
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/5C5B89FAFF1D11F09172691B85EE528E.roa
File: 5C5B89FAFF1D11F09172691B85EE528E.roa (raw, json)
Hash identifier: y/16UxSaEow8hcS36HAO4q+RTfuAIHH51e8kN8ywsyo=
Subject key identifier: FF:9E:F9:0C:03:85:69:CB:5B:CF:12:E3:04:24:C5:D8:83:7B:CA:0B
Certificate issuer: /CN=A919C7A9/serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1
Certificate serial: 01D6
Authority key identifier: F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/5C5B89FAFF1D11F09172691B85EE528E.roa
Signing time: Sun 01 Mar 2026 17:17:26 +0000
ROA not before: Tue 03 Feb 2026 03:22:56 +0000
ROA not after: Tue 02 Jun 2026 00:00:00 +0000
asID: 149250
IP address blocks: 203.175.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl
rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:08:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C7A9, serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1
Validity
Not Before: Feb 3 03:22:56 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=69a474a6-3404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:e0:2d:ff:d9:02:86:82:96:74:81:4f:8c:
16:0e:e0:f7:9c:32:e6:12:1f:f9:37:09:f7:cf:44:
3c:ec:aa:1e:f3:09:30:00:72:b8:0d:0a:39:f1:ab:
a8:a5:37:f4:cc:d8:98:64:3b:26:b6:00:98:5c:2b:
89:cb:86:9b:f0:db:e6:16:24:a8:90:45:4c:5a:91:
75:61:5e:82:63:78:f6:e7:bf:41:cf:f7:39:37:3d:
be:6f:2c:48:2e:48:f4:ff:bc:ee:cb:7a:8b:e4:40:
0c:f9:6e:cb:e7:37:1c:62:78:d8:2f:a6:5f:61:7f:
09:22:88:12:6b:e8:45:80:09:0f:7f:35:cc:f6:58:
37:91:0e:62:7b:11:2d:46:44:cc:7d:4b:c4:a8:8f:
1a:b2:19:e5:3a:bc:89:3e:f6:63:36:74:a8:94:6d:
66:d7:01:1f:cd:d7:c2:ab:23:be:3e:91:10:a7:75:
84:7c:53:d7:c8:56:76:27:09:e5:dd:5a:3f:87:62:
30:85:04:e1:2d:16:fe:22:ae:0b:f2:4b:e2:af:24:
95:3e:34:e3:a7:be:e2:e4:b1:3a:56:0a:d7:30:63:
ce:be:db:78:6c:81:2a:0b:9a:6a:e3:e0:57:e3:bc:
e2:0d:ce:a4:49:53:f6:b0:c6:97:b5:f2:47:79:29:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9E:F9:0C:03:85:69:CB:5B:CF:12:E3:04:24:C5:D8:83:7B:CA:0B
X509v3 Authority Key Identifier:
keyid:F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/5C5B89FAFF1D11F09172691B85EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
203.175.98.0/23
Signature Algorithm: sha256WithRSAEncryption
87:f4:58:6f:14:f1:48:51:bf:61:4b:08:ad:71:f7:82:2e:40:
8a:c4:57:19:c2:38:a7:54:49:e4:6d:94:9d:2f:23:57:b3:d5:
ce:b6:b6:73:54:6a:6c:dd:8c:fc:eb:7a:49:80:a0:ed:73:4a:
3b:f9:1c:a9:95:e1:87:04:0e:55:ff:2f:2f:bb:58:b0:e2:04:
02:27:0f:94:bc:f2:09:c6:dd:fb:f6:49:e5:13:ab:6f:d0:8e:
ae:18:92:71:a3:e5:be:ee:16:91:d9:98:9c:7a:9a:81:63:c2:
ea:70:c6:d0:9a:6b:39:80:97:1a:d3:1a:38:30:5f:2a:70:54:
e4:7a:67:95:1f:8c:fc:57:ba:c5:85:2f:c9:70:26:73:06:61:
00:a9:00:06:29:e6:61:e1:85:c8:33:c4:af:f8:b2:48:d4:15:
de:7d:52:85:df:03:cc:42:2b:cf:de:49:ef:77:44:80:22:ea:
00:ed:b2:01:0a:bf:3a:f0:61:b8:23:3b:77:7b:c1:91:74:1f:
1c:e9:05:7c:f3:c5:62:d9:7a:25:74:46:cf:f8:ed:fd:04:20:
d6:34:b6:00:ea:60:38:3a:5b:1c:54:f2:ea:28:da:da:bc:21:
1b:f9:4a:ab:92:52:37:ad:d7:3d:e1:a3:60:75:19:77:96:2e:
44:e6:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:42:57 2026 by rpki-client