
$ rpki-client -vvf rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/9C594FD469A911EFBF66800FC4F9AE02.roa
File: 9C594FD469A911EFBF66800FC4F9AE02.roa (raw, json)
Hash identifier: nMPaP0I0C9Cb95MJ00respJ+zerHJo0kMcvE2pYeSio=
Subject key identifier: 8F:EE:12:EB:9D:55:66:04:55:24:A7:7D:AD:12:62:57:55:CC:64:25
Certificate issuer: /CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
Certificate serial: 0143
Authority key identifier: BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/9C594FD469A911EFBF66800FC4F9AE02.roa
Signing time: Tue 03 Mar 2026 05:47:12 +0000
ROA not before: Tue 03 Mar 2026 05:47:12 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 137546
IP address blocks: 203.158.118.0/24 maxlen: 24
203.158.244.0/22 maxlen: 22
203.158.244.0/24 maxlen: 24
203.158.245.0/24 maxlen: 24
203.158.246.0/23 maxlen: 23
203.158.246.0/24 maxlen: 24
203.158.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl
rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91911EB, serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
Validity
Not Before: Mar 3 05:47:12 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a675e0-1865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:5e:4a:d5:79:50:18:e0:c5:46:db:22:59:
ef:45:32:84:4f:54:29:90:86:e1:6e:05:a6:e1:78:
a3:9a:a6:20:1c:d0:25:44:5d:4c:7e:06:dd:4c:1c:
c3:66:e5:54:6b:c3:5d:1a:11:a3:07:82:fa:a8:46:
97:0e:24:58:84:29:cd:06:ef:2f:0d:f5:31:04:6b:
b4:e6:cc:06:48:b5:61:13:f4:ab:59:d1:e8:46:eb:
77:a0:84:a6:75:ba:17:cc:75:02:ac:23:7e:e2:3f:
bb:4a:b2:fe:48:f2:10:13:3d:8f:cd:04:44:e1:78:
24:93:24:aa:d0:dc:f1:0d:65:45:95:bb:59:25:8f:
d9:02:6e:e1:82:bc:a3:22:e6:56:89:25:a7:33:6b:
17:fb:6c:38:c9:f2:ea:b2:be:36:c0:fb:bb:f4:d8:
9a:ba:33:d1:3d:6b:41:d9:ff:5b:7b:6c:9f:ac:00:
12:ae:22:83:86:19:09:7f:86:20:33:6f:c7:52:68:
3a:28:ac:ac:20:30:f3:ae:d7:a4:a8:2e:e4:35:ae:
59:23:93:0d:f5:ba:31:6b:70:55:b2:e0:f1:bf:d8:
c5:b1:32:1f:af:73:92:fc:17:97:a2:09:2f:1a:b9:
85:e6:da:82:ad:2d:90:61:ca:3b:a9:2e:1b:29:d9:
f5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EE:12:EB:9D:55:66:04:55:24:A7:7D:AD:12:62:57:55:CC:64:25
X509v3 Authority Key Identifier:
keyid:BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/9C594FD469A911EFBF66800FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.158.118.0/24
203.158.244.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:62:59:cb:e1:03:34:f0:54:07:68:87:2d:c1:95:15:3d:32:
a0:14:2d:a6:bc:7b:d0:7b:e7:d6:e9:64:c5:37:0b:d8:f7:3e:
e7:31:16:fa:fe:e1:dc:29:62:ba:11:de:ab:60:80:5c:2d:0a:
74:81:1b:7d:3a:2f:fc:36:4b:72:ff:93:e3:57:bc:22:c2:29:
8d:95:6c:6b:21:81:90:1f:51:5e:9f:f2:bd:38:b1:8d:eb:88:
73:f2:bf:3a:63:93:99:11:fa:fb:64:cd:74:f9:25:29:5e:69:
e5:ad:7c:2a:e5:76:ae:99:95:c6:30:86:47:52:fb:ff:e6:5a:
6a:26:5c:61:3d:ff:1a:9e:2b:6f:cf:7d:43:59:26:df:38:9f:
37:c0:82:05:d6:eb:b9:a3:b9:38:bc:31:a5:33:ec:af:25:eb:
f8:0f:bc:98:88:2e:b2:d5:d6:79:9e:8f:ae:84:a9:33:6c:e1:
51:f6:5e:f0:0d:e9:a5:ef:81:69:d5:f9:65:7a:e4:ba:47:4f:
a4:11:0a:4f:a6:d8:ef:27:f6:4b:ec:f5:c9:62:9e:45:3c:a0:
46:7c:1b:9b:cb:9c:cc:b4:3b:e5:5a:8f:d9:9e:cf:77:06:de:
99:7b:f6:e3:bf:ad:70:b6:cf:02:24:a6:91:c6:16:f6:f3:da:
e3:7f:1f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:02:19 2026 by rpki-client