
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/70F3668238F711EFB4132D26C4F9AE02.roa
File: 70F3668238F711EFB4132D26C4F9AE02.roa (raw, json)
Hash identifier: J+hvCkdt6g/OaFOvzPdZIrEAlI39zR1KbhhXWY3YwWA=
Subject key identifier: F1:34:76:90:81:DF:BE:D8:05:38:40:9C:EA:B7:FD:2B:68:A3:2D:81
Certificate issuer: /CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193
Certificate serial: 0142
Authority key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/70F3668238F711EFB4132D26C4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:18:09 +0000
ROA not before: Thu 23 Oct 2025 07:19:38 +0000
ROA not after: Sat 30 Dec 2028 00:00:00 +0000
asID: 151953
IP address blocks: 203.19.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl
rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 04:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6FD6, serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193
Validity
Not Before: Oct 23 07:19:38 2025 GMT
Not After : Dec 30 00:00:00 2028 GMT
Subject: CN=69a5aa30-3711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:17:fa:91:87:0f:61:22:1a:e9:81:c0:7e:
e2:12:4f:7a:f4:87:16:79:36:1d:0a:9f:51:59:cf:
c5:a5:ff:0f:dc:84:3b:dd:fc:f0:5c:cf:1a:7e:b1:
10:16:e5:1e:bb:d8:a5:a8:fd:d5:f8:da:0f:5d:4b:
41:17:fd:cc:97:33:a5:a7:b8:1a:0a:d9:1f:3c:f5:
75:33:57:b9:27:87:6e:6b:7c:cb:e0:2f:66:9e:96:
c7:e0:ca:0c:34:9d:f7:2e:95:ed:d1:46:b0:b6:21:
5c:41:21:af:3d:71:f8:cf:d3:e4:a1:fa:bc:0e:3b:
0e:55:24:92:37:ad:ec:d3:7c:ae:e6:b7:09:df:d8:
24:f3:f2:69:fa:48:71:5e:e3:c9:81:43:a1:cb:53:
e9:1a:15:0f:d2:9c:b1:6c:44:46:25:e6:cc:3c:a6:
b3:ab:81:f0:11:23:55:cc:ea:19:07:f6:cb:f8:20:
15:88:d7:9f:80:23:88:95:b3:d8:22:0d:a6:23:0a:
f2:a2:61:15:26:5d:86:d4:70:42:9a:9a:5f:b6:12:
4c:d5:97:fb:c8:15:f7:8b:55:24:4c:67:51:65:06:
58:bd:40:e5:62:ab:59:83:92:93:6a:b4:97:73:c3:
82:cc:4a:89:a1:3f:99:57:c8:f1:a3:4b:fd:40:3a:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:76:90:81:DF:BE:D8:05:38:40:9C:EA:B7:FD:2B:68:A3:2D:81
X509v3 Authority Key Identifier:
keyid:E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/70F3668238F711EFB4132D26C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.19.5.0/24
Signature Algorithm: sha256WithRSAEncryption
19:37:59:4d:07:19:82:14:d9:36:ea:ee:4e:56:b3:a8:f1:59:
af:5a:a3:69:b3:1c:40:59:8a:a6:00:e0:48:76:d0:93:b3:92:
7b:47:07:3e:5c:7c:38:b3:10:05:69:1f:43:9e:29:2f:dc:09:
41:8a:82:4e:b1:b6:54:dd:69:0b:17:ec:71:06:f2:9d:5b:75:
42:86:19:f6:2e:7b:d6:76:b9:4f:71:89:e9:da:31:16:5f:4f:
f2:b1:07:bf:89:03:09:1e:aa:fa:16:1f:2a:f7:23:dc:93:24:
4d:c8:15:d7:ac:15:00:32:35:47:8a:f5:7c:80:42:f4:4f:0b:
c4:3b:34:f7:05:a2:3d:b2:1d:61:f8:fc:39:d0:d2:e5:05:9a:
2e:b7:df:66:39:ea:d9:63:c4:c9:d7:17:1c:33:5c:65:dd:9b:
eb:32:26:16:89:fb:06:e1:05:d4:08:73:04:4a:1e:5d:82:47:
9c:5c:a2:5f:b2:19:e3:6b:dd:6f:15:2c:ff:a4:88:cf:7d:63:
64:9e:d5:87:77:73:e7:ab:81:23:6b:c0:c3:f9:78:36:56:07:
fc:46:99:0d:b1:dc:e5:a2:53:01:db:92:33:00:0e:29:ad:9d:
eb:34:05:1a:5a:87:65:57:52:91:a2:3c:d2:74:42:05:43:a8:
11:50:17:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:11 2026 by rpki-client