
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/5740BDF8370111F094BF7862C4F9AE02.roa
File: 5740BDF8370111F094BF7862C4F9AE02.roa (raw, json)
Hash identifier: TzkPBOuu8iVT94DUClMMw+tXF1MG5WJOQ0I22k+/nfc=
Subject key identifier: A1:69:06:9C:B0:27:FD:E2:F0:82:CA:E2:EB:78:73:E1:03:02:14:B3
Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
Certificate serial: 015E
Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/5740BDF8370111F094BF7862C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:09:12 +0000
ROA not before: Mon 15 Sep 2025 13:55:54 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 132384
IP address blocks: 167.219.49.0/24 maxlen: 24
167.219.50.0/23 maxlen: 24
167.219.52.0/23 maxlen: 24
167.219.54.0/24 maxlen: 24
167.219.55.0/24 maxlen: 24
167.219.56.0/23 maxlen: 24
167.219.58.0/23 maxlen: 24
167.219.60.0/23 maxlen: 24
167.219.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl
rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
Validity
Not Before: Sep 15 13:55:54 2025 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=69a59a08-dc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:57:74:1a:d9:38:ad:41:6d:7d:09:2f:84:
13:42:0f:e3:19:cc:a0:bf:7d:f7:02:c5:18:72:57:
27:ed:18:58:be:3d:ba:ac:95:33:ba:65:67:bf:7b:
58:ea:08:53:42:d1:f5:f3:c0:ea:91:d8:fc:b5:9d:
43:1e:55:d7:d6:4f:76:19:b7:57:f8:6d:32:55:43:
46:6c:80:55:1a:67:37:93:21:cb:1a:21:46:95:60:
a4:f3:5a:3f:90:22:73:3d:3c:ab:57:e1:9a:fd:66:
fe:e9:d6:55:30:f1:ca:dc:c4:48:ef:88:c8:9e:5a:
d0:b3:b7:17:2a:4a:5c:c8:b4:7b:8d:8f:8a:11:2c:
5b:c8:1d:6a:2b:d1:70:9c:0f:b0:20:39:26:ce:50:
37:dd:09:a5:ab:8d:a7:a6:c4:70:53:46:5d:ab:24:
c4:aa:41:5e:cc:1a:fa:ff:74:a1:e1:0c:20:30:86:
d1:2c:d3:f7:ff:f9:28:37:55:9a:1a:51:cf:a0:69:
84:cc:98:21:85:fe:4c:5d:9c:22:e5:db:ee:57:98:
a1:ad:5d:a1:80:b1:9d:71:49:0d:c8:6e:76:08:a7:
4e:73:e1:9f:ac:a0:77:13:b7:e0:8f:88:ab:b0:66:
93:58:58:dc:d7:6d:87:c3:1b:90:5c:09:d6:2f:04:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:69:06:9C:B0:27:FD:E2:F0:82:CA:E2:EB:78:73:E1:03:02:14:B3
X509v3 Authority Key Identifier:
keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/5740BDF8370111F094BF7862C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
167.219.49.0-167.219.63.255
Signature Algorithm: sha256WithRSAEncryption
73:fc:f9:54:b7:57:63:ec:7d:e3:b4:bb:95:69:d3:b9:b5:78:
cf:16:7c:1c:1c:ad:14:02:fa:2b:e1:25:d4:02:13:70:cf:2d:
16:7f:04:66:20:51:ea:0b:41:9a:11:22:c9:17:75:e3:7c:fd:
2f:f7:7a:f6:c2:a1:b5:7d:73:dc:e0:75:65:da:20:52:c2:1f:
9f:08:38:0d:f7:21:dc:0d:81:bd:1d:4a:34:b5:40:dc:38:c9:
d2:07:77:7c:0a:ae:a2:fd:6e:07:25:c7:0f:59:ae:a8:cb:ce:
6a:55:7e:ec:40:77:57:41:3b:27:ed:59:d6:4e:34:be:4a:91:
c7:22:e2:2e:dd:1a:4f:90:50:e4:cc:04:05:fa:03:bc:d6:1b:
cd:43:74:a1:7b:56:83:13:58:6b:f2:1f:64:71:9d:d5:2b:71:
5d:72:0c:63:4f:f3:44:08:a6:ea:e2:df:60:e3:1c:ad:eb:ed:
8b:eb:6c:7e:91:3d:93:0c:a3:00:14:d0:b2:d3:dd:d7:2a:0e:
42:16:f2:77:ec:23:9f:c1:6a:b7:f3:bb:79:50:68:28:c1:7e:
8c:0d:c5:3d:2a:8d:d5:ff:34:6e:e7:36:ca:f8:87:03:ca:e2:
6a:90:90:37:e6:be:b4:87:af:5b:2a:28:37:fd:bf:44:9d:af:
af:fc:22:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:19 2026 by rpki-client