a:
21:95:95:88:75:48:69:06:68:04:0a:4f:8b:44:47:a1:c1:a9:
f5:7d:09:9e:02:31:65:bb:92:9d:5f:80:78:78:87:52:44:ae:
8e:4b:a0:42:9a:6e:3c:e8:2d:00:d0:97:ff:f5:21:cb:d7:a7:
74:b6:b4:02:bc:81:0e:27:a7:b3:57:cd:3e:d9:2f:f9:fe:2e:
08:6a:a4:73:20:3b:eb:a9:fe:9b:f4:83:ca:72:a4:09:ed:3e:
9a:2a:6c:35:75:0f:26:45:66:7a:ae:88:09:e0:92:08:82:44:
d7:2f:ba:ea:fb:50:56:d4:ef:05:4f:eb:b0:14:89:25:aa:65:
59:3d:d4:10:90:88:c5:51:3b:9f:f8:86:92:c3:d8:ae:1d:0c:
32:f5:03:81:6f:d6:2c:2d:78:81:a4:75:82:cb:93:34:46:36:
14:f7:b8:cc:72:18:52:c2:7a:7b:a4:a7:65:48:79:67:c7:f6:
11:9c:0e:3e:39:39:6c:30:6b:47:ac:84:c8:4c:cb:7e:21:6d:
d9:f8:03:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:19 2026 by rpki-client