
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/19C407C0CC1011EFBC7E0050C4F9AE02.roa
File: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (raw, json)
Hash identifier: utxItg9AZP9jPtUfaