
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/96F24818744F11ECBFE4A57DC4F9AE02.roa
File: 96F24818744F11ECBFE4A57DC4F9AE02.roa (raw, json)
Hash identifier: niq2x+TSIaVr2M9Yq4uJinm2FfqqQeskl0ZKo8P7pbQ=
Subject key identifier: B3:22:78:B3:F3:F0:12:5C:88:3B:FE:7B:BC:C5:88:64:B1:15:72:0C
Certificate issuer: /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Certificate serial: 04A5
Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/96F24818744F11ECBFE4A57DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:38:43 +0000
ROA not before: Sat 31 Jan 2026 00:20:42 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 1221
IP address blocks: 203.19.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1189 (0x4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Validity
Not Before: Jan 31 00:20:42 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46b93-e595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:66:f9:ba:64:4f:30:f3:db:fe:b6:93:06:
53:e0:e4:43:ab:e1:bc:5f:20:bc:06:5c:71:2a:68:
19:2c:99:7b:dc:b3:03:76:89:2f:28:a5:ca:af:1d:
ba:56:12:8a:e4:54:0f:da:2b:78:8d:00:0a:c3:54:
b2:cd:c4:c0:24:9c:d4:52:76:a6:32:f0:36:32:02:
27:f0:6e:84:32:51:55:6d:63:9b:d0:5c:9d:e4:6c:
39:cf:eb:a8:1b:3f:c3:64:6d:06:bc:91:36:bd:0f:
84:29:76:ca:bb:79:53:95:79:54:89:41:db:38:a8:
d9:53:cc:42:40:54:5f:e6:ae:04:84:4c:6a:2a:cb:
47:0d:7a:95:cf:1f:a2:7d:a5:86:ab:2c:3d:9e:fa:
c1:e8:6f:d6:b2:b2:99:fe:4a:1e:52:b7:7c:f7:4a:
79:81:83:63:83:69:db:1b:1f:7a:6f:3a:15:6f:0e:
a1:ce:c7:f9:f1:2f:64:a2:39:60:9c:3c:3a:ff:96:
ae:33:e4:0f:78:cf:e1:a5:61:b8:79:1d:b8:6f:f6:
29:51:7a:fb:c0:37:a6:33:12:98:86:7d:4f:63:22:
11:71:59:4f:cf:b0:ef:84:3e:8a:d0:54:69:c1:ea:
ba:2c:04:76:c2:3d:d6:df:53:b5:0f:c7:61:0c:21:
f6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:22:78:B3:F3:F0:12:5C:88:3B:FE:7B:BC:C5:88:64:B1:15:72:0C
X509v3 Authority Key Identifier:
keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/96F24818744F11ECBFE4A57DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.19.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:75:cd:c5:51:fa:16:46:62:52:87:26:d8:7f:5f:56:6a:59:
57:62:6b:b7:33:75:1a:dd:eb:bd:b8:e3:84:30:12:68:68:f6:
ab:66:8f:55:d3:db:b9:83:7b:67:98:48:cd:5a:4c:90:4f:0f:
6a:41:a6:8e:43:81:38:36:c3:78:dd:71:95:ee:f7:b9:71:c6:
38:f7:fc:da:7a:8f:17:c4:8d:fb:aa:94:10:f9:fc:96:91:4a:
80:55:6c:05:5c:c7:8a:71:b5:77:25:94:ce:71:1b:3b:5e:f2:
7d:6d:2a:e3:24:b3:17:07:92:12:b7:81:17:95:fd:d0:31:9b:
3e:58:53:9b:2d:4d:4f:8e:40:89:55:58:42:95:99:45:f2:32:
f9:73:37:a8:7d:ea:1a:11:c7:0b:07:5b:f7:a0:6a:d2:a5:49:
c7:e8:2f:b2:34:cb:f1:d6:cb:29:57:42:03:a4:d4:82:5a:d5:
c2:71:8a:4b:5e:a8:e9:82:46:c2:3c:d9:ad:9f:ea:7c:c2:76:
97:e8:90:e5:62:67:1f:ce:c8:ce:00:60:02:26:6a:ad:b7:31:
0e:22:b2:4d:74:30:93:d8:8a:e8:c0:0e:77:e7:11:a1:7b:85:
e6:71:ca:21:44:90:ca:eb:63:7e:80:3c:b4:8e:b0:04:b8:66:
41:98:e3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:51 2026 by rpki-client