
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/5090FDECFF2E11F099E36B6D89EE528E.roa
File: 5090FDECFF2E11F099E36B6D89EE528E.roa (raw, json)
Hash identifier: PrWTL5usD2G+p37NAOHzpvbn2FCtmNcY07TLdtnld18=
Subject key identifier: DB:31:26:42:8B:0E:46:31:45:41:0E:47:4E:81:52:8D:81:2F:BC:A2
Certificate issuer: /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Certificate serial: F2
Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/5090FDECFF2E11F099E36B6D89EE528E.roa
Signing time: Sun 01 Mar 2026 16:57:13 +0000
ROA not before: Tue 03 Feb 2026 06:28:36 +0000
ROA not after: Tue 02 Jun 2026 00:00:00 +0000
asID: 132222
IP address blocks: 103.71.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Validity
Not Before: Feb 3 06:28:36 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=69a46fe9-a12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:34:77:bf:d6:12:21:f7:83:9e:0e:52:2a:
50:3e:45:e2:ee:94:e4:36:e7:41:62:71:bd:38:3f:
7c:83:ec:35:e5:1a:f3:4a:fe:56:8f:f1:6e:e6:fd:
78:9b:b1:35:75:25:99:df:55:4b:98:e3:68:61:cc:
40:c5:bf:99:68:a5:f1:47:07:1d:7f:2b:e5:b7:3b:
9a:bd:ce:3b:58:b0:73:5d:eb:fd:95:3e:aa:09:82:
b1:18:49:ff:cb:25:ec:a0:f2:01:1d:95:b9:79:7e:
f0:97:50:f3:09:a0:ba:76:fe:6e:8d:52:43:68:f2:
65:33:5a:25:79:8a:17:41:70:fc:df:0b:c6:2e:97:
6b:06:63:35:e3:8e:fc:d3:63:47:b8:28:9d:08:ab:
42:f5:b6:b5:b4:39:54:62:44:a8:09:be:f2:5b:b8:
88:6a:ac:9c:b7:e6:dd:28:28:43:2a:80:3c:9c:72:
af:5e:1e:9a:05:1b:fb:93:77:8d:ab:c5:43:90:32:
74:27:07:9a:c3:06:ea:30:0a:7d:49:0b:68:b5:a0:
98:83:8f:9c:b9:64:4d:be:6c:25:db:e8:ac:70:69:
ab:ed:6e:f2:b0:43:f1:78:8b:30:02:ad:1a:0b:6f:
e0:44:79:f8:23:42:91:64:d1:70:c6:12:03:e6:2d:
92:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:26:42:8B:0E:46:31:45:41:0E:47:4E:81:52:8D:81:2F:BC:A2
X509v3 Authority Key Identifier:
keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/5090FDECFF2E11F099E36B6D89EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.71.59.0/24
Signature Algorithm: sha256WithRSAEncryption
50:81:1c:ab:71:f8:a5:e9:1d:bb:68:a9:4f:1d:03:c0:22:41:
c6:fd:00:23:d2:97:c6:0f:c0:38:6d:14:ce:fa:3e:a2:a9:fb:
59:45:4b:0c:51:bd:ff:02:71:6c:88:0d:83:56:3a:7f:d9:b5:
72:32:cf:4a:c6:47:c5:b7:4a:e5:c7:d4:28:bd:07:7a:e6:b5:
f4:ef:b8:2f:df:8b:69:4d:5e:b9:ee:0c:34:be:cd:75:7f:1b:
f5:1c:4e:18:92:20:50:35:a1:6f:ff:5e:18:3b:ba:f0:a0:71:
d4:78:ca:84:87:b7:08:b7:a3:6c:73:ff:a8:59:9b:6a:4f:c2:
a8:6c:10:d5:0a:be:59:d7:9e:27:f5:5b:a8:5a:e0:20:7d:5c:
84:7c:3e:a5:4b:82:cd:0d:76:a7:1f:94:7d:fa:6a:02:c2:3b:
df:c2:52:56:c8:15:32:75:e6:3b:1f:7a:81:60:7b:47:1c:95:
fc:8f:fb:d9:df:82:bd:ed:0c:c4:1f:04:d4:2a:23:ea:5c:89:
1c:93:e9:c6:db:e7:f4:53:11:30:59:09:5e:2d:c0:79:00:f5:
5a:ea:36:61:d7:2f:84:cb:c2:7f:d7:d7:97:bd:a0:df:6c:0f:
f5:a5:bd:57:3e:0e:05:80:d8:43:50:82:89:c9:20:cc:89:17:
53:ff:59:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:16 2026 by rpki-client