
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1E0F8E02A2F811F0ACA39B18C4F9AE02.roa
File: 1E0F8E02A2F811F0ACA39B18C4F9AE02.roa (raw, json)
Hash identifier: zF+00T4LJNEoaIcxR+4BeM/u4mU5LjPjC/WvXlruU1M=
Subject key identifier: B0:6A:28:78:8E:B9:1D:B8:31:AA:77:9A:95:BC:46:68:91:CC:DC:3E
Certificate issuer: /CN=A91CA294/serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
Certificate serial: 59
Authority key identifier: 19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1E0F8E02A2F811F0ACA39B18C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:14:33 +0000
ROA not before: Mon 06 Oct 2025 21:04:59 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139744
IP address blocks: 156.69.0.0/23 maxlen: 24
156.69.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl
rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA294, serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
Validity
Not Before: Oct 6 21:04:59 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3e759-ca9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:30:49:d7:56:d4:cd:8e:2e:98:42:a6:2a:
e5:5f:5f:7b:35:d8:e7:4b:19:3c:87:a9:58:80:30:
41:0f:16:b2:55:ba:8e:1e:c4:b1:80:3c:20:60:07:
08:61:8a:36:06:55:ec:d3:bf:84:42:55:d0:50:59:
ef:e2:22:b0:9b:9b:46:e5:91:2b:ca:8d:90:d9:b3:
6a:4b:b1:9a:eb:e6:52:76:a3:4a:e3:82:44:42:8b:
1a:be:71:8b:0f:ea:22:00:3e:2f:60:e5:ca:d9:d6:
5d:9b:54:e6:1e:4a:25:06:10:55:5f:6f:b7:34:0b:
c0:be:7c:bd:b9:df:cd:db:0f:8a:36:c2:64:4f:d0:
fe:6d:21:f1:bc:1a:54:a7:59:4b:a9:aa:d0:3a:02:
37:cb:ad:03:87:e5:61:4d:20:d2:c5:7e:42:86:aa:
53:6e:04:6a:a1:5c:08:65:98:66:60:31:10:c5:93:
01:6f:8e:0a:5b:ae:7b:92:da:a3:be:c4:14:62:19:
eb:85:24:15:34:21:73:45:36:8d:6d:2f:b1:40:1a:
31:55:c9:85:0d:a3:c0:32:01:c4:3a:51:44:b7:a1:
ae:7b:00:c5:df:08:d9:ba:40:b3:6f:48:03:eb:68:
27:cf:83:aa:9f:14:d3:83:f0:b6:ab:a6:2a:bd:5e:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6A:28:78:8E:B9:1D:B8:31:AA:77:9A:95:BC:46:68:91:CC:DC:3E
X509v3 Authority Key Identifier:
keyid:19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1E0F8E02A2F811F0ACA39B18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
156.69.0.0/23
156.69.8.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:c2:19:85:c7:e1:9f:83:61:56:3b:04:d4:91:9e:40:48:40:
28:7a:d2:c4:ef:3e:27:62:e5:ba:07:aa:c6:b0:a7:ed:14:a6:
e0:e0:93:81:dd:64:1d:14:8e:90:03:ac:d1:28:ae:ea:9c:fd:
63:ca:01:60:2d:c0:dc:21:21:03:69:33:22:e2:1c:0f:fd:d8:
61:5a:34:3f:a2:31:0b:e4:7b:95:08:93:fa:c0:18:4d:c4:c7:
34:75:1a:c7:ac:ce:93:76:e6:a0:ac:ba:1d:e4:82:6b:5c:3c:
79:81:aa:52:05:84:f3:dd:2e:3a:a5:5c:57:e4:aa:e2:9c:f6:
59:f5:a1:4a:4f:6c:15:02:0a:d3:b3:a8:f8:a7:f0:55:6c:6c:
f2:7c:a6:b7:bc:a5:5b:4b:43:23:84:38:9b:75:de:a7:b4:41:
7d:eb:af:77:2f:2a:db:c8:24:fb:15:6d:e6:49:7f:4d:aa:20:
52:50:1f:80:42:9c:0d:07:bd:21:fe:1b:78:9f:fe:6f:99:8d:
30:fa:d0:03:37:48:d6:ee:ee:63:3d:04:9a:b8:c8:d0:74:65:
4c:92:4f:0e:2a:df:ac:66:29:65:73:7d:a7:54:d5:c1:70:23:
68:be:af:43:ca:7e:ed:ba:0e:c4:ec:bb:f0:a6:ac:97:6b:20:
c4:c3:5d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:20 2026 by rpki-client