
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/C605A7A01CF911EDBAE62F45C4F9AE02.roa
File: C605A7A01CF911EDBAE62F45C4F9AE02.roa (raw, json)
Hash identifier: m3cZCOL4b89wYo+1IDry+3qvdA4N289UzAOZJV0uUGo=
Subject key identifier: 5F:BD:5B:E9:AF:DF:64:F6:7A:A3:21:01:1A:F0:70:DF:E1:8A:B7:38
Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F
Certificate serial: 0307
Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/C605A7A01CF911EDBAE62F45C4F9AE02.roa
Signing time: Thu 07 May 2026 01:31:32 +0000
ROA not before: Thu 07 May 2026 01:31:32 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 45213
IP address blocks: 139.86.0.0/16 maxlen: 16
139.86.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl
rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 775 (0x307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A5BD, serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F
Validity
Not Before: May 7 01:31:32 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69fbeb74-85f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:a3:fd:fe:1d:11:df:6b:bf:5c:47:2b:b6:
b4:5e:d8:3f:05:61:4e:d2:68:ad:a5:1b:07:2e:91:
40:80:18:6c:b4:53:36:93:c3:34:b3:f6:1c:4d:7c:
1c:b7:86:91:39:cb:b0:da:bb:2d:eb:2a:54:06:fb:
89:aa:c5:3e:4e:e5:4a:f6:6f:3a:b0:01:8e:0c:03:
40:80:b0:f6:54:e0:27:ce:72:0e:c1:59:29:99:9f:
dd:0f:02:ce:0e:a1:14:b5:08:d6:e2:0c:01:53:8b:
91:69:78:28:c9:3d:f8:a7:8b:38:64:a4:9b:f8:18:
b5:5a:97:ae:fb:f9:b3:81:3f:7a:13:ca:f4:ea:6f:
ab:07:a4:fb:15:ca:9f:2c:71:27:8c:f7:4c:a3:15:
0a:60:43:49:6b:11:09:cf:d7:9d:c8:42:98:b4:86:
3a:ec:52:ea:05:70:32:fe:92:6f:da:65:07:95:48:
fd:3f:39:0b:f5:e8:69:c6:83:89:c4:2d:61:80:4c:
eb:23:e3:95:ba:3b:cf:70:0e:f2:cc:86:bb:1e:06:
06:e5:bd:1c:d6:8b:c9:62:11:03:80:5d:d8:bc:cb:
b2:07:bd:3b:ae:44:75:cf:cd:0f:87:6c:55:ed:d2:
a1:39:77:42:97:28:08:39:ea:06:72:86:e0:28:ec:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BD:5B:E9:AF:DF:64:F6:7A:A3:21:01:1A:F0:70:DF:E1:8A:B7:38
X509v3 Authority Key Identifier:
keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/C605A7A01CF911EDBAE62F45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
139.86.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:b5:9f:bd:76:d9:b3:a3:62:50:e1:aa:a5:6a:82:f2:4b:40:
88:3b:7f:62:d1:39:32:48:10:49:1f:88:e8:1e:41:a3:7c:1e:
54:83:80:cc:67:73:e3:e4:e8:32:2b:4b:ea:43:12:8f:3e:b9:
4a:79:4e:8b:3c:7c:dc:cb:4d:6d:38:44:54:90:a6:d3:a5:e1:
67:5a:9a:1e:eb:4f:e3:69:59:f2:3d:25:d3:60:65:59:d3:8d:
68:03:7a:aa:bf:72:88:1a:a9:be:15:07:6d:1c:4b:7e:0b:b6:
33:16:13:94:2e:90:d0:20:47:ad:aa:4f:59:2f:3b:c5:df:f4:
e3:97:4d:af:5c:b8:15:3e:03:0a:b0:08:9b:54:4b:78:1e:e4:
49:d3:91:05:c2:1f:4c:89:34:b5:fb:e2:40:fd:48:37:a1:d9:
d3:b2:85:0e:ca:1f:3e:14:e5:51:83:76:7b:de:c1:71:46:9b:
7f:54:7c:47:eb:5e:86:ce:66:e4:97:74:ae:d6:5c:39:08:0f:
da:e9:1e:7e:c4:60:5a:3c:f7:27:75:63:10:e4:ee:01:76:74:
89:4f:23:46:13:c0:83:60:9d:97:eb:ad:ae:b1:3b:af:8b:88:
19:84:9f:d7:06:f4:29:b8:54:f8:41:fe:d3:f6:43:2b:f2:da:
a7:84:3a:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 05:30:44 2026 by rpki-client