
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/F89E68D6982911ED90F8C877C4F9AE02.roa
File: F89E68D6982911ED90F8C877C4F9AE02.roa (raw, json)
Hash identifier: MEH+/hoe8OY25Wy/4OSxzZr0rDbZRuSg03Fo8orAav8=
Subject key identifier: BD:D3:D2:F2:AB:E5:2D:3F:11:61:05:C8:05:30:94:89:D5:FA:86:C3
Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial: 08A2
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/F89E68D6982911ED90F8C877C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:23:41 +0000
ROA not before: Sun 04 May 2025 21:01:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9498
IP address blocks: 103.149.58.0/24 maxlen: 24
103.149.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2210 (0x8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Validity
Not Before: May 4 21:01:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4761d-88a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:ff:c0:c7:6d:cb:2d:b6:e2:6a:da:0e:b0:
e2:4f:09:13:cc:1f:d2:15:7b:8f:e7:7c:87:25:8d:
ae:0d:75:58:3e:e3:2d:42:99:f2:70:85:1e:e5:bf:
f5:01:58:64:d5:fc:51:0d:ef:f5:10:06:e6:67:1c:
61:7c:29:89:34:a3:24:5e:ce:73:c4:f2:eb:55:ff:
f0:da:cf:51:a8:0d:1b:62:75:c9:ae:4d:a4:b1:07:
d9:07:1c:c0:7e:49:92:60:d3:6e:c2:0f:57:e9:55:
84:51:f1:89:91:37:56:14:e7:62:f5:ed:4f:82:91:
a1:9f:41:c2:ae:90:a3:f0:0e:59:a5:b3:91:f7:ec:
84:a1:dd:7a:7d:a2:60:80:fb:db:9a:ee:b7:8b:89:
10:f2:cc:1d:32:2c:70:43:91:ed:9b:c0:cb:15:ec:
1b:f2:50:f4:c4:36:d9:64:26:37:5e:6c:87:79:d6:
d3:f1:18:51:18:05:6e:5c:03:42:00:58:50:5d:c3:
35:b9:90:2e:cb:43:19:11:82:0d:de:0f:1a:93:3a:
ea:af:ee:71:ca:09:e6:3b:36:28:43:94:a2:b8:7a:
1d:02:74:6d:e5:9d:d8:d9:5d:53:1d:bb:28:3f:fb:
c4:bb:9d:e0:dd:9b:30:03:d4:8a:61:65:3e:06:8c:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D3:D2:F2:AB:E5:2D:3F:11:61:05:C8:05:30:94:89:D5:FA:86:C3
X509v3 Authority Key Identifier:
keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/F89E68D6982911ED90F8C877C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.58.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:61:58:d4:86:0a:e2:ff:a8:99:d8:30:dc:17:88:50:fc:e5:
67:b8:ae:93:a8:64:73:f6:63:9c:38:eb:18:9f:4a:f0:c8:c7:
4d:46:66:64:69:88:a7:8d:c6:cb:33:f6:1d:b4:cf:3f:ac:58:
ea:d7:9c:ee:3b:91:7a:9e:34:ec:a1:d7:44:9f:8d:57:e9:33:
9c:62:48:68:62:ed:35:eb:f1:ee:9e:14:04:66:ef:31:84:d9:
c5:b9:25:34:5f:64:c8:5c:e5:d8:83:fb:ea:cd:17:2c:f2:0c:
4c:4d:59:11:a9:6e:da:38:3b:6d:24:df:6d:e8:41:c3:fd:92:
e9:4b:b7:2e:45:5e:a2:18:ee:4d:c1:c9:4b:03:3f:cd:d0:ec:
b7:ea:b0:53:13:2c:b3:53:43:bf:0d:a3:dc:1e:6b:6c:19:d8:
8f:ee:8c:a8:9b:62:51:87:6c:57:37:95:79:b9:05:93:ea:83:
79:68:d2:7b:b7:fa:5a:69:46:e9:a6:cf:0a:55:b4:0d:cc:12:
f5:15:9b:ee:49:2b:1b:9a:ff:86:ab:ab:cd:aa:16:a0:86:14:
55:ea:7d:18:40:5f:99:21:2c:44:01:91:c5:fb:8f:a0:e8:fe:
42:64:2b:22:ce:a6:62:28:81:6c:b3:cb:b6:84:ee:71:8d:b8:
b4:f5:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:27 2026 by rpki-client