
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/F91331C4796E11F095D14275C4F9AE02.roa
File: F91331C4796E11F095D14275C4F9AE02.roa (raw, json)
Hash identifier: 5kreoxgcCJUQZsNMEHK/Y4fOtdmTmyIsApDfpOqWQVs=
Subject key identifier: 05:5C:49:C0:CF:B1:46:E0:07:98:82:F8:3F:1D:73:BA:3D:18:78:66
Certificate issuer: /CN=A9125DDA/serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74
Certificate serial: 69
Authority key identifier: E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/F91331C4796E11F095D14275C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:33:12 +0000
ROA not before: Fri 15 Aug 2025 00:29:58 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 154127
IP address blocks: 210.56.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl
rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125DDA, serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74
Validity
Not Before: Aug 15 00:29:58 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a58388-73a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d9:c9:c0:b6:d5:a1:af:6c:ab:03:ae:86:dd:
2c:86:27:27:e9:c4:1c:f7:fb:d5:ca:75:a7:f0:80:
20:38:1c:a5:69:01:b6:d5:20:4b:72:32:e9:71:49:
3e:75:63:d5:88:d7:c8:90:9d:e3:7d:0c:56:0d:38:
83:43:22:06:60:c3:f5:a9:40:78:6c:d7:16:d4:29:
39:f8:87:9b:5a:34:b2:91:33:fa:6d:84:6a:0f:05:
d2:b7:6a:97:b7:db:0a:60:45:01:88:e3:74:04:74:
a1:85:2d:ec:bd:52:53:e1:65:d5:31:7e:ed:0b:b1:
bf:f2:ea:74:ed:4f:7b:07:ff:6d:09:43:01:25:35:
7b:61:66:c7:97:b4:de:52:52:63:63:73:eb:33:67:
b1:ea:6c:e8:a7:4f:e7:91:39:7d:03:19:60:43:82:
1e:1f:d3:ff:dd:b9:bf:6a:3f:ac:d1:6b:9a:1c:74:
97:a6:f2:a9:e0:54:8d:61:e0:f3:bb:ef:91:02:b5:
04:47:03:14:89:d5:01:f9:ac:e8:ea:b6:4f:8f:72:
d9:76:2b:73:34:60:46:94:94:27:59:c6:8b:63:be:
3a:3b:9d:51:18:58:0a:9e:4c:27:e2:f4:dc:8c:2e:
0e:dd:1d:d5:a5:84:7d:3b:df:89:1e:0e:80:00:50:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5C:49:C0:CF:B1:46:E0:07:98:82:F8:3F:1D:73:BA:3D:18:78:66
X509v3 Authority Key Identifier:
keyid:E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/F91331C4796E11F095D14275C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.56.148.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:76:16:d7:72:20:76:a6:72:b3:09:4f:45:aa:48:92:26:23:
62:ef:3f:a7:9a:bd:6d:c2:ef:4e:11:fe:e4:43:c5:2b:f7:38:
ac:5d:08:96:28:e9:de:45:a3:a9:9b:83:59:a7:41:6d:b6:60:
9f:31:eb:89:97:50:69:a0:cf:cb:8e:bf:c0:36:c5:c0:04:1a:
0f:ba:e9:9a:dc:fa:c9:eb:a4:32:89:03:d1:fb:b2:87:ce:0e:
4c:b2:f1:ee:98:a1:2c:43:d4:4d:a8:64:38:44:e6:be:17:c2:
79:ce:63:cf:dc:53:d2:0e:fc:d5:9f:7b:b6:45:e8:77:d9:1e:
f4:e3:e3:3d:49:58:68:18:98:8c:c8:dc:4b:11:d4:6b:9a:aa:
6c:83:39:92:46:15:6b:19:41:27:4e:08:5d:ca:13:1d:2a:4f:
e3:df:ae:73:fa:b1:3f:ed:b0:a1:7d:2b:d2:d4:73:15:50:d0:
7a:1b:6f:44:ad:be:d2:9e:8e:00:56:70:07:c0:fc:a2:ba:28:
58:7d:8b:a7:13:ac:38:57:e2:1c:36:e7:b4:61:16:3f:db:9b:
b4:34:89:d6:96:f6:9c:82:14:fe:46:ed:92:8e:5a:61:37:e2:
0d:ef:8f:cc:8e:0b:95:20:76:e5:9e:6a:64:a3:d7:dd:83:48:
2d:83:72:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:52 2026 by rpki-client