
$ rpki-client -vvf rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/B1AC59CA17B911F18117E782383D8C67.roa
File: B1AC59CA17B911F18117E782383D8C67.roa (raw, json)
Hash identifier: +NS4dIto6+EmYFB1YZFztX1H1Dxs72FShVzE38yw9hI=
Subject key identifier: 0D:4D:F5:1E:A0:9E:E7:82:6A:27:F8:E9:A1:6D:D7:92:9B:6C:D6:EA
Certificate issuer: /CN=A91878FF/serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Certificate serial: 28
Authority key identifier: 5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/B1AC59CA17B911F18117E782383D8C67.roa
Signing time: Tue 05 May 2026 09:42:16 +0000
ROA not before: Tue 05 May 2026 09:42:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135332
IP address blocks: 103.214.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl
rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878FF, serialNumber=5FFA86A88321313B2A6DE38B7F16305D19B958CE
Validity
Not Before: May 5 09:42:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f9bb78-05df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:90:75:0b:bc:88:13:00:9c:f5:f9:f4:d2:
ad:e9:47:ac:64:2a:98:5f:7e:eb:3e:bf:62:d2:d1:
a1:05:5f:44:e1:fe:6f:67:cc:e5:2c:c7:37:ea:b9:
20:7f:c2:9b:4a:ae:48:59:80:f7:3f:67:07:82:f0:
88:08:ea:d2:51:f4:88:b0:bb:1f:a8:48:de:1e:da:
5a:30:6e:e0:14:58:e4:81:3a:6c:1d:18:03:5b:14:
4d:a7:92:46:a4:c8:76:9a:ad:4a:66:3c:23:a9:5f:
e4:6f:5b:0a:1a:7e:f3:7a:4f:94:80:ff:5c:e3:af:
d1:e3:7d:00:7e:90:e2:f2:45:25:fb:12:0b:59:d5:
a4:97:a4:b4:70:e9:3f:de:77:8f:4c:d2:90:3c:25:
e3:ff:7d:10:d8:be:cf:9e:67:38:c4:9c:87:c5:23:
24:25:3c:1d:22:78:37:82:94:48:f8:82:77:07:e6:
0c:9c:c4:d0:6a:9c:2c:48:2c:af:ae:f6:2b:14:bc:
c2:cd:f7:ee:c4:04:bd:77:33:d9:eb:40:fe:16:0c:
bb:fc:23:25:87:8a:55:fe:10:26:57:ad:94:48:c0:
14:aa:eb:de:33:16:b6:9b:94:8a:05:df:d2:70:06:
6f:15:a3:c7:48:90:e9:6f:87:b9:3e:da:9f:2e:9c:
37:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4D:F5:1E:A0:9E:E7:82:6A:27:F8:E9:A1:6D:D7:92:9B:6C:D6:EA
X509v3 Authority Key Identifier:
keyid:5F:FA:86:A8:83:21:31:3B:2A:6D:E3:8B:7F:16:30:5D:19:B9:58:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/X_qGqIMhMTsqbeOLfxYwXRm5WM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X_qGqIMhMTsqbeOLfxYwXRm5WM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878FF/5B6BD15A17B711F1BF42BB44383D8C67/B1AC59CA17B911F18117E782383D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.98.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ce:23:89:d4:74:5d:4f:d7:f9:ac:f9:04:ff:81:ce:14:55:
