
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa
File: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (raw, json)
Hash identifier: V0Bxe9pvCdmpHFNAup44+kDyfw/tamlGcA2MYQmUsO0=
Subject key identifier: 25:CD:51:BB:85:FB:8C:73:78:B1:53:84:75:9F:67:EB:82:42:26:CD
Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial: 2898
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa
Signing time: Tue 31 Mar 2026 16:19:43 +0000
ROA not before: Tue 31 Mar 2026 16:19:43 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 139040
IP address blocks: 119.92.217.0/24 maxlen: 24
122.55.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10392 (0x2898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Validity
Not Before: Mar 31 16:19:43 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cbf41e-8b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:7a:01:4e:fb:dc:d5:db:af:10:71:c7:4b:
aa:f2:36:ea:65:24:0b:24:23:0d:a0:e9:b0:9e:0f:
8b:22:ab:dc:8f:9c:02:20:ad:30:27:42:1f:f0:af:
ad:87:56:70:56:fe:55:a8:f5:8e:8f:e2:b2:24:9e:
04:f4:cd:a1:79:2e:ab:45:e0:44:13:62:ff:af:91:
b1:b1:02:2f:c7:bc:1d:d0:2d:93:66:1e:9d:39:e3:
74:7a:cb:53:e5:fa:dc:a9:57:1b:6b:33:21:62:96:
47:14:90:6c:e8:47:fb:f8:66:ad:06:c0:c6:d8:04:
19:7a:ca:f9:9e:77:ff:d2:5d:0e:c5:b3:31:fa:8e:
70:86:d3:bd:33:76:27:1a:ec:c9:b4:5a:b4:cc:01:
bd:92:d5:ba:4b:5b:d4:52:2d:ca:9d:5b:65:d8:34:
53:00:3c:2c:b6:bc:f7:15:a6:ec:ba:67:35:2c:e8:
36:35:2c:e1:af:ac:35:27:d1:5d:3c:bb:48:61:66:
8f:a6:82:3c:a3:44:a5:fb:be:6b:4c:5c:fe:05:d0:
68:3e:74:79:de:74:6a:6b:a1:73:e2:a6:5f:25:b7:
42:eb:67:2d:40:2e:ec:4a:f4:c4:55:17:94:21:db:
49:c7:e8:50:56:1a:ec:8c:83:a5:1c:fd:e8:5a:6d:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CD:51:BB:85:FB:8C:73:78:B1:53:84:75:9F:67:EB:82:42:26:CD
X509v3 Authority Key Identifier:
keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.92.217.0/24
122.55.180.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f8:69:b8:fe:c3:63:b8:32:db:5a:3e:cb:aa:73:a7:82:ed:
d9:67:bd:8a:6b:df:52:f0:c8:03:b7:1e:0e:96:82:32:a6:63:
8f:d9:e2:7b:ce:b1:de:c0:6d:84:67:c3:fb:a7:5e:12:a6:ba:
eb:fb:24:d5:1b:5a:e5:95:4a:26:12:44:b1:97:97:c2:d8:44:
c1:6a:bd:2a:78:33:69:ae:6b:6d:28:45:16:a3:e7:42:05:7c:
c9:50:c1:4e:bd:fc:2c:9e:8b:32:e8:16:39:5c:41:a6:0d:0c:
2f:21:28:df:7a:65:4d:d1:89:fb:ca:50:85:af:4d:d1:d1:2e:
0f:ea:72:89:52:f9:94:87:0a:b0:fe:78:5d:2a:09:ca:7b:f2:
32:32:43:69:94:77:ca:b0:5e:b6:07:43:b0:29:65:f6:73:4c:
97:db:73:42:62:10:6b:3b:bb:81:3a:2a:82:77:ad:9f:11:0f:
0a:4f:cf:6b:5c:d4:c9:49:59:fb:da:cb:fd:d5:50:ec:cf:4e:
3b:7a:2c:90:81:2e:8e:cd:13:9d:cd:33:83:63:a9:40:29:63:
60:5d:53:73:ae:d9:25:0f:08:98:7d:db:05:24:25:13:5c:ec:
7f:13:39:30:86:f7:a0:cd:64:41:fa:02:2d:4c:bc:2f:6a:0a:
16:81:c2:e2
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICKJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw
NDU5MjhBQjgwHhcNMjYwMzMxMTYxOTQzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNiZjQxZS04YjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuK96AU773NXbrxBxx0uq8jbqZSQLJCMNoOmwng+LIqvcj5wCIK0wJ0If8K+t
h1ZwVv5VqPWOj+KyJJ4E9M2heS6rReBEE2L/r5GxsQIvx7wd0C2TZh6dOeN0estT
5frcqVcbazMhYpZHFJBs6Ef7+GatBsDG2AQZesr5nnf/0l0OxbMx+o5whtO9M3Yn
GuzJtFq0zAG9ktW6S1vUUi3KnVtl2DRTADwstrz3Fabsumc1LOg2NSzhr6w1J9Fd
PLtIYWaPpoI8o0Sl+75rTFz+BdBoPnR53nRqa6Fz4qZfJbdC62ctQC7sSvTEVReU
IdtJx+hQVhrsjIOlHP3oWm1+KwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFCXNUbuF
+4xzeLFThHWfZ+uCQibNMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz
OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvRjE1QUQwQ0U1
NDRFMTFFRDlDNUUyRjNBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAd1zZAwQAeje0MA0GCSqGSIb3DQEBCwUAA4IBAQBt+Gm4/sNjuDLb
Wj7LqnOngu3ZZ72Ka99S8MgDtx4OloIypmOP2eJ7zrHewG2EZ8P7p14Sprrr+yTV
G1rllUomEkSxl5fC2ETBar0qeDNprmttKEUWo+dCBXzJUMFOvfwsnosy6BY5XEGm
DQwvISjfemVN0Yn7ylCFr03R0S4P6nKJUvmUhwqw/nhdKgnKe/IyMkNplHfKsF62
B0OwKWX2c0yX23NCYhBrO7uBOiqCd62fEQ8KT89rXNTJSVn72sv91VDsz047eiyQ
gS6OzROdzTODY6lAKWNgXVNzrtklDwiYfdsFJCUTXOx/EzkwhvegzWRB+gItTLwv
agoWgcLi
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:39:01 2026 by rpki-client