
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/F5223048791711F195779BF068A30FBC.roa
File: F5223048791711F195779BF068A30FBC.roa (raw, json)
Hash identifier: xe2EZMVbnxYIb+bVcKPMMf7o2pQWJ5gKMVCawEBa/98=
Subject key identifier: B5:91:DF:AE:6E:3B:73:4E:D2:25:D1:06:A1:D7:A9:07:49:32:D5:1C
Certificate issuer: /CN=A91FEEA9/serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8
Certificate serial: 3583
Authority key identifier: 29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/F5223048791711F195779BF068A30FBC.roa
Signing time: Fri 07 Aug 2026 07:02:22 +0000
ROA not before: Fri 07 Aug 2026 07:02:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45148
IP address blocks: 119.252.208.0/23 maxlen: 24
119.252.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl
rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13699 (0x3583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEEA9, serialNumber=2941C7161ED4A2E09BB91CABC443C8CCBC032ED8
Validity
Not Before: Aug 7 07:02:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a7582fd-9c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:9b:b2:e0:ce:54:00:f8:0f:4d:cf:e9:25:
49:86:f0:0e:43:c2:41:fd:c4:56:e7:10:17:14:8d:
2f:b4:7e:bb:b2:15:aa:e2:6e:4e:8d:3d:1e:2d:8c:
01:0b:49:5a:0b:47:80:21:dc:fe:0f:4a:7d:eb:80:
12:b0:73:11:02:40:42:c9:e5:e0:45:2f:d0:41:1a:
90:b3:97:5b:09:1e:17:23:6b:a5:d2:00:ce:b2:3a:
49:c7:c5:af:b6:cd:1a:4a:df:90:62:0d:65:5c:bb:
07:18:e8:04:09:97:79:6f:9d:8a:99:84:08:04:b0:
87:51:21:9d:c8:2d:79:de:db:46:c2:61:98:ff:76:
70:f3:8e:e9:1e:ee:e7:3b:d1:96:95:b2:83:8e:29:
f3:46:38:2a:19:61:21:4c:80:c0:21:05:09:30:08:
ea:17:ec:16:e9:a2:b2:d2:8a:f3:79:a1:c4:84:5e:
20:32:2f:46:60:95:de:8c:e8:24:9d:db:53:92:1e:
81:26:8d:bb:85:3c:82:ed:e7:e1:3d:a0:23:8d:7e:
70:2d:5e:a2:01:69:99:bf:cb:15:72:2f:cd:f9:4d:
f8:16:a2:c2:4a:2d:9a:9b:0c:b0:8a:77:5c:db:e9:
a9:b0:55:f6:6b:9e:7d:c1:33:0f:93:d0:3a:e9:7d:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:91:DF:AE:6E:3B:73:4E:D2:25:D1:06:A1:D7:A9:07:49:32:D5:1C
X509v3 Authority Key Identifier:
keyid:29:41:C7:16:1E:D4:A2:E0:9B:B9:1C:AB:C4:43:C8:CC:BC:03:2E:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/KUHHFh7UouCbuRyrxEPIzLwDLtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUHHFh7UouCbuRyrxEPIzLwDLtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEEA9/CED0A9E61D9711E2BF3E818108B02CD2/F5223048791711F195779BF068A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
119.252.208.0/23
119.252.214.0/23
Signature Algorithm: sha256WithRSAEncryption
31:fd:c6:e6:8c:e0:da:d8:ec:c5:98:37:82:c1:9f:ef:58:81:
0d:9a:f9:b2:44:4d:91:dd:ec:be:0f:d5:42:09:aa:2a:50:59:
9e:6b:b7:ee:d4:2e:4c:7d:57:51:a8:3d:e2:44:5f:1c:31:6c:
b8:34:2b:10:62:cd:43:4e:2f:9b:7d:eb:5a:7d:56:c4:b0:cb:
3d:ce:5e:1d:af:f7:9d:25:e2:22:17:7b:0f:a5:e8:0c:95:1a:
e1:de:7f:0a:ae:28:3b:e0:82:92:2e:31:fb:b6:a0:19:b5:68:
d6:00:c1:4e:07:4e:ff:93:a5:55:c7:2c:17:f1:f5:65:87:5c:
5d:01:9a:01:73:c2:be:4c:df:0b:2d:2a:73:ba:b0:a0:4d:65:
a7:e9:26:78:77:00:05:72:f5:08:7a:23:7d:0b:3b:9e:63:ae:
51:cc:ba:45:33:ca:c7:28:a5:8e:fc:ce:1c:92:40:33:5b:f9:
77:95:04:72:62:8a:84:ad:ac:69:68:62:7b:5d:08:9b:c5:fd:
5a:2d:c9:9c:31:26:32:d7:ba:7d:74:d1:a2:57:6b:3c:65:a8:
27:70:a8:e5:10:d8:12:ed:40:c9:93:37:4d:a9:31:66:06:50:
44:d2:77:17:d1:9f:24:12:3c:9b:95:f6:40:20:3c:45:31:e6:
24:44:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:02:57 2026 by rpki-client