
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/27D894E81D4011F19325F4941B3D8C67.roa
File: 27D894E81D4011F19325F4941B3D8C67.roa (raw, json)
Hash identifier: HG6t6YvzBlAumemzb2gstPcteAeL39jX+YuQ75GGVWA=
Subject key identifier: 55:FF:FC:8D:FA:51:29:01:78:BF:AA:0C:77:9E:16:38:19:BB:57:92
Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Certificate serial: 020A
Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/27D894E81D4011F19325F4941B3D8C67.roa
Signing time: Wed 11 Mar 2026 11:48:01 +0000
ROA not before: Wed 11 Mar 2026 11:48:01 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 146842
IP address blocks: 114.142.142.0/23 maxlen: 24
121.91.104.0/21 maxlen: 21
121.91.104.0/23 maxlen: 23
121.91.106.0/23 maxlen: 23
121.91.108.0/23 maxlen: 23
121.91.109.0/24 maxlen: 24
121.91.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Validity
Not Before: Mar 11 11:48:01 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69b15671-e562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:bc:5e:87:83:a8:b7:fc:4c:63:46:14:92:
03:0e:ad:1e:50:31:fb:00:e1:16:2f:bf:4c:27:6a:
54:ab:db:69:c3:ce:c4:ea:1c:dc:4d:47:73:9f:2a:
75:47:b2:c3:0c:c6:09:a8:bc:5b:e2:70:09:93:e2:
57:e4:41:57:ca:b1:80:4d:84:64:9c:a9:44:cd:51:
fc:e2:78:4a:41:f5:f9:26:ff:0c:92:4e:6c:eb:be:
fa:58:7e:6f:c1:85:43:0f:f0:ae:b0:6f:82:67:5f:
a9:5f:58:ba:68:f3:44:3b:9d:ba:1b:be:78:52:43:
2e:f9:65:03:a3:48:ea:c3:d7:4b:56:b4:cc:2f:c6:
40:67:d7:46:5d:4f:85:25:79:3b:7d:2d:6a:02:2b:
74:61:60:03:2c:25:40:93:89:0a:ed:52:7f:97:96:
81:ab:74:f6:e5:60:bd:f3:86:7a:b9:d5:ce:17:7c:
02:87:89:cc:7a:1c:b1:bd:96:bd:e3:3f:94:fc:f8:
26:09:52:89:d9:d4:39:6d:92:96:fc:4e:ed:87:6a:
a0:c5:5c:b7:18:bf:d7:a7:08:a9:43:0e:a0:9e:95:
be:af:97:50:f7:ff:d0:b0:77:9b:6b:67:4a:69:11:
a8:fa:2d:68:7e:a4:4a:ec:77:5f:79:0d:67:db:30:
2a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FF:FC:8D:FA:51:29:01:78:BF:AA:0C:77:9E:16:38:19:BB:57:92
X509v3 Authority Key Identifier:
keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/27D894E81D4011F19325F4941B3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
114.142.142.0/23
121.91.104.0/21
Signature Algorithm: sha256WithRSAEncryption
52:10:24:d5:4b:29:c5:c6:cd:83:3a:6c:06:6d:f5:6c:be:94:
fd:df:f5:6d:e2:0a:f8:60:e6:75:94:13:3b:b8:bf:47:60:1b:
08:88:18:01:16:6d:c3:17:49:ea:af:64:72:ba:ce:75:c2:79:
68:3d:73:dc:aa:9d:cd:29:70:6d:22:8c:15:f3:11:a2:fd:26:
d3:88:2b:63:41:b2:c9:65:ec:50:02:60:c6:dc:97:84:72:03:
54:73:b8:ff:c5:75:92:bc:03:11:1e:6e:62:f2:39:15:2a:b4:
e6:18:4b:ca:b6:24:ab:8c:dc:26:34:81:60:bb:bc:8e:00:0e:
2b:ff:c5:df:3c:9b:0e:2d:81:a3:ad:e4:fe:5b:0b:00:5f:f0:
4a:6b:68:b4:b1:11:c7:29:b3:0d:e0:0c:ee:ce:6d:d3:21:f3:
46:07:b8:10:4a:69:c5:11:19:a7:3e:bc:6f:92:54:7c:5d:0b:
82:27:af:45:a6:bb:11:f4:2d:aa:27:6f:3a:11:68:d1:23:df:
80:72:6b:99:22:f3:a5:7c:8b:1a:e0:14:5d:b3:be:8f:7a:24:
8a:df:04:f2:26:db:3f:90:48:c3:1f:7b:93:c0:36:5a:1c:d4:
68:e9:a3:8e:5a:39:13:87:4c:0a:00:ba:5f:32:64:00:37:ef:
61:48:c0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:32 2026 by rpki-client