0b:49:50:ec:0a:28:43:79:01:62:01:f7:36:76:74:81:d4:8e:
6e:3b:9d:c9:cd:58:d4:92:af:2c:c8:d4:b1:f0:c2:29:57:8b:
f4:d5:72:8c:0b:34:40:44:cf:3c:85:57:99:26:0a:e3:ae:98:
c2:ad:e0:9c:f7:80:b1:c2:69:de:e6:ee:b1:86:d3:58:19:7b:
f8:92:bd:ec:2c:b9:bf:49:74:33:c5:76:fb:5e:40:94:12:e1:
f6:9f:19:2a:e3:ea:cd:cf:ac:2a:4b:4e:0f:c8:cf:c4:10:61:
1b:d5:13:a8:d6:46:4d:68:9d:7d:a4:bb:39:e6:4f:47:b5:44:
cb:be:fe:e2:51:93:30:7a:9f:61:db:18:ee:7d:2c:aa:6b:5d:
da:a1:e4:4d:7d:44:ab:de:c3:63:cf:7d:4c:b2:7c:30:69:46:
9b:70:8c:c3:41:ef:11:1d:a6:1b:d2:eb:84:e7:f0:65:2d:38:
11:61:b2:5f:64:b5:16:0e:43:f4:12:f4:0e:7d:64:98:2f:e9:
ef:82:3a:64:e9:f6:6b:ba:c5:8f:76:c0:65:51:9b:a7:18:1e:
b0:ee:bd:d5:64:cf:00:80:a7:87:e4:ac:d6:ac:3a:da:f1:dc:
41:71:35:34
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NzhGRjExMC8GA1UEBRMoNUZGQTg2QTg4MzIxMzEzQjJBNkRFMzhCN0YxNjMwNUQx
OUI5NThDRTAeFw0yNjA1MDUwOTQyMTZaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZjliYjc4LTA1ZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSbZB1C7yIEwCc9fn00q3pR6xkKphffus+v2LS0aEFX0Th/m9nzOUsxzfquSB/
wptKrkhZgPc/ZweC8IgI6tJR9Iiwux+oSN4e2lowbuAUWOSBOmwdGANbFE2nkkak
yHaarUpmPCOpX+RvWwoafvN6T5SA/1zjr9HjfQB+kOLyRSX7EgtZ1aSXpLRw6T/e
d49M0pA8JeP/fRDYvs+eZzjEnIfFIyQlPB0ieDeClEj4gncH5gycxNBqnCxILK+u
9isUvMLN9+7EBL13M9nrQP4WDLv8IyWHilX+ECZXrZRIwBSq694zFrablIoF39Jw
Bm8Vo8dIkOlvh7k+2p8unDfVAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUDU31HqCe
54JqJ/jpoW3Xkpts1uowHwYDVR0jBBgwFoAUX/qGqIMhMTsqbeOLfxYwXRm5WM4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OEZGLzVCNkJEMTVBMTdC
NzExRjFCRjQyQkI0NDM4M0Q4QzY3L1hfcUdxSU1oTVRzcWJlT0xmeFl3WFJtNVdN
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWF9xR3FJTWhNVHNxYmVPTGZ4WXdYUm01V000LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzhGRi81QjZCRDE1QTE3QjcxMUYxQkY0MkJCNDQzODNEOEM2Ny9CMUFDNTlDQTE3
QjkxMUYxODExN0U3ODIzODNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABn1mIwDQYJKoZIhvcNAQELBQADggEBAC3OI4nUdF1P1/ms+QT/gc4U
VQtJUOwKKEN5AWIB9zZ2dIHUjm47ncnNWNSSryzI1LHwwilXi/TVcowLNEBEzzyF
V5kmCuOumMKt4Jz3gLHCad7m7rGG01gZe/iSvewsub9JdDPFdvteQJQS4fafGSrj
6s3PrCpLTg/Iz8QQYRvVE6jWRk1onX2kuznmT0e1RMu+/uJRkzB6n2HbGO59LKpr
Xdqh5E19RKvew2PPfUyyfDBpRptwjMNB7xEdphvS64Tn8GUtOBFhsl9ktRYOQ/QS
9A59ZJgv6e+COmTp9mu6xY92wGVRm6cYHrDuvdVkzwCAp4fkrNasOtrx3EFxNTQ=
-----END CERTIFICATE-----
Generated at Wed May 13 16:45:44 2026 by rpki-client