
$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/26A143C291EB11EF8A024083C4F9AE02.roa
File: 26A143C291EB11EF8A024083C4F9AE02.roa (raw, json)
Hash identifier: qOuOZrrZglkih59X/Pjz7efqStftFhfdFn50wlzJXt4=
Subject key identifier: 53:A8:E6:B5:06:47:73:A4:02:44:EA:4B:57:BA:D4:5F:CC:C4:A8:26
Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial: 37ED
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/26A143C291EB11EF8A024083C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:18:01 +0000
ROA not before: Tue 30 Dec 2025 15:10:40 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 198949
IP address blocks: 125.19.17.0/24 maxlen: 24
125.21.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 14:24:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14317 (0x37ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Validity
Not Before: Dec 30 15:10:40 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a490e9-4aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:9c:13:6f:d0:c2:8d:2c:a1:0b:4b:6f:15:
3f:b7:d1:66:d7:ab:de:f3:0d:e9:d5:00:d4:c1:4c:
a6:4a:fe:94:bb:93:33:73:62:f5:e3:46:a8:4a:db:
d0:da:c2:3c:f8:b5:35:c1:ce:d3:e2:80:08:f7:f7:
e7:97:25:25:9e:30:6e:db:f7:d3:c7:ea:13:39:ad:
0d:f3:6b:47:96:f8:a1:cc:e8:ef:87:6a:8e:44:c5:
4a:31:4a:af:89:79:c1:5f:b4:a4:cf:b8:4e:65:1b:
16:28:66:d9:04:cb:59:f0:18:de:28:a0:41:91:55:
88:bc:0c:ad:d5:c5:14:0d:7d:dd:b6:34:5a:ab:68:
74:d6:2c:c4:c3:cd:a3:c3:0b:e2:c9:ad:7f:00:ec:
c7:17:8b:b2:86:4e:32:15:60:d5:80:f8:6b:3b:52:
e7:31:4b:f9:dc:61:12:dd:e9:a0:ef:1a:2a:4c:83:
4e:a5:2f:4e:6f:0e:1a:d4:b3:4b:5a:9a:0c:1f:e4:
73:32:94:4b:2d:90:95:a0:72:4b:4c:08:6f:ea:2c:
a9:cc:0b:f1:0e:df:a0:c1:a5:8d:e9:ac:71:c6:38:
98:36:43:b1:65:69:49:fa:e9:ec:48:c3:db:f6:a5:
55:a6:4f:6b:17:77:3d:57:79:4b:4a:e9:bf:75:0a:
5a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A8:E6:B5:06:47:73:A4:02:44:EA:4B:57:BA:D4:5F:CC:C4:A8:26
X509v3 Authority Key Identifier:
keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/26A143C291EB11EF8A024083C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
125.19.17.0/24
125.21.240.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:88:31:64:f3:94:c2:76:82:3c:fd:57:71:6e:50:95:31:bb:
23:13:aa:33:f3:8f:ec:41:e5:d5:d4:43:06:ca:59:84:06:c6:
01:a8:ba:81:41:ed:3d:23:52:7c:d6:8e:2f:7b:09:51:9f:22:
47:01:7f:cf:40:d7:e8:05:22:e6:aa:e8:58:6b:d1:3e:15:70:
42:ce:78:d2:c0:22:1f:5a:14:50:8c:5b:bd:29:96:7a:91:b7:
aa:7a:21:43:e9:b9:1b:b0:0f:f9:55:1f:83:45:a0:e3:6b:a5:
37:6b:9c:8c:df:bf:aa:08:c0:54:89:46:70:ae:24:01:61:90:
8b:6e:2f:e4:3a:e8:7b:0c:d5:1a:bc:00:82:1a:b2:24:5c:7c:
1d:8b:0e:81:d3:2b:55:c6:71:6d:7e:f7:47:99:7b:67:68:12:
5f:8f:a2:8c:d4:15:62:28:4d:27:a0:61:34:05:e7:71:f8:a0:
9a:39:1e:3c:b8:22:cb:c2:43:b3:44:96:ee:25:e0:8e:99:81:
ac:16:05:8f:88:bd:3a:6d:78:15:64:df:1a:3d:ef:9f:56:8a:
45:31:5c:7f:12:1b:24:b7:84:72:c8:f4:ef:6e:b1:b9:99:71:
dd:75:c0:57:eb:9a:d9:ea:6a:50:45:f7:a3:e5:e8:0c:04:b6:
a6:f4:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 23:21:42 2026 by rpki-client