
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/1D79B286505111F1A6C3F8BB94833773.roa
File: 1D79B286505111F1A6C3F8BB94833773.roa (raw, json)
Hash identifier: 3xKQOlORUB1srg8b9eZ+3Jlw2fisqPQnTL+nLDSZlQI=
Subject key identifier: D9:DE:24:49:29:71:A3:D1:3C:AB:B7:45:86:7D:6F:EA:FA:E3:3D:98
Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial: 0123
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/1D79B286505111F1A6C3F8BB94833773.roa
Signing time: Fri 15 May 2026 11:28:43 +0000
ROA not before: Fri 15 May 2026 11:28:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38193
IP address blocks: 119.160.214.0/24 maxlen: 24
119.160.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Validity
Not Before: May 15 11:28:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a07036b-e28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:d2:09:c5:75:89:3d:12:66:e0:19:95:64:
64:99:bd:79:fe:1c:c7:3e:90:f9:4f:3e:c1:e6:82:
b7:4c:2a:b8:72:88:7b:44:31:89:8b:80:a5:5f:61:
49:39:5a:86:72:ae:41:a9:f6:93:cf:d4:76:5e:4f:
9e:42:71:6c:0c:4b:cc:2a:c7:47:04:89:dd:81:1e:
45:3b:7f:0b:f6:45:09:fb:19:00:f6:79:74:b9:bf:
31:f3:e0:96:4c:16:cf:d7:7e:e2:82:28:0b:07:79:
f9:62:96:0d:8c:da:6a:7d:fd:5e:9a:72:91:34:0b:
c3:6c:38:10:0d:a9:1b:2b:dd:ad:2a:08:48:a8:ff:
3a:00:6a:5f:93:28:b7:4e:65:c4:46:14:95:cc:d8:
06:bd:0e:fd:65:8f:43:dc:50:69:ce:54:74:df:56:
39:e5:73:9a:d0:92:36:28:5b:e9:a8:29:44:b4:91:
6b:07:12:5b:9b:b4:30:a9:8b:c9:a6:63:22:2b:10:
94:3c:c8:08:0e:70:d5:b2:8b:48:90:1c:46:31:93:
42:58:65:41:46:64:68:0c:bd:b3:de:97:64:31:87:
a0:cd:5f:1d:c5:83:ec:29:7b:d6:a3:9e:17:23:19:
e0:d2:4c:eb:f2:85:b6:81:36:24:2a:9c:0b:c4:c8:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DE:24:49:29:71:A3:D1:3C:AB:B7:45:86:7D:6F:EA:FA:E3:3D:98
X509v3 Authority Key Identifier:
keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/1D79B286505111F1A6C3F8BB94833773.roa
sbgp-ipAddrBlock: critical
IPv4:
119.160.214.0/23
Signature Algorithm: sha256WithRSAEncryption
85:4a:c8:d9:7c:bc:f9:17:ef:dc:27:8f:70:6d:f0:24:d1:b7:
c4:63:1e:87:a7:0b:3a:0e:88:c2:23:73:55:3d:71:77:05:2c:
ec:e7:75:07:57:ce:7c:71:67:da:55:57:ce:48:b4:e2:c3:e9:
ae:d6:72:aa:4c:19:05:65:f1:97:5a:73:30:56:ca:74:8f:36:
e0:c6:21:1b:bc:b8:67:4b:cf:ea:41:26:03:e4:c1:82:fc:88:
4d:d2:b8:d4:13:1e:b0:3e:f0:58:3a:45:d8:c3:19:46:54:60:
a4:de:9b:44:d9:ee:c8:f6:6c:f2:bb:b2:0c:21:d6:ef:54:ee:
bc:aa:ba:a6:19:2c:72:a4:49:a4:7e:90:9e:e7:df:18:1c:d6:
d9:e5:15:19:ab:c3:98:72:bf:f7:14:61:a7:90:ed:fd:7b:a0:
3d:a0:f8:7e:fc:3f:2c:73:a9:cb:80:b9:cf:64:bf:41:c1:43:
65:f2:70:de:c1:fd:e4:97:01:ab:4a:4c:9d:60:57:5e:50:1f:
51:1a:7a:12:26:a1:b7:9c:54:b5:26:fc:d2:de:b4:be:0f:b4:
f5:ac:db:44:f6:e5:cb:2e:ec:16:f1:10:89:a4:d7:ba:6a:bc:
4e:4a:8b:25:23:55:23:a8:27:4b:b2:0e:4a:d6:a0:b5:69:96:
9d:4b:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:19:27 2026 by rpki-client