
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/F95379BE124411EB9E551E38C4F9AE02.roa
File: F95379BE124411EB9E551E38C4F9AE02.roa (raw, json)
Hash identifier: o1XlLiC9ZxnJj/4+gcfGNEin223Ve+g1txQSl6xN5kE=
Subject key identifier: 65:18:71:5A:CE:30:3C:3B:7D:E4:0E:19:4D:1D:B2:31:97:48:59:EB
Certificate issuer: /CN=A91ADA19/serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
Certificate serial: 08BA
Authority key identifier: E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/F95379BE124411EB9E551E38C4F9AE02.roa
Signing time: Sun 24 May 2026 21:29:06 +0000
ROA not before: Sun 24 May 2026 21:29:06 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 140103
IP address blocks: 103.148.148.0/24 maxlen: 24
103.148.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl
rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2234 (0x8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADA19, serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
Validity
Not Before: May 24 21:29:06 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a136da1-fbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:06:b4:8a:c2:90:b6:13:24:10:ea:b2:31:
dc:85:4f:22:44:1e:3a:c5:0b:a7:2f:84:d9:65:f3:
dc:0b:8e:46:dc:37:8a:a5:06:10:ad:fa:bb:15:40:
37:f2:06:f6:99:28:fc:c7:e6:24:04:b5:c2:60:71:
f4:f1:97:cf:06:ee:46:6f:2e:b7:f7:af:ff:d3:aa:
17:de:42:04:0a:c1:d0:1f:9e:31:68:aa:ec:df:7a:
0d:b6:ad:94:69:21:4b:ba:ea:86:f9:f6:8a:8b:c9:
d8:88:8a:7d:77:c3:80:89:d1:18:a1:e2:60:ca:4d:
0d:a9:0d:08:81:f0:92:cd:b3:cc:f1:87:31:c1:ce:
13:65:95:1d:f0:60:ab:6f:f8:30:be:52:71:ef:51:
a8:94:25:dd:b1:cd:33:ab:5e:e5:9c:de:48:1f:db:
f0:e7:0d:ef:40:28:44:4c:4d:44:6e:6e:e5:6c:36:
da:ff:2e:21:6f:aa:ac:a9:5c:b9:c9:7e:e7:78:9e:
b2:f2:d8:5a:1e:6b:9a:c5:ce:53:80:1f:d1:c3:f7:
2d:f0:03:cb:41:7a:b7:b0:2b:c2:c9:12:69:0a:0c:
00:5b:27:50:3c:b6:09:e8:b3:94:57:12:2f:44:82:
c7:b9:80:a0:5b:7d:80:33:20:64:17:e4:62:fe:bb:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:18:71:5A:CE:30:3C:3B:7D:E4:0E:19:4D:1D:B2:31:97:48:59:EB
X509v3 Authority Key Identifier:
keyid:E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/F95379BE124411EB9E551E38C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.148.0/23
Signature Algorithm: sha256WithRSAEncryption
24:82:d2:cd:22:a6:fd:60:c3:ca:69:47:99:a0:e5:d6:25:6b:
d0:09:a5:27:bf:e7:79:50:5f:81:b9:26:9d:82:de:70:a8:f8:
a9:5b:46:bd:30:4f:36:b3:ac:40:b4:ff:e9:ef:d3:dd:54:8b:
5a:b9:e8:43:17:7b:88:ca:cb:f5:a2:c3:d2:74:05:e0:57:05:
e7:02:d8:aa:88:81:1c:ad:cb:8f:22:09:93:46:d3:38:87:07:
1a:b6:f8:74:54:c1:d8:11:be:09:dd:8d:28:73:6d:bd:97:51:
ec:67:d3:17:8f:68:81:88:6b:63:02:5c:4d:a6:33:63:65:4d:
be:eb:e5:56:7d:45:a2:09:c2:c0:37:da:95:3b:ba:c9:ad:e4:
ec:16:2a:b7:a6:04:ce:58:96:e5:9f:f3:ea:74:15:d7:98:ff:
50:59:d1:1a:e4:5c:27:86:0e:c7:b1:b9:59:d2:71:71:93:18:
e1:0b:45:e4:b1:d8:60:c2:0a:28:ee:2b:a6:f6:ca:07:dd:a2:
d1:87:58:fd:b3:2f:21:69:81:fd:e7:8c:48:19:ae:40:5e:20:
15:84:87:19:d4:6c:c3:14:69:23:de:c5:23:3d:06:48:6f:26:
a0:41:fd:9e:24:cb:62:8f:c5:20:4c:92:67:fa:52:df:91:6c:
d8:8c:5e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:33:41 2026 by rpki-client