
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/F88F642285E411EEB951413BC4F9AE02.roa
File: F88F642285E411EEB951413BC4F9AE02.roa (raw, json)
Hash identifier: krziyxJjj3W5faMkTkdh3jS0gXk+dMCMIxlaoN+oOhU=
Subject key identifier: BE:EE:26:C0:72:13:68:91:1B:6A:DC:74:77:27:E0:B8:5D:07:19:56
Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial: 05E1
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/F88F642285E411EEB951413BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:22:37 +0000
ROA not before: Fri 02 Jan 2026 23:19:18 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 21859
IP address blocks: 117.55.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1505 (0x5e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Validity
Not Before: Jan 2 23:19:18 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a483ec-7a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:05:a9:21:00:43:28:09:6a:8d:b5:a5:36:
ad:e6:16:bf:1d:0b:8e:b0:e0:f7:a7:d7:56:eb:2e:
cb:0c:dc:d9:b5:2e:f1:42:9a:90:e8:38:8a:93:fc:
f4:ff:45:4b:29:9c:72:39:ee:42:d9:bb:9e:d8:ed:
30:d3:8f:84:10:85:7d:a3:5c:49:da:56:d4:0d:86:
bc:9b:fd:09:6d:fd:2e:3a:7e:66:dc:e6:fd:d3:4c:
ad:6a:45:e5:c5:e6:55:38:bf:b2:06:4e:4a:2f:a6:
41:bc:9b:96:a9:78:67:05:e3:92:ba:c9:96:c0:ad:
75:b6:f0:72:e4:f0:64:5c:00:7b:95:c4:8f:d5:a3:
d2:ea:62:b4:df:92:13:d1:ee:78:e3:61:f7:d0:80:
b7:ee:a6:74:46:84:5b:4f:2e:d7:50:a4:6d:2c:63:
6a:22:55:6b:21:bc:5d:9c:f7:3a:0b:88:6f:83:0f:
f1:2f:fa:4c:7c:14:7a:d7:f3:c5:1d:15:e7:6a:e2:
13:50:1e:2b:c7:05:c4:a7:de:ab:94:83:c5:47:2c:
39:ef:0d:7c:b8:d6:6d:4b:a8:b8:93:d6:0f:56:77:
fc:a1:a7:68:e5:bb:d8:48:2e:14:ef:92:83:c9:34:
dc:24:ee:22:bb:98:6c:4d:d3:a3:f0:f3:f8:86:e3:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EE:26:C0:72:13:68:91:1B:6A:DC:74:77:27:E0:B8:5D:07:19:56
X509v3 Authority Key Identifier:
keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/F88F642285E411EEB951413BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
117.55.205.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b0:d3:d2:16:c3:26:52:17:67:d5:79:84:fc:3a:ef:0c:f9:
c7:9b:2e:e7:b5:a1:6d:f3:ba:81:19:18:b9:78:f5:31:7a:64:
07:90:8a:b6:ba:0d:8b:74:f2:bf:94:8d:7a:c4:11:7c:ea:15:
45:02:0c:74:67:06:ee:cc:57:0c:65:02:35:05:25:1c:1a:8d:
27:16:3b:3e:1f:30:30:4f:3c:d1:bb:b0:6c:62:16:1c:63:e0:
a3:fd:84:8c:93:34:fc:ed:e1:b6:63:1c:8c:c5:10:2a:45:f7:
42:fb:0a:13:4f:5b:56:df:ae:bc:e2:d5:3c:5b:31:16:dc:78:
1c:fe:0c:c8:14:9c:ba:0a:ab:3b:18:35:85:32:9b:54:fe:ee:
c4:f4:aa:4f:3e:f3:34:af:d3:bb:b1:01:4e:7e:57:02:5e:39:
41:92:ae:4a:62:bd:cc:ed:9d:6f:e3:ba:27:4e:65:aa:37:c0:
cb:7b:16:15:9a:cb:11:44:c9:de:b3:c0:1d:cb:6a:8f:4e:fc:
69:bc:41:51:11:cf:5c:35:53:a0:2f:ef:3b:93:ef:2d:8f:48:
0a:a9:81:83:1a:e8:a7:c7:5a:50:df:5f:a2:c0:e2:d4:c8:66:
03:68:e3:15:14:c0:a5:1a:82:a4:35:74:07:c9:84:9e:56:28:
ad:04:98:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:49 2026 by rpki-client