
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/B512A570109211ECA693D74EC4F9AE02.roa
File: B512A570109211ECA693D74EC4F9AE02.roa (raw, json)
Hash identifier: L7d1U3gGL3grFk1wnPeyJKdZ3FejFM4vvmLKY3IRi5A=
Subject key identifier: DC:5D:B4:47:AD:1B:18:12:19:5C:F0:F6:25:64:3B:30:2F:06:FB:D2
Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808
Certificate serial: 0884
Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/B512A570109211ECA693D74EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:28:53 +0000
ROA not before: Tue 02 Sep 2025 21:42:11 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 15347
IP address blocks: 221.132.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl
rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 20:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180 (0x884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808
Validity
Not Before: Sep 2 21:42:11 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a47755-6a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:86:f6:ce:82:03:ab:8f:99:7e:7c:41:79:
6d:5b:9c:8c:5f:c7:87:24:ca:cd:52:bd:ae:67:9b:
cb:f4:84:58:b0:7a:e6:43:16:df:1f:8a:2d:0a:69:
38:0b:0d:a6:5b:55:b4:44:c8:47:1a:de:9b:92:47:
fa:47:0d:f0:01:34:0b:c4:a3:62:6f:f9:b6:a0:c8:
80:f8:c6:ac:57:b2:fc:f2:3f:ea:b6:e6:93:10:97:
2d:ab:53:c7:f4:15:f1:b2:9d:42:0a:4c:97:03:6e:
1b:4c:ed:21:2f:12:b4:9f:d4:c7:12:ec:95:71:9d:
95:8b:64:90:6e:aa:45:1d:a1:2c:56:97:74:97:e1:
5e:ec:f7:2f:4c:51:a1:82:1c:e2:3c:63:e4:d8:01:
4b:67:13:bb:ba:ae:41:be:cd:7d:d0:25:59:c8:f8:
66:77:7a:fb:31:1c:e7:c9:fd:e4:b7:44:f1:5f:39:
2c:8e:de:9e:f3:5e:98:a6:2f:37:2c:ec:58:c7:c4:
09:ea:d6:76:ef:13:35:c8:0d:e0:cb:50:e0:72:42:
b6:2e:d6:e3:19:25:68:86:be:9c:f6:d6:15:40:c4:
fd:5f:bb:a4:a3:31:9e:ba:e1:22:50:3a:34:fc:86:
f5:2b:fb:f5:1d:45:cf:03:93:7d:40:db:cd:31:6d:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5D:B4:47:AD:1B:18:12:19:5C:F0:F6:25:64:3B:30:2F:06:FB:D2
X509v3 Authority Key Identifier:
keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/B512A570109211ECA693D74EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
221.132.119.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c4:73:a9:5f:fd:0f:3c:96:3c:cc:72:25:60:a9:af:50:16:
fc:00:b5:d1:ce:ad:03:10:24:4e:6e:71:06:5d:83:cc:5f:b9:
a2:f9:8f:00:ca:c9:c0:0e:6a:dd:eb:3f:ba:55:24:9a:e7:c1:
5c:a8:93:dd:c7:92:da:c8:b0:d2:37:92:13:4b:94:16:ce:fb:
56:e5:73:45:cb:32:2b:99:9a:81:22:96:81:21:de:b3:99:7a:
a1:ad:81:2e:80:2d:b5:dc:cc:63:27:df:ff:90:4b:96:80:1a:
d2:0f:07:b3:3a:e0:15:50:1c:0c:6f:11:e0:fb:f8:a2:98:b2:
25:69:2d:1f:14:a0:e9:91:ae:fd:18:15:03:89:3f:56:df:2e:
66:13:5e:5d:75:7f:77:46:4e:a3:2e:2c:40:57:70:43:07:b7:
8f:3b:ae:27:12:e3:91:e4:c4:fe:26:37:28:44:df:94:dd:2c:
ee:57:d7:62:f2:25:04:6f:6f:7c:90:60:86:99:53:ff:97:a8:
81:4b:ba:89:4a:2c:e6:c2:dc:1b:46:65:9e:c3:45:e4:d6:25:
e1:d9:c1:ba:18:a0:b1:3e:fb:20:97:e1:e0:d6:03:3c:32:ce:
bc:dd:66:a2:f3:c0:2a:6c:64:04:4b:51:f9:a7:40:31:82:3d:
03:98:0d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 06:45:13 2026 by rpki-client