
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/F5D2F46E9B8611F1B4386D6F4511F970.roa
File: F5D2F46E9B8611F1B4386D6F4511F970.roa (raw, json)
Hash identifier: 0au6Si15nGK7eMBlSyZBhtsSwPZhCvIKY7Aeoqgl6Xc=
Subject key identifier: 3B:BA:D5:31:35:1B:25:CA:76:22:C5:79:1C:76:9D:EE:4B:F2:3D:E2
Certificate issuer: /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial: 074D
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/F5D2F46E9B8611F1B4386D6F4511F970.roa
Signing time: Wed 19 Aug 2026 04:32:18 +0000
ROA not before: Wed 19 Aug 2026 04:32:18 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 16509
IP address blocks: 203.185.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1869 (0x74d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Validity
Not Before: Aug 19 04:32:18 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a8531d2-00b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:1f:8a:52:5e:73:de:b8:bc:e7:a0:59:21:
57:a1:a7:e0:b1:f4:54:d9:c6:2d:53:d6:9a:05:bf:
f6:bd:c1:0d:59:de:80:86:c6:35:bd:0d:f4:4b:15:
39:74:66:3a:74:b4:8d:07:9e:dc:f0:74:d0:97:47:
4a:ba:e4:91:65:5a:54:5d:06:0f:5d:bb:f8:2f:8d:
fb:37:58:80:35:fb:89:b4:b7:2e:86:54:d2:a0:cd:
59:6f:3e:20:ee:30:29:ab:13:89:c6:1d:2c:a5:67:
94:06:05:0a:bd:25:66:5f:80:f9:87:02:5f:e7:d3:
6b:8f:f2:3d:fc:51:8c:dc:48:ad:56:e0:a0:e8:40:
fc:58:fb:36:7a:7b:4a:27:23:e0:9b:77:4f:41:88:
87:c9:1c:ee:7c:a2:5e:21:0b:82:57:5a:e8:3a:1a:
eb:14:6f:05:fe:82:70:0d:f3:5f:46:82:b5:14:9c:
be:ef:15:0f:be:6f:16:b3:31:30:2b:85:3b:81:62:
4d:36:af:3e:b9:07:43:72:14:7c:37:0c:6f:e4:0d:
d6:cd:6b:82:ba:ab:19:c5:52:87:87:d5:3a:9d:2e:
d9:1e:93:62:24:3a:05:61:81:b6:7b:c8:b3:8a:eb:
04:ba:ef:16:48:a0:44:91:10:92:62:fb:d2:5a:8c:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BA:D5:31:35:1B:25:CA:76:22:C5:79:1C:76:9D:EE:4B:F2:3D:E2
X509v3 Authority Key Identifier:
keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/F5D2F46E9B8611F1B4386D6F4511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
203.185.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:7c:7a:f4:09:e4:e2:27:0d:39:0c:61:4b:e6:31:da:e1:26:
7a:86:51:84:2a:a5:8c:d1:88:6d:75:f4:22:00:37:df:9a:24:
1b:27:5c:b5:8e:9f:49:3d:d9:28:28:6e:b9:73:00:b4:02:14:
9b:eb:8c:a3:41:dc:ce:df:4c:ab:87:bb:89:02:27:c9:51:91:
5a:4e:1b:83:8a:86:66:ef:e2:28:fa:15:90:5a:8a:5a:9f:16:
cb:16:53:41:28:6b:39:23:51:60:5c:0f:b0:06:d2:e2:75:54:
20:01:f3:3a:f1:1e:ca:0e:76:59:a4:65:8a:d9:b7:64:e5:82:
82:8b:61:ea:8e:fe:3c:4a:84:cb:7a:d4:89:b8:7f:fa:7a:36:
3a:b4:2a:a5:bd:0b:d3:2c:a3:b5:15:9f:9e:93:8b:8f:98:43:
44:9f:58:48:0e:51:24:f3:1d:71:75:33:fb:89:c1:66:96:1c:
8a:0d:85:a7:71:4f:6f:6a:db:51:c0:72:54:82:b4:be:24:8b:
65:07:b5:60:9a:c8:b4:a2:35:6b:8c:3a:c1:08:d5:98:cf:fe:
18:c1:db:d3:e2:56:63:9d:cb:02:98:73:b5:c6:86:74:01:80:
66:1c:34:f0:75:6f:31:ff:64:79:58:c9:2d:f3:c5:67:aa:6d:
9e:61:7f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:24:29 2026 by rpki-client