
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa
File: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (raw, json)
Hash identifier: rlg+gGkjSIov6YUxyCKFbKYRg4bl/u2eQA54uzAkE6Q=
Subject key identifier: C8:EE:84:42:74:E4:F9:6C:D1:66:71:D9:9E:D2:69:57:F7:94:57:0A
Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
Certificate serial: 0837
Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:56:27 +0000
ROA not before: Fri 20 Jun 2025 06:23:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40605
IP address blocks: 139.5.178.0/24 maxlen: 24
139.5.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl
rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2103 (0x837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
Validity
Not Before: Jun 20 06:23:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4296a-1526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:37:56:07:bf:b7:ee:44:7f:4b:18:29:b4:
83:85:25:f1:f8:b3:e3:8e:0a:49:be:e2:91:6e:ed:
e3:f3:25:04:bd:5b:da:cc:ca:b0:5a:e9:66:b4:6e:
36:cd:61:b2:67:ff:c0:a4:26:0b:5c:c0:11:a1:90:
3f:3f:cb:8d:b7:c0:f8:a9:4d:b8:7c:09:7f:fd:df:
7d:cb:da:76:7f:61:4f:94:c1:8a:10:2c:29:3f:17:
50:f9:42:60:b5:7a:24:9a:7c:b7:89:1e:98:92:84:
a0:dd:2d:0c:36:e1:96:c3:52:a4:3d:67:7e:02:d6:
ba:3d:4f:62:11:39:77:f6:5a:c2:b9:31:76:83:3d:
35:99:89:fb:c7:c3:13:42:35:38:5b:a2:fb:4e:0f:
0d:c3:9c:1d:9e:f8:00:43:65:cd:ba:df:7f:36:f8:
94:5e:fa:2f:5d:01:3a:67:5f:f7:92:6e:7b:9f:b2:
d2:3f:de:01:38:bf:d8:97:54:4f:64:d6:43:c3:ef:
5b:9d:6a:39:fb:83:97:bb:80:5b:14:ef:13:53:b2:
78:7f:1a:90:71:35:48:14:80:38:61:5a:e8:19:fc:
14:53:dd:56:b2:57:e6:90:01:0c:92:31:a7:b5:26:
b1:66:1a:88:2f:e4:c8:59:61:a2:79:1b:c5:78:ee:
d8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EE:84:42:74:E4:F9:6C:D1:66:71:D9:9E:D2:69:57:F7:94:57:0A
X509v3 Authority Key Identifier:
keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
139.5.178.0/23
Signature Algorithm: sha256WithRSAEncryption
12:f1:95:99:bf:ad:10:aa:c8:2f:61:fa:a2:98:5f:31:35:e9:
47:96:f9:76:4b:f3:2a:41:0c:eb:9f:45:ee:19:04:bb:f8:2d:
6e:46:5d:c6:15:1b:de:fe:79:0e:03:27:c4:94:c6:e4:02:2f:
9c:9f:57:1e:07:d9:19:2f:c8:14:51:88:5d:c6:e5:67:86:62:
28:c3:7a:21:af:0e:6b:00:72:8e:7b:8c:9b:f8:27:3d:86:34:
42:da:82:f1:5e:1d:37:3c:41:9b:d7:56:30:22:ee:10:0f:92:
85:25:b8:61:82:d1:fb:5e:98:c0:8c:ad:24:38:f7:64:72:04:
af:5c:d2:4a:3f:2b:60:94:c5:4a:e8:f7:11:37:37:b5:5c:6a:
cf:d7:f6:68:6b:d7:f9:9d:44:55:0b:53:0c:44:a0:d1:d7:e5:
6c:dc:7d:40:d1:de:66:8c:2b:f4:06:04:4b:87:1c:10:8e:12:
ce:56:25:4c:20:ad:a0:52:b1:e0:01:65:cf:73:c2:9a:30:47:
93:9e:5c:af:b8:4c:55:73:78:a3:68:22:80:0a:35:5e:be:5b:
48:90:54:1e:1b:b6:db:ad:8f:55:d5:9d:84:b1:6d:34:17:92:
34:d7:22:2b:f6:79:b4:03:42:b5:2b:88:45:d0:e1:50:4e:6d:
ec:bf:90:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:12:44 2026 by rpki-client