
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/F59E9504F20611F0B4D6054A4A6F56BC.roa
File: F59E9504F20611F0B4D6054A4A6F56BC.roa (raw, json)
Hash identifier: fJ10i1I3CVn/cq/HNYJ87da7lOqBMrG/ft9ahjiVUac=
Subject key identifier: D5:9F:86:85:17:E9:D6:0E:7E:46:77:6B:04:14:20:66:95:2D:F1:9B
Certificate issuer: /CN=A91E585B/serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3
Certificate serial: 1B
Authority key identifier: F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/F59E9504F20611F0B4D6054A4A6F56BC.roa
Signing time: Sun 01 Mar 2026 05:43:03 +0000
ROA not before: Thu 15 Jan 2026 11:40:15 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 17479
IP address blocks: 202.44.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.crl
rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E585B, serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3
Validity
Not Before: Jan 15 11:40:15 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a3d1e7-6063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:07:8d:0e:ab:43:f6:b6:32:e3:0f:ed:e4:
ce:48:c2:e5:6d:fb:84:69:93:67:02:4f:bb:8d:be:
4a:26:39:5d:89:16:92:e0:cf:39:8e:a1:5e:f4:ca:
7d:e8:44:72:92:ab:a3:20:2b:a1:33:6f:6e:91:53:
df:a0:a9:54:bd:5a:a0:cb:25:52:f1:25:d8:09:f6:
93:23:c4:1e:be:96:35:43:e9:c7:c9:dc:0b:fd:9e:
fa:8e:3e:47:bd:17:3a:21:9d:c1:12:e2:d8:8c:7b:
a6:2d:56:6f:a5:34:d1:e7:de:e5:3b:a5:06:81:ca:
8e:82:42:bc:23:0f:00:2f:6b:89:e3:9e:a2:50:09:
96:86:48:16:e9:af:11:10:55:eb:33:7a:64:98:b7:
91:8d:43:ee:28:ef:57:ea:24:09:f9:d5:15:0c:7b:
48:ba:f6:59:59:15:87:ef:81:19:80:88:2e:22:20:
66:68:e7:f4:5c:36:00:c0:08:64:04:9a:ba:b9:41:
6e:2a:e0:56:65:f5:3f:1f:99:f6:66:bd:81:aa:63:
f2:35:7b:e8:5b:6e:3d:28:b6:3f:6a:f3:55:4c:0e:
f9:32:62:36:87:ed:21:7a:b6:bc:01:92:23:aa:f1:
26:00:e8:13:02:9d:9e:ac:58:ea:57:da:88:ed:86:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9F:86:85:17:E9:D6:0E:7E:46:77:6B:04:14:20:66:95:2D:F1:9B
X509v3 Authority Key Identifier:
keyid:F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/F59E9504F20611F0B4D6054A4A6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
202.44.145.0/24
Signature Algorithm: sha256WithRSAEncryption
54:45:94:51:69:da:d5:9b:8d:58:90:5a:72:4f:89:a1:85:7d:
30:ab:c8:86:de:dc:7e:ae:1f:46:e0:50:d0:28:67:2a:2f:45:
9d:dc:42:67:d1:9c:69:f3:de:c3:be:46:e4:20:28:ff:bf:37:
46:47:ee:97:2a:cb:7a:43:b8:d4:6a:ca:45:a9:67:33:f6:e1:
f9:d2:c6:14:2f:eb:0e:fe:4c:cb:9d:ad:ce:ec:96:bf:64:96:
1b:8a:8b:36:9f:df:0f:2d:0e:59:4f:19:1a:9a:96:49:d3:7f:
aa:c6:4b:7d:58:d3:52:0e:ba:8c:98:98:87:5b:b9:50:46:39:
d9:af:e9:91:da:07:6d:f0:64:95:fe:5d:ea:8d:21:91:ea:6f:
af:70:f9:8f:11:7e:95:7a:8c:0c:0e:40:e0:2a:03:27:65:b1:
6f:4e:57:60:f4:9b:3c:8f:5a:34:11:ce:f4:f1:04:dd:bb:03:
0d:b8:5e:1e:ba:aa:23:bf:ae:2e:32:b6:25:d8:78:11:03:94:
2e:fc:d1:55:c5:27:61:2a:7f:2c:cf:d1:cc:78:7e:2f:e4:c3:
a3:60:72:77:b7:04:2c:8d:78:dd:a1:34:e3:f0:c0:0c:59:c3:
06:e9:67:64:2f:b2:22:55:92:f6:63:ed:bb:fa:c9:78:7e:3c:
38:83:38:8d
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NTg1QjExMC8GA1UEBRMoRjVGNUI2MEY5MTVEQkQ3MjI0RkZDRTYwRjFGOUQwNUU4
MzcwMkVGMzAeFw0yNjAxMTUxMTQwMTVaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkMWU3LTYwNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFvweNDqtD9rYy4w/t5M5IwuVt+4Rpk2cCT7uNvkomOV2JFpLgzzmOoV70yn3o
RHKSq6MgK6Ezb26RU9+gqVS9WqDLJVLxJdgJ9pMjxB6+ljVD6cfJ3Av9nvqOPke9
FzohncES4tiMe6YtVm+lNNHn3uU7pQaByo6CQrwjDwAva4njnqJQCZaGSBbprxEQ
VeszemSYt5GNQ+4o71fqJAn51RUMe0i69llZFYfvgRmAiC4iIGZo5/RcNgDACGQE
mrq5QW4q4FZl9T8fmfZmvYGqY/I1e+hbbj0otj9q81VMDvkyYjaH7SF6trwBkiOq
8SYA6BMCnZ6sWOpX2ojtho2VAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU1Z+GhRfp
1g5+RndrBBQgZpUt8ZswHwYDVR0jBBgwFoAU9fW2D5FdvXIk/85g8fnQXoNwLvMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODVCL0I4NkNDRjU4RjIw
NTExRjA4MThCNzczMjRBNkY1NkJDLzlmVzJENUZkdlhJa184NWc4Zm5RWG9Od0x2
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOWZXMkQ1RmR2WElrXzg1ZzhmblFYb053THZNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTg1Qi9CODZDQ0Y1OEYyMDUxMUYwODE4Qjc3MzI0QTZGNTZCQy9GNTlFOTUwNEYy
MDYxMUYwQjRENjA1NEE0QTZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADKLJEwDQYJKoZIhvcNAQELBQADggEBAFRFlFFp2tWbjViQWnJPiaGF
fTCryIbe3H6uH0bgUNAoZyovRZ3cQmfRnGnz3sO+RuQgKP+/N0ZH7pcqy3pDuNRq
ykWpZzP24fnSxhQv6w7+TMudrc7slr9klhuKizaf3w8tDllPGRqalknTf6rGS31Y
01IOuoyYmIdbuVBGOdmv6ZHaB23wZJX+XeqNIZHqb69w+Y8RfpV6jAwOQOAqAydl
sW9OV2D0mzyPWjQRzvTxBN27Aw24Xh66qiO/ri4ytiXYeBEDlC780VXFJ2EqfyzP
0cx4fi/kw6Ngcne3BCyNeN2hNOPwwAxZwwbpZ2QvsiJVkvZj7bv6yXh+PDiDOI0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:56:41 2026 by rpki-client