
$ rpki-client -vvf rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/B1AC59CA17B911F18117E782383D8C67.roa
File: B1AC59CA17B911F18117E782383D8C67.roa (raw, json)
Hash identifier: BZKhZueNEHTxbu1OjRweJpYo4HVjxfaP3Tx4ectaUy8=
Subject key identifier: E0:B0:A8:4F:CF:E9:1F:96:2E:98:0D:60:C5:20:92:31:67:1B:3A:D2
Certificate issuer: /CN=A91878FF/serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Certificate serial: 02
Authority key identifier: 5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/B1AC59CA17B911F18117E782383D8C67.roa
Signing time: Wed 04 Mar 2026 11:02:54 +0000
ROA not before: Wed 04 Mar 2026 11:02:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135332
IP address blocks: 103.214.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl
rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 11:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878FF, serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Validity
Not Before: Mar 4 11:02:54 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a8115e-c61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:c2:13:31:5f:c6:cf:45:26:3f:4c:02:87:
d8:67:7b:79:27:e4:55:67:e4:fd:71:7e:06:85:83:
7c:d2:5f:0d:50:40:45:4e:88:47:de:ab:5e:f0:92:
2e:c4:72:e6:ed:5e:04:76:7d:c0:67:f8:c6:b9:9f:
3d:81:3d:54:2e:b3:90:56:0c:23:68:89:09:42:07:
41:97:b7:c4:35:67:f8:bf:28:f5:c6:32:5b:1e:8c:
5a:b3:58:0a:8a:a8:08:e7:d9:33:6e:d9:7d:78:af:
d2:5e:a5:65:b3:df:42:cf:a6:08:8b:7e:6c:87:1b:
ca:1a:7f:d1:81:a2:a0:92:7c:90:46:10:73:58:09:
13:e7:a7:ec:3e:b6:e1:7f:05:01:e2:25:6a:03:f6:
42:e7:30:f9:e9:e4:d7:4e:cd:47:33:51:ea:8b:93:
60:3d:5a:8a:23:71:f5:ed:75:c5:6b:2e:88:32:69:
df:43:ba:f0:7d:32:47:7e:d5:e7:3d:1e:02:38:4c:
5c:bf:a3:78:40:36:e1:ee:d9:52:34:4c:d6:d2:93:
9e:10:85:2d:bb:9b:5c:8e:76:fa:e8:f0:52:fe:91:
5c:30:8c:b3:e8:a8:d3:27:e4:ed:0f:37:6a:78:d1:
02:21:00:58:ec:c0:5e:79:1f:32:09:7d:b1:5c:e9:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B0:A8:4F:CF:E9:1F:96:2E:98:0D:60:C5:20:92:31:67:1B:3A:D2
X509v3 Authority Key Identifier:
keyid:5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/B1AC59CA17B911F18117E782383D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.98.0/24
Signature Algorithm: sha256WithRSAEncryption
38:47:34:41:31:3b:d7:66:bc:05:05:72:2e:c1:ec:f8:b4:79:
5e:48:7c:06:8c:fa:35:47:07:bb:ff:36:20:73:d6:2d:0b:2e:
79:ad:37:02:53:a9:5b:85:84:ed:d7:26:cb:d1:9c:99:7b:87:
8e:13:56:a0:91:09:20:ff:32:a5:50:22:fd:6d:34:30:00:de:
02:34:72:2a:e2:74:ec:e1:0f:4e:04:fd:10:3b:5f:c1:eb:8d:
f7:d6:96:7f:d0:a9:9a:fc:e7:c6:d4:6c:ce:22:75:04:27:15:
6d:63:d1:25:46:6d:38:43:c7:74:ef:34:1a:3d:65:32:03:1d:
fe:83:58:ed:98:85:b7:5b:f6:a9:32:0f:ce:53:57:77:55:31:
8e:f5:1a:71:89:f6:30:52:10:7b:98:6d:00:99:43:10:14:3e:
72:c4:ae:42:e7:97:39:7b:aa:c7:1d:96:d4:5b:84:10:b6:d0:
ea:cc:9c:0d:48:7b:d2:41:08:8f:e8:1c:ee:1e:4e:6f:52:a4:
fc:42:10:ba:e9:c4:8f:b6:fc:0b:12:27:be:75:20:cb:9a:3b:
b9:b5:66:e8:ba:f3:48:19:26:9e:00:97:91:04:72:1f:75:dd:
82:c0:68:30:8e:54:6b:f8:f7:8a:13:0e:b3:61:7c:dd:04:a9:
b0:da:70:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 17:45:58 2026 by rpki-client