
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/5F2B09B4485D11E8ACB54839C4F9AE02.roa
File: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (raw, json)
Hash identifier: /b2iGNmgsoH3oYnD0+GawLqES8NHKHRa1wi6NduhII0=
Subject key identifier: C8:FB:A3:24:D3:EE:24:D5:3D:7F:24:38:82:66:0E:28:D6:E2:02:24
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 280A
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/5F2B09B4485D11E8ACB54839C4F9AE02.roa
Signing time: Mon 02 Mar 2026 04:40:36 +0000
ROA not before: Thu 22 May 2025 15:52:27 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 59348
IP address blocks: 111.68.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 15:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10250 (0x280a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: May 22 15:52:27 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a514c4-d2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ec:24:93:4f:6f:50:d6:30:49:2a:5c:31:3f:
82:c7:95:68:fd:f9:30:c2:a1:ff:26:cd:a7:28:84:
aa:e9:0d:49:9f:7e:a3:e1:2f:dd:0c:91:25:20:8c:
3f:83:7b:9f:3b:28:80:37:8f:a9:7f:6c:0f:18:6e:
cf:6b:c6:68:7f:6a:9f:08:66:0b:3e:1e:dd:c1:03:
e4:af:ff:0b:40:f9:0d:92:49:b4:9e:71:17:17:41:
7f:f2:79:d1:b0:10:d9:95:c0:bb:ce:c4:ae:de:45:
29:93:e3:39:cf:df:10:3e:10:8d:ee:df:b0:93:24:
37:25:75:a8:19:a1:08:df:ac:04:35:c5:ee:4e:ab:
7e:f7:b7:70:ea:e2:d1:f9:9a:dd:22:f0:d3:de:39:
59:ce:e7:23:8e:53:83:d4:c2:02:52:90:b8:0a:4f:
48:12:41:22:b2:13:10:ed:4c:54:1f:80:b6:05:a4:
b2:3e:a3:69:3c:27:b8:cf:b9:04:48:bb:64:77:ca:
55:ba:26:94:92:e2:4e:2c:f7:34:e0:b3:2a:58:13:
36:ad:17:e7:b6:db:8e:0c:9e:9a:d4:b8:28:fe:96:
2b:d5:31:ba:4d:ae:32:4d:5a:2e:07:f5:bd:0a:ee:
27:66:3c:8b:2d:37:b2:7f:f6:de:2a:51:8c:bb:0b:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FB:A3:24:D3:EE:24:D5:3D:7F:24:38:82:66:0E:28:D6:E2:02:24
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/5F2B09B4485D11E8ACB54839C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
111.68.37.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e0:0b:11:e8:ed:6f:20:0e:a8:94:95:16:0a:77:1d:59:07:
c2:d4:b5:f3:40:04:12:e6:6c:8d:e1:d0:30:15:84:5e:91:f1:
ba:7a:cc:e5:11:72:c4:d4:cb:97:8c:4b:87:6b:cd:b8:a5:4d:
cb:ee:33:93:9f:08:c5:13:f2:a8:84:c6:df:a8:92:a9:2c:a2:
00:f6:e4:5d:98:b5:b5:75:42:1d:f9:7d:4a:25:cf:79:b4:69:
de:7b:c2:7f:c7:33:8a:8a:cd:c7:cd:1a:ef:d9:f6:0b:1d:40:
06:34:7d:e4:45:35:87:03:d9:30:83:2a:df:36:bd:1c:b7:22:
fa:80:a0:90:81:5f:71:a1:42:62:e3:f8:84:22:96:b0:c7:5b:
0c:db:5b:b4:30:eb:13:1e:d9:ab:08:43:da:26:32:32:5d:16:
e2:9b:05:b4:d0:03:56:ee:d3:64:19:fb:27:18:1d:5b:73:67:
4a:54:65:0c:d8:ba:4e:36:7e:e9:68:d0:6a:e9:d9:d2:dd:92:
c2:54:40:e7:6f:f3:81:7e:68:7b:58:92:90:48:c4:39:3a:bd:
1d:26:2b:d0:33:cf:0c:66:5b:4e:e9:45:30:a6:46:b0:2e:2f:
17:78:d1:e5:d3:7a:0b:7a:15:05:89:14:be:34:fa:e1:98:ee:
2b:c4:ec:e9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICKAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4
NTFBQThBRjUwHhcNMjUwNTIyMTU1MjI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MTRjNC1kMmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3uwkk09vUNYwSSpcMT+Cx5Vo/fkwwqH/Js2nKISq6Q1Jn36j4S/dDJElIIw/
g3ufOyiAN4+pf2wPGG7Pa8Zof2qfCGYLPh7dwQPkr/8LQPkNkkm0nnEXF0F/8nnR
sBDZlcC7zsSu3kUpk+M5z98QPhCN7t+wkyQ3JXWoGaEI36wENcXuTqt+97dw6uLR
+ZrdIvDT3jlZzucjjlOD1MICUpC4Ck9IEkEishMQ7UxUH4C2BaSyPqNpPCe4z7kE
SLtkd8pVuiaUkuJOLPc04LMqWBM2rRfnttuODJ6a1Lgo/pYr1TG6Ta4yTVouB/W9
Cu4nZjyLLTeyf/beKlGMuwsEywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMj7oyTT
7iTVPX8kOIJmDijW4gIkMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF
Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc1RkQvRTFFRkQ5QjZERUNFMTFFNEExNEYwMDY4QzRGOUFFMDIvNUYyQjA5QjQ0
ODVEMTFFOEFDQjU0ODM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAb0QlMA0GCSqGSIb3DQEBCwUAA4IBAQAm4AsR6O1vIA6olJUWCncd
WQfC1LXzQAQS5myN4dAwFYRekfG6eszlEXLE1MuXjEuHa824pU3L7jOTnwjFE/Ko
hMbfqJKpLKIA9uRdmLW1dUId+X1KJc95tGnee8J/xzOKis3HzRrv2fYLHUAGNH3k
RTWHA9kwgyrfNr0ctyL6gKCQgV9xoUJi4/iEIpawx1sM21u0MOsTHtmrCEPaJjIy
XRbimwW00ANW7tNkGfsnGB1bc2dKVGUM2LpONn7paNBq6dnS3ZLCVEDnb/OBfmh7
WJKQSMQ5Or0dJivQM88MZltO6UUwpkawLi8XeNHl03oLehUFiRS+NPrhmO4rxOzp
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:11 2026 by rpki-client