
$ rpki-client -vvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/D62511F6C41D11F08D2E621EC4F9AE02.roa
File: D62511F6C41D11F08D2E621EC4F9AE02.roa (raw, json)
Hash identifier: HAQPkYTVEHvUCCvstD3cbGBNAUP4hbxEWfa91gL9q2w=
Subject key identifier: B0:88:B5:A1:CD:38:0B:3B:35:38:34:7C:91:52:FF:13:C6:0A:03:40
Certificate issuer: /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
Certificate serial: 0246
Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/D62511F6C41D11F08D2E621EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:11:48 +0000
ROA not before: Tue 18 Nov 2025 01:28:07 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137471
IP address blocks: 119.15.0.0/22 maxlen: 24
119.15.4.0/22 maxlen: 24
119.15.8.0/24 maxlen: 24
119.15.9.0/24 maxlen: 24
119.15.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl
rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D
Validity
Not Before: Nov 18 01:28:07 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a46543-efcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:69:ab:47:e7:80:fa:d8:d9:ab:4a:ad:f2:
5b:11:46:19:4a:68:f3:4b:6a:3f:16:22:17:fc:ff:
9c:da:82:c9:83:fe:e8:54:9e:f8:fa:50:9e:c6:ca:
e4:18:19:14:3b:e2:cc:cc:e1:03:8a:ed:8d:49:c9:
1f:c8:4e:59:c7:e2:2d:3a:88:0c:87:df:8d:0c:cf:
26:4f:da:c0:43:36:62:75:50:c6:3a:dc:93:1f:90:
86:62:25:4c:01:01:d7:0c:71:9b:c4:ff:8d:06:58:
ec:7a:24:34:39:c8:de:aa:3d:9d:67:1e:4f:b4:ac:
e8:b6:44:94:71:17:c6:be:9d:6d:5c:f6:9e:6a:84:
ec:2a:2c:e9:da:d9:be:74:b7:aa:63:00:3c:c2:3c:
53:da:40:cf:88:c9:14:0a:a6:7b:50:b4:1d:8c:45:
a7:24:db:31:3a:3e:a0:96:85:36:3f:e8:12:3a:34:
b5:a8:1a:c7:a1:c5:3d:ca:0a:e8:f3:f3:85:16:b5:
d8:d5:f5:05:d3:38:fa:b5:1b:4e:f7:a7:28:cb:b8:
4c:3f:21:f6:be:73:05:17:e0:66:03:71:0f:cf:f9:
3f:69:4f:f8:7e:a1:54:6a:f7:90:fd:e7:09:44:95:
8b:c5:58:50:58:bd:49:e2:24:a8:2a:53:60:e8:b4:
79:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:88:B5:A1:CD:38:0B:3B:35:38:34:7C:91:52:FF:13:C6:0A:03:40
X509v3 Authority Key Identifier:
keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/D62511F6C41D11F08D2E621EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.15.0.0-119.15.9.255
119.15.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1b:36:49:ba:3c:94:f5:40:ee:c6:93:26:76:df:e9:8c:2c:
e2:d8:51:37:d1:da:29:3c:dd:ce:a5:ec:39:d4:79:89:4f:72:
d4:87:5e:98:e1:89:7d:e9:e5:bf:dc:9f:8b:5f:5c:ab:1b:70:
c4:1b:9f:30:34:0e:a3:a0:03:c7:46:51:cf:7d:ee:f2:04:cf:
0b:92:8a:5f:2a:b5:ee:7a:a4:eb:6d:36:86:6b:7c:de:97:2c:
3f:c4:05:16:74:64:c6:01:1a:a6:0b:01:fb:c6:9e:02:6f:5e:
16:a9:de:96:b1:b5:e8:e4:7e:85:c4:2f:85:18:4d:2d:46:76:
28:33:52:3a:8a:cd:5a:12:01:ae:8a:97:f8:cc:3d:26:0a:9e:
42:9a:b9:00:4c:40:cc:3f:b1:9f:39:2e:95:14:25:5d:37:35:
8d:92:d3:a8:50:a8:77:85:c0:31:ea:40:64:50:7f:8a:51:05:
df:f1:39:89:e9:bf:9b:94:25:e8:c0:1e:f9:34:7f:df:69:68:
5e:3a:fb:85:8c:7f:d9:01:46:fa:3a:88:4c:46:37:3e:0e:b4:
78:7a:7d:59:d2:20:ff:e9:3f:42:10:07:5b:ee:b2:ee:ce:f4:
6e:46:98:1c:0e:05:47:34:7b:3b:76:43:0d:d3:a7:fa:03:79:
35:f8:26:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:02 2026 by rpki-client