
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/8BB3088E982F11ED9D647578C4F9AE02.roa
File: 8BB3088E982F11ED9D647578C4F9AE02.roa (raw, json)
Hash identifier: LzXgskniQhad+dad7IeMfaGj3PNcVRfdS6IKvp/jtks=
Subject key identifier: E2:C0:BF:1E:B3:6D:56:14:1A:BC:93:79:A4:17:D1:7A:43:04:99:06
Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial: 08D2
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/8BB3088E982F11ED9D647578C4F9AE02.roa
Signing time: Thu 14 May 2026 21:25:18 +0000
ROA not before: Thu 14 May 2026 21:25:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59200
IP address blocks: 103.149.58.0/24 maxlen: 24
103.149.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258 (0x8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Validity
Not Before: May 14 21:25:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a063dbe-53fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:97:2a:c8:70:d9:24:4a:bb:e7:d4:bb:44:
db:8d:24:2a:71:5f:bd:28:1e:b3:e7:19:18:57:21:
72:9c:e1:15:e1:54:a7:d5:cf:1a:70:fb:33:66:b8:
f8:9d:85:68:b5:15:8f:4e:38:dd:0c:8d:81:15:50:
9c:14:13:d1:44:70:fd:0c:90:c1:f8:c7:43:80:29:
f3:b7:d1:ee:ee:89:c6:bf:9c:ed:8d:8c:77:bf:55:
94:20:3b:91:71:f5:be:e0:70:0a:fa:8e:3a:b0:08:
16:fc:38:e8:82:09:e0:eb:01:af:56:5b:b7:57:72:
5f:64:e9:6a:18:63:e1:9f:cd:38:5c:19:23:00:27:
38:21:6e:b3:87:bf:7a:fe:3f:6e:12:a5:56:9c:ba:
b7:ab:c4:cc:63:44:95:7a:15:e9:85:c3:bb:47:35:
23:8c:3b:31:7f:bb:51:a7:86:d5:47:20:1a:29:e9:
3e:f1:26:b5:4e:8c:97:20:cb:89:46:a4:d9:c4:3c:
55:38:8f:3a:b4:25:e1:76:73:6e:c1:4c:e3:1d:ba:
29:db:f7:f6:d6:e7:cf:dc:67:bf:89:19:95:cd:f5:
a4:5c:d1:45:95:36:6c:b9:76:84:14:c1:08:ed:a3:
a1:6f:36:d6:6a:19:76:9e:44:b6:23:b9:49:c0:52:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C0:BF:1E:B3:6D:56:14:1A:BC:93:79:A4:17:D1:7A:43:04:99:06
X509v3 Authority Key Identifier:
keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/8BB3088E982F11ED9D647578C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.58.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:4f:13:4c:51:ad:c5:17:40:bb:fe:ca:49:31:74:6c:d1:19:
e2:39:b9:74:31:b2:4a:1e:54:29:7f:a6:24:0d:ef:40:fc:a6:
a8:a4:be:05:fc:fa:9b:5a:86:d4:0e:42:09:ad:ce:17:25:f3:
28:94:3d:58:6f:66:c2:0d:e3:eb:1a:c4:67:7c:02:63:95:94:
75:39:55:4e:16:02:b7:83:58:f1:19:58:4e:bc:4f:f8:36:2c:
29:e7:74:b3:e5:78:27:fe:bc:2b:a4:78:84:85:62:75:fe:b0:
51:d3:6d:0b:c8:2d:02:94:a1:3e:1a:18:87:f6:df:8c:10:57:
fe:78:de:48:bd:06:54:d6:7f:22:59:de:a4:6c:f0:34:ae:40:
66:53:5d:ba:01:af:0e:e6:67:75:b2:19:4b:a4:96:8d:bf:67:
c9:b1:fd:ed:13:6d:e7:eb:04:40:d5:ab:43:6b:98:08:60:19:
0e:60:7f:80:a9:45:8f:71:58:fe:2f:aa:0f:f4:a1:18:f1:8d:
29:7e:6b:f0:64:60:92:a2:62:52:e5:c8:08:a3:6a:68:bc:c8:
99:93:60:da:21:f6:98:fa:7f:4f:5d:e4:95:f8:dd:51:6a:22:
a7:f4:91:87:00:74:47:ef:52:0f:df:d1:85:26:a6:92:a1:25:
55:57:e5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:29:30 2026 by rpki-client