
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/995A12922D7911F185835B6B93833773.roa
File: 995A12922D7911F185835B6B93833773.roa (raw, json)
Hash identifier: nFAvaEIqEGWN9S1AcH/WTj7qBHr+UjxO3qU88Qp1JCY=
Subject key identifier: B6:39:C9:3E:11:C3:9E:46:28:AC:38:F6:D9:D6:26:09:2F:E9:5C:55
Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3
Certificate serial: 7A
Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/995A12922D7911F185835B6B93833773.roa
Signing time: Wed 01 Apr 2026 03:19:31 +0000
ROA not before: Wed 01 Apr 2026 03:19:31 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138568
IP address blocks: 122.50.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl
rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3
Validity
Not Before: Apr 1 03:19:31 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69cc8ec3-a7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:cf:cf:22:ec:b8:a8:68:29:b2:2d:be:ff:
ec:7f:1a:a3:70:d9:e1:0a:60:a2:3f:12:e5:90:99:
08:10:20:09:36:c1:81:c2:3f:d2:16:ce:61:37:0a:
02:66:25:68:92:e1:86:33:b1:62:92:e6:ed:a6:c7:
9d:d7:64:a8:1b:ed:90:a1:25:dd:f6:36:bb:99:43:
3c:52:47:58:a7:7a:5b:cd:70:02:91:63:09:6e:3a:
08:c5:e4:33:6c:00:20:88:8a:da:29:d2:2a:d9:a7:
aa:2c:5f:15:6c:5d:91:69:c5:91:e8:89:26:5e:ee:
0f:e6:04:43:a5:a1:46:18:00:f7:5c:55:84:4e:db:
07:2e:be:e6:90:f5:70:41:76:2b:16:39:d3:97:68:
44:60:93:42:56:3d:28:34:cf:ce:bf:fd:23:07:f5:
32:65:92:9c:7a:7e:b9:6f:2b:a5:f8:45:16:d1:d0:
80:30:23:a2:02:01:f5:40:2e:76:71:a1:0c:0e:d6:
04:e2:ee:20:ee:fb:67:f8:5c:9e:ac:4a:16:16:d0:
a7:e1:b6:9a:2d:cd:07:5b:f2:12:73:34:5c:1c:48:
95:85:10:73:c9:5b:e8:aa:2e:6d:85:5b:30:b2:40:
40:7c:4e:e5:b6:77:c0:e1:92:c7:e5:05:65:62:c0:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:39:C9:3E:11:C3:9E:46:28:AC:38:F6:D9:D6:26:09:2F:E9:5C:55
X509v3 Authority Key Identifier:
keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/995A12922D7911F185835B6B93833773.roa
sbgp-ipAddrBlock: critical
IPv4:
122.50.10.0/23
Signature Algorithm: sha256WithRSAEncryption
57:bc:00:04:c1:d7:fc:0e:d7:d8:4a:18:1e:db:0f:8b:7d:57:
db:1c:fe:7c:be:a5:d7:f5:ae:bd:b3:51:9f:b3:32:fc:18:95:
cf:5a:29:60:0c:31:5a:96:cd:f8:48:3c:0a:4b:49:a4:ad:72:
eb:16:01:ba:d2:fc:78:e9:ab:b4:b2:4f:8f:99:52:54:b6:da:
bd:77:49:08:7d:8f:5f:ca:26:01:bb:f9:cf:14:a6:31:98:09:
d5:ea:c5:6c:f2:f9:dc:3b:7f:12:e7:13:8d:db:93:5b:73:73:
24:69:c9:9f:e4:15:21:7d:af:49:c5:24:c0:9b:a0:0e:f8:a9:
b4:fe:fd:a5:77:ae:4d:49:27:96:c0:81:5b:7f:5c:11:37:b7:
10:e7:55:c6:79:df:78:c2:50:0a:0c:ef:09:3d:c5:41:8b:04:
9d:52:11:6e:5e:75:7f:5f:ce:de:d6:e9:b0:20:ea:62:5d:de:
c8:e8:a9:9f:51:c8:57:53:01:6e:32:db:65:0c:d5:b5:ab:7c:
c2:87:af:69:8b:43:3a:8b:df:60:f1:3f:c2:ca:36:a0:38:ec:
60:95:bc:5d:6c:07:1c:b1:c0:03:e0:c0:a6:d0:7b:80:00:2c:
3f:4c:59:82:77:ed:54:68:bb:f5:9f:98:68:93:bf:45:48:c1:
fd:55:ce:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:59:43 2026 by rpki-client