
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/F5F28CC6739E11F1B96BB9EF75A30FBC.roa
File: F5F28CC6739E11F1B96BB9EF75A30FBC.roa (raw, json)
Hash identifier: /KxNlXfeXQcDBu4my/p7c/P1DQJwjmP4hrFW2B3nPNc=
Subject key identifier: 99:02:05:36:FD:D2:2D:AE:C9:A8:63:B9:8E:E3:D5:7E:0F:68:4B:83
Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
Certificate serial: 01A2
Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/F5F28CC6739E11F1B96BB9EF75A30FBC.roa
Signing time: Mon 29 Jun 2026 09:43:20 +0000
ROA not before: Mon 29 Jun 2026 09:43:20 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 132384
IP address blocks: 167.219.49.0/24 maxlen: 24
167.219.50.0/23 maxlen: 24
167.219.52.0/23 maxlen: 24
167.219.54.0/24 maxlen: 24
167.219.55.0/24 maxlen: 24
167.219.56.0/23 maxlen: 24
167.219.58.0/23 maxlen: 24
167.219.60.0/23 maxlen: 24
167.219.62.0/23 maxlen: 24
167.219.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl
rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 04:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
Validity
Not Before: Jun 29 09:43:20 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6a423e37-206f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b2:d3:21:fc:de:c5:de:66:18:6d:28:8d:1c:
5c:8d:c7:bd:20:46:57:3e:63:b1:61:b6:7e:c0:db:
27:0b:d7:b3:c4:23:51:ea:3e:0b:28:79:cf:73:77:
e8:6d:fa:eb:21:c6:70:c8:db:c3:e1:b1:00:22:4f:
37:ed:b2:3e:58:ed:18:81:de:fc:95:25:57:ab:94:
de:33:28:ba:42:e6:cf:bb:13:83:c0:39:e1:d3:5b:
89:02:d7:4a:d5:73:75:0f:c9:1e:73:0d:41:ec:cb:
bc:62:ac:d0:41:de:5e:d5:39:3a:aa:0a:34:6c:c3:
4d:bd:06:a1:bb:e8:d6:4f:61:9b:a2:4f:c1:2c:cf:
a2:87:eb:c2:a7:cb:5d:c1:96:f5:71:9c:e9:45:80:
4f:1d:86:6b:26:d0:da:00:43:12:e4:3b:45:8a:e2:
ff:9d:42:10:ca:56:d2:f8:c1:08:11:01:3d:15:d5:
dc:04:ed:77:2c:31:6b:67:ff:58:71:df:42:ee:6f:
b0:7c:8d:1f:bb:e1:01:a3:0f:96:12:52:d6:ab:9e:
89:ac:52:52:3d:e2:9d:31:05:db:47:ea:f1:2c:e8:
0e:01:6f:75:8a:60:d1:a0:c3:92:30:99:81:a6:0a:
7b:da:18:ad:54:82:f0:79:6d:04:b5:53:f8:be:1b:
6d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:02:05:36:FD:D2:2D:AE:C9:A8:63:B9:8E:E3:D5:7E:0F:68:4B:83
X509v3 Authority Key Identifier:
keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/F5F28CC6739E11F1B96BB9EF75A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
167.219.49.0-167.219.63.255
167.219.132.0/23
Signature Algorithm: sha256WithRSAEncryption
63:54:59:97:3d:ed:d1:5f:ee:62:67:76:9b:54:14:8c:4e:8f:
96:1b:a9:d9:df:15:73:a3:d1:d5:80:5a:9d:6f:59:17:94:26:
8e:a1:f0:ad:ed:36:9f:74:f7:b2:d7:2c:c1:f7:8c:42:88:ef:
82:12:f8:3b:50:61:1d:34:d0:c5:22:e8:32:78:d8:7e:11:bf:
f1:b1:b7:00:68:56:c7:b5:1b:bc:50:07:8c:f9:9d:85:00:ca:
e5:45:72:f9:6e:1b:80:fd:fd:3d:2a:4f:9d:bd:ce:91:b3:ef:
24:e9:5f:37:0f:26:1a:22:05:d8:ca:3d:3d:ed:d7:12:47:7d:
33:5b:94:dc:b1:bb:18:51:c2:92:67:7c:b7:04:7a:2b:e5:23:
eb:11:30:0a:0e:11:37:a6:c3:6d:db:66:13:2b:31:17:c6:d6:
94:a0:b6:73:60:b9:fb:75:df:0a:a9:35:c0:af:45:42:15:dd:
a2:c3:b9:c7:f8:8d:39:80:ed:e7:6a:b8:cf:87:29:d6:1f:6b:
7f:84:50:9e:27:d3:8d:12:8f:e1:38:bb:6a:38:12:c1:1a:7e:
ec:3e:b3:96:85:4d:28:b8:59:02:e9:5b:c4:21:e0:8c:76:ae:
ff:ba:0c:7e:74:21:af:61:8d:b6:87:a5:6a:1b:2c:d7:6b:a8:
25:12:9c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:57 2026 by rpki-client