
$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/DCF45DB827C111F19C6102CF9F833773.roa
File: DCF45DB827C111F19C6102CF9F833773.roa (raw, json)
Hash identifier: ASzg8hQDL/2aWq41h7X6nF+OfCE4FLFV0Neuc7HpczM=
Subject key identifier: 74:1E:B1:EB:2E:A7:A7:AE:ED:25:C1:96:1B:C1:4B:48:37:95:AC:05
Certificate issuer: /CN=A919337F/serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB
Certificate serial: 02
Authority key identifier: 85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/DCF45DB827C111F19C6102CF9F833773.roa
Signing time: Tue 24 Mar 2026 20:41:42 +0000
ROA not before: Tue 24 Mar 2026 20:41:42 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139623
IP address blocks: 146.19.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.crl
rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:41:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919337F, serialNumber=8519FF2C68082CC647B828760B4B7B1495EC84CB
Validity
Not Before: Mar 24 20:41:42 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69c2f705-5826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dd:cc:ea:b0:4b:91:e2:8e:bf:a7:35:1d:44:
0c:60:e6:73:90:61:73:7a:fd:74:a2:ab:02:07:c5:
ee:b2:61:a0:ee:83:82:9b:ad:a4:f8:8a:61:06:fd:
f5:76:7e:91:ec:8f:10:f0:ee:f3:66:90:08:81:7c:
da:d9:08:a4:d2:89:90:55:27:c5:ac:62:00:37:e0:
cd:bf:0c:4e:a6:c1:2c:7b:98:6a:32:d6:e7:81:58:
a0:e1:2a:4d:f8:3b:e7:88:38:5f:47:38:03:cc:00:
02:b6:29:a0:62:cf:46:81:49:fd:37:fe:b7:4e:44:
95:97:96:6f:d8:13:c0:11:26:b6:5a:be:e0:19:2e:
8d:b8:ae:e4:c2:6e:92:29:0e:12:25:30:ae:d3:db:
95:f6:90:53:ee:49:3d:b8:f1:7f:63:6f:61:46:19:
1e:00:e2:bf:78:37:85:f7:0a:bf:1f:4a:a2:89:2a:
cf:3c:0d:e2:8d:db:ab:f0:b2:2c:88:f1:46:8a:37:
86:09:28:2e:27:eb:08:ec:a1:d4:e0:8b:25:c7:bf:
9e:fd:c7:0b:57:a9:50:c6:c0:9f:ee:b9:42:c0:79:
96:62:75:2a:ef:61:d8:4f:71:c8:0a:97:64:7f:04:
ba:2a:53:97:5a:67:a8:fa:7a:18:77:3a:0d:ff:6c:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1E:B1:EB:2E:A7:A7:AE:ED:25:C1:96:1B:C1:4B:48:37:95:AC:05
X509v3 Authority Key Identifier:
keyid:85:19:FF:2C:68:08:2C:C6:47:B8:28:76:0B:4B:7B:14:95:EC:84:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/hRn_LGgILMZHuCh2C0t7FJXshMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hRn_LGgILMZHuCh2C0t7FJXshMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1B5BF7FE27AA11F1B751955AB7EE528E/DCF45DB827C111F19C6102CF9F833773.roa
sbgp-ipAddrBlock: critical
IPv4:
146.19.9.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c8:2c:e9:ed:70:3b:91:2c:04:7c:db:0f:d0:7b:83:91:dd:
2d:91:6d:c6:45:24:36:09:cc:73:eb:22:b6:59:99:32:07:8c:
aa:ff:21:da:ec:8a:64:e2:3f:47:8b:4f:e5:dd:6b:26:46:aa:
78:96:50:bc:64:37:e4:5b:6e:d9:51:8b:5a:21:06:91:00:7f:
c2:b3:37:bb:0e:3a:9d:10:4d:d3:48:ab:12:b1:fa:a8:12:7d:
40:14:4c:c5:77:b9:67:a1:08:a0:73:2a:e0:cc:ae:76:9b:51:
53:96:52:d0:b6:41:16:9b:3f:db:05:83:bc:c0:e4:64:82:a0:
77:5f:a5:48:3e:71:e5:37:48:ef:65:fb:67:45:bf:0d:92:14:
84:45:1f:6c:7b:57:51:82:05:06:53:c9:6d:ff:d8:97:ba:af:
49:f9:5b:48:93:71:44:a2:40:b3:28:8c:81:0a:24:03:49:49:
d8:71:86:d5:60:0f:7e:df:c8:98:8e:9e:d0:3f:c8:5c:56:04:
f0:ab:74:66:d7:c8:21:ef:af:4f:05:f6:05:d1:ef:d2:a2:94:
c9:e6:c1:8c:75:dc:b6:ff:26:bb:5f:69:f2:b7:c5:d5:27:1b:
86:71:e6:4d:09:b0:bd:96:45:b6:7b:18:48:b4:d5:e4:28:48:
81:6b:9c:b4
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MzM3RjExMC8GA1UEBRMoODUxOUZGMkM2ODA4MkNDNjQ3QjgyODc2MEI0QjdCMTQ5
NUVDODRDQjAeFw0yNjAzMjQyMDQxNDJaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YzJmNzA1LTU4MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCg3czqsEuR4o6/pzUdRAxg5nOQYXN6/XSiqwIHxe6yYaDug4KbraT4imEG/fV2
fpHsjxDw7vNmkAiBfNrZCKTSiZBVJ8WsYgA34M2/DE6mwSx7mGoy1ueBWKDhKk34
O+eIOF9HOAPMAAK2KaBiz0aBSf03/rdORJWXlm/YE8ARJrZavuAZLo24ruTCbpIp
DhIlMK7T25X2kFPuST248X9jb2FGGR4A4r94N4X3Cr8fSqKJKs88DeKN26vwsiyI
8UaKN4YJKC4n6wjsodTgiyXHv579xwtXqVDGwJ/uuULAeZZidSrvYdhPccgKl2R/
BLoqU5daZ6j6ehh3Og3/bNyXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUdB6x6y6n
p67tJcGWG8FLSDeVrAUwHwYDVR0jBBgwFoAUhRn/LGgILMZHuCh2C0t7FJXshMsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMzdGLzFCNUJGN0ZFMjdB
QTExRjFCNzUxOTU1QUI3RUU1MjhFL2hSbl9MR2dJTE1aSHVDaDJDMHQ3RkpYc2hN
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvaFJuX0xHZ0lMTVpIdUNoMkMwdDdGSlhzaE1zLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzM3Ri8xQjVCRjdGRTI3QUExMUYxQjc1MTk1NUFCN0VFNTI4RS9EQ0Y0NURCODI3
QzExMUYxOUM2MTAyQ0Y5RjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACSEwkwDQYJKoZIhvcNAQELBQADggEBAAHILOntcDuRLAR82w/Qe4OR
3S2RbcZFJDYJzHPrIrZZmTIHjKr/IdrsimTiP0eLT+XdayZGqniWULxkN+RbbtlR
i1ohBpEAf8KzN7sOOp0QTdNIqxKx+qgSfUAUTMV3uWehCKBzKuDMrnabUVOWUtC2
QRabP9sFg7zA5GSCoHdfpUg+ceU3SO9l+2dFvw2SFIRFH2x7V1GCBQZTyW3/2Je6
r0n5W0iTcUSiQLMojIEKJANJSdhxhtVgD37fyJiOntA/yFxWBPCrdGbXyCHvr08F
9gXR79KilMnmwYx13Lb/JrtfafK3xdUnG4Zx5k0JsL2WRbZ7GEi01eQoSIFrnLQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:39:28 2026 by rpki-client