
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/5A0D98C829F211F18AB4C1A0A2833773.roa
File: 5A0D98C829F211F18AB4C1A0A2833773.roa (raw, json)
Hash identifier: oLYEfALKF8GBDPFwMg7ZHd8g3AeCNND0wejQq9C4azs=
Subject key identifier: D7:20:42:7D:F4:F2:F9:C5:5B:38:2A:2C:E8:3F:AA:50:67:68:E3:E2
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 0103
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/5A0D98C829F211F18AB4C1A0A2833773.roa
Signing time: Tue 28 Apr 2026 11:50:09 +0000
ROA not before: Tue 28 Apr 2026 11:50:09 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 59217
IP address blocks: 63.222.127.0/24 maxlen: 24
209.8.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Apr 28 11:50:09 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69f09ef1-3845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:95:f6:8a:28:bc:38:2f:a6:5b:f0:50:02:
f5:b0:57:58:7e:0e:a6:08:f5:9a:40:d2:aa:7c:89:
b5:25:72:85:59:32:46:43:3d:23:29:cc:51:3a:4d:
9c:82:50:9c:c1:68:2c:ec:ff:15:0d:25:07:0c:08:
c2:05:d4:bb:6e:40:d2:9f:7a:02:7c:42:d4:c9:ec:
be:cf:f5:fb:fd:8d:f2:73:1b:a9:c6:de:0a:72:5e:
60:0b:0c:04:75:f9:1f:56:24:2a:ce:d2:2e:c5:73:
00:7a:33:cf:40:96:6b:10:82:01:31:15:24:ca:fa:
27:8d:45:96:d9:3d:f5:c3:87:0c:60:25:18:3d:0d:
0b:9c:87:bd:a3:a1:e1:10:9f:05:cd:6a:30:50:a9:
08:b7:3c:10:db:34:90:7d:28:ad:f3:3f:bd:b0:3b:
93:fb:61:2a:29:39:23:e7:94:2a:4f:14:2d:58:4d:
fb:99:36:0f:ff:ec:8f:ec:7e:83:bf:dd:17:12:88:
c0:4f:ad:6d:25:38:84:9c:d0:ad:dd:06:30:26:7b:
03:cd:b4:1f:9d:84:93:16:84:0e:53:0d:e9:d6:eb:
80:b5:e9:16:59:02:c9:64:d7:c4:34:c2:2c:74:36:
7e:af:e7:a6:84:3b:c9:bc:83:a1:91:b1:b5:8b:2b:
2e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:20:42:7D:F4:F2:F9:C5:5B:38:2A:2C:E8:3F:AA:50:67:68:E3:E2
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/5A0D98C829F211F18AB4C1A0A2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
63.222.127.0/24
209.8.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:8b:7f:00:73:13:6d:2a:1f:e9:71:e2:b6:41:21:20:06:dc:
2a:5a:6b:36:c7:3e:46:dd:ea:45:11:64:e4:2c:04:b2:86:d8:
c9:5f:04:2b:15:ad:78:6f:b9:19:59:e7:99:46:43:6c:b8:b9:
1f:f3:c5:d8:00:99:17:43:49:ab:fd:a7:20:fa:96:1a:48:87:
10:19:89:0f:c7:54:a7:79:ca:a3:aa:93:89:58:39:df:98:9a:
2e:b3:1f:49:9c:52:5e:41:35:70:d6:82:77:94:57:37:e7:ac:
2b:a3:45:a6:47:a0:59:1b:b7:18:02:04:e9:96:d7:5d:e2:8e:
8e:17:37:3d:64:3f:a3:5f:b1:92:b6:d9:31:52:cb:f7:59:46:
7a:f8:07:bd:60:fb:17:e1:68:d8:04:38:91:89:64:ce:1d:0c:
81:f8:a6:61:77:5f:db:ea:f2:81:9f:3c:5b:5e:14:79:5d:61:
96:ff:69:8c:6f:64:d9:3e:f8:13:b2:5c:57:5c:11:29:3c:37:
31:12:54:72:7a:b9:55:1b:cd:21:62:e3:e7:26:71:bb:18:53:
e6:36:0f:a9:93:d3:26:95:82:f2:0d:e2:25:18:ce:36:7f:4c:
10:77:09:0d:ad:0f:24:96:51:b2:38:84:7a:04:7f:34:a6:f9:
7f:91:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:17 2026 by rpki-client