
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/D62511F6C41D11F08D2E621EC4F9AE02.roa
File: D62511F6C41D11F08D2E621EC4F9AE02.roa (raw, json)
Hash identifier: ANh833pW91BdelzdwY9Q5GP5XJ6HDNJCyua0ITPlESA=
Subject key identifier: ED:36:BE:AA:3E:B2:F8:0B:0B:D3:35:6C:AF:AF:81:9D:35:9F:CC:70
Certificate issuer: /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
Certificate serial: 02B1
Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/D62511F6C41D11F08D2E621EC4F9AE02.roa
Signing time: Mon 21 Sep 2026 01:51:56 +0000
ROA not before: Mon 21 Sep 2026 01:51:56 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 137471
IP address blocks: 119.15.0.0/22 maxlen: 24
119.15.4.0/22 maxlen: 24
119.15.8.0/24 maxlen: 24
119.15.9.0/24 maxlen: 24
119.15.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl
rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689 (0x2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
Validity
Not Before: Sep 21 01:51:56 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ab08dbc-a652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:30:17:47:61:1d:58:2d:fb:b4:2d:e5:a4:
7a:28:f3:31:90:ff:c4:3c:16:d6:58:c0:69:0f:38:
00:55:db:d7:61:6d:4d:be:0e:bb:36:8f:1e:c0:ce:
53:57:35:dc:d5:50:a4:08:8d:28:ae:2d:20:a4:4e:
3e:f9:c5:ca:da:f7:52:60:ca:56:10:4d:99:13:08:
bc:9b:8d:13:4c:88:3e:39:2b:cb:e7:1e:b3:38:6a:
b8:c9:b3:b9:9b:ac:f4:46:fb:72:7a:93:45:5f:53:
44:a3:14:41:2c:20:ad:c0:2c:d3:78:32:c3:ed:94:
e5:57:68:fa:56:92:1c:07:e0:7a:84:9f:2b:55:16:
60:2b:ae:7c:c8:72:0f:46:0b:2e:42:60:e5:c3:ba:
24:ba:8f:c7:c2:aa:5a:39:c2:93:51:bd:9a:4b:a1:
5a:a1:24:bd:14:3e:34:01:0a:56:ba:d5:51:f3:61:
23:1f:21:fc:bc:47:47:1b:cb:33:fe:0e:12:21:ac:
8d:4e:55:22:c7:ce:0a:ca:f1:bd:b2:7f:60:ad:37:
90:14:1c:a6:a0:3c:f0:a1:15:ba:54:fc:0d:f8:96:
3f:33:b0:79:59:1f:28:a2:b4:ba:af:37:8d:dc:7d:
90:4f:91:10:f7:0e:1b:9d:5a:84:78:5f:35:15:80:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:36:BE:AA:3E:B2:F8:0B:0B:D3:35:6C:AF:AF:81:9D:35:9F:CC:70
X509v3 Authority Key Identifier:
keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/D62511F6C41D11F08D2E621EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.15.0.0-119.15.9.255
119.15.13.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:97:44:bb:53:42:cf:2f:99:86:c8:de:25:8b:0c:f8:2f:30:
8f:e4:06:36:9f:25:ba:47:36:55:89:03:08:6c:f3:a1:fc:a6:
2e:dd:44:f0:49:45:fa:81:08:af:5b:40:95:dc:6c:3d:09:27:
25:3c:c6:04:90:5b:a7:bf:95:c9:4e:73:75:b6:37:31:67:a8:
eb:af:5a:8e:7b:83:b5:6f:9e:6c:10:2f:50:d0:92:2b:b9:d8:
3f:3d:e4:f5:96:fd:e3:80:72:96:3c:3c:06:b5:20:d7:c4:75:
b2:ef:1e:e4:9c:18:06:df:c1:31:d6:d8:f1:10:a1:90:54:48:
0b:d8:6c:9b:6c:87:33:23:58:a4:d9:a2:51:a8:87:0e:0f:0d:
e5:ad:a8:8a:1a:24:57:e7:f4:09:0e:ad:d6:22:44:d0:2f:77:
80:61:bf:d5:e6:bf:f5:64:dc:73:57:e6:f5:7e:e9:de:4c:75:
a0:16:0d:30:fd:a8:ea:6f:20:aa:d7:87:a4:0e:73:b3:29:9e:
cd:e5:d5:f3:c5:f9:15:07:a3:2f:cf:50:de:76:4c:47:bd:35:
eb:4d:60:61:a5:ab:8c:27:a6:f5:6f:30:fa:db:b2:2e:68:a2:
3c:72:00:ba:50:28:d7:cb:5f:7e:79:69:6a:06:29:61:78:b7:
24:84:67:b3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY0QTcxMTAvBgNVBAUTKEZGNDJCMzQzNjA0NDk1NDY5NkZGRTA4QjBFRTE5NzVD
NkM1QjhENkQwHhcNMjYwOTIxMDE1MTU2WhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIwOGRiYy1hNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAupswF0dhHVgt+7Qt5aR6KPMxkP/EPBbWWMBpDzgAVdvXYW1Nvg67No8ewM5T
VzXc1VCkCI0ori0gpE4++cXK2vdSYMpWEE2ZEwi8m40TTIg+OSvL5x6zOGq4ybO5
m6z0RvtyepNFX1NEoxRBLCCtwCzTeDLD7ZTlV2j6VpIcB+B6hJ8rVRZgK658yHIP
RgsuQmDlw7okuo/HwqpaOcKTUb2aS6FaoSS9FD40AQpWutVR82EjHyH8vEdHG8sz
/g4SIayNTlUix84KyvG9sn9grTeQFBymoDzwoRW6VPwN+JY/M7B5WR8oorS6rzeN
3H2QT5EQ9w4bnVqEeF81FYBZhQIDAQABo4ICbTCCAmkwHQYDVR0OBBYEFO02vqo+
svgLC9M1bK+vgZ01n8xwMB8GA1UdIwQYMBaAFP9Cs0NgRJVGlv/giw7hl1xsW41t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjRBNy9DODA1NUZENkM5
MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxVYVdfLUNMRHVHWFhHeGJq
VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18wS3pRMkJFbFVhV18tQ0xEdUdYWEd4YmpXMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODY0QTcvQzgwNTVGRDZDOTI1MTFFRDgwOTM2MTQ5QzRGOUFFMDIvRDYyNTExRjZD
NDFEMTFGMDhEMkU2MjFFQzRGOUFFMDIucm9hMCwGCCsGAQUFBwEHAQH/BB0wGzAZ
BAIAATATMAsDAwB3DwMEAXcPCAMEAHcPDTANBgkqhkiG9w0BAQsFAAOCAQEAspdE
u1NCzy+ZhsjeJYsM+C8wj+QGNp8lukc2VYkDCGzzofymLt1E8ElF+oEIr1tAldxs
PQknJTzGBJBbp7+VyU5zdbY3MWeo669ajnuDtW+ebBAvUNCSK7nYPz3k9Zb944By
ljw8BrUg18R1su8e5JwYBt/BMdbY8RChkFRIC9hsm2yHMyNYpNmiUaiHDg8N5a2o
ihokV+f0CQ6t1iJE0C93gGG/1ea/9WTcc1fm9X7p3kx1oBYNMP2o6m8gqteHpA5z
symezeXV88X5FQejL89Q3nZMR701601gYaWrjCem9W8w+tuyLmiiPHIAulAo18tf
fnlpagYpYXi3JIRnsw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:26:59 2026 by rpki-client