
$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/55F662DC09B111EAB045B31EC4F9AE02.roa
File: 55F662DC09B111EAB045B31EC4F9AE02.roa (raw, json)
Hash identifier: fkSBpfe43f7xaBHlXat2laGJULhbexdk1KBu8JtEuJ4=
Subject key identifier: 89:D9:B0:C1:9D:11:D9:5F:E6:FB:B3:8A:82:63:81:E2:35:98:35:24
Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial: 10A6
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/55F662DC09B111EAB045B31EC4F9AE02.roa
Signing time: Fri 06 Mar 2026 18:24:37 +0000
ROA not before: Fri 06 Mar 2026 18:24:37 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 397229
IP address blocks: 120.29.252.0/24 maxlen: 24
120.29.253.0/24 maxlen: 24
120.29.254.0/24 maxlen: 24
203.17.72.0/24 maxlen: 24
2001:dcd:1::/48 maxlen: 48
2001:dcd:2::/48 maxlen: 48
2001:dcd:3::/48 maxlen: 48
2001:dcd:4::/48 maxlen: 48
2001:dcd:5::/48 maxlen: 48
2001:dcd:6::/48 maxlen: 48
2001:dcd:7::/48 maxlen: 48
2001:dcd:dd05::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 18:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4262 (0x10a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Validity
Not Before: Mar 6 18:24:37 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69ab1be5-559c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:5f:21:b4:0a:5e:93:06:51:a6:40:0e:5b:
83:f5:da:67:d7:84:42:a4:c4:be:d1:fc:9a:85:bd:
8f:e5:8e:5b:f8:d3:e7:a7:ea:26:be:e2:8c:36:f8:
ff:6f:3e:e9:31:b8:6c:8e:4b:3e:c2:2b:36:1f:4b:
74:bf:bb:df:c0:33:f3:ba:f9:ec:71:48:69:71:82:
fe:79:a1:f9:8b:c1:89:da:6e:53:1c:32:37:bd:42:
96:cb:a4:e8:ff:8f:2e:9a:da:8d:f2:f5:ac:a1:cc:
35:6f:05:2c:b7:c6:15:90:d5:e4:e4:ee:8f:83:6e:
0d:83:2b:16:c9:29:0a:ea:ca:51:37:a6:44:84:33:
32:61:2c:09:08:6c:5b:f9:b7:fc:9a:63:3c:58:a2:
c1:bb:9e:05:ec:b0:13:cb:fa:18:63:08:13:eb:88:
4e:7f:fc:2b:9c:87:51:7c:2f:e8:38:da:86:b5:01:
6e:0b:a8:6f:1c:8b:03:2e:4e:0a:fc:95:9e:a5:61:
b7:c0:aa:e6:df:ba:7f:7f:a8:ab:42:76:f8:91:a3:
9b:a1:00:56:21:fc:c7:e5:c8:95:ef:db:25:24:6d:
7d:d6:9a:48:6b:95:90:9e:6f:68:93:a3:c5:22:0e:
c6:46:dd:86:d9:5e:ac:48:a4:3f:44:0b:97:03:d7:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D9:B0:C1:9D:11:D9:5F:E6:FB:B3:8A:82:63:81:E2:35:98:35:24
X509v3 Authority Key Identifier:
keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/55F662DC09B111EAB045B31EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
120.29.252.0-120.29.254.255
203.17.72.0/24
IPv6:
2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff
2001:dcd:dd05::/48
Signature Algorithm: sha256WithRSAEncryption
65:a1:38:e3:f3:fe:13:88:93:33:35:95:b8:22:2f:87:59:f7:
53:16:1a:e2:f0:96:54:1c:88:33:c9:63:3e:b2:c5:7a:39:2e:
ba:9f:ed:a1:bf:5f:d9:0d:d7:7f:83:1c:d7:aa:7d:20:5f:53:
69:07:b9:8d:2d:d2:b4:fe:54:22:d6:19:cb:88:60:e3:bf:39:
1e:46:86:71:ec:64:70:d7:93:19:3a:e6:d7:62:62:2a:ee:a4:
1e:d3:96:dc:79:ec:1f:86:43:6f:fd:a9:a8:1e:60:6d:59:16:
f1:71:3d:2a:ac:87:2c:11:e0:06:74:b2:43:a8:52:d4:2d:65:
ee:7e:1b:c9:f8:13:6e:77:25:78:80:89:70:5c:73:9c:32:66:
16:49:2c:6f:c3:9d:27:fa:2b:fc:29:68:19:35:91:58:27:13:
6e:3b:2c:84:0a:74:ca:bb:1e:17:90:d4:46:c4:92:aa:d1:89:
08:88:bf:fe:45:b9:c3:5b:ad:37:fb:c9:fe:3a:c9:bb:34:3a:
17:a6:85:b9:85:f9:76:72:95:17:25:dd:a3:12:08:89:e6:d4:
de:aa:1c:8b:36:6f:ab:c0:1c:ea:18:77:08:1f:77:7b:6a:f6:
c3:2f:ac:17:a7:42:8d:5a:a1:31:f3:f9:52:aa:5d:52:ff:f8:
41:5c:a1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:00:59 2026 by rpki-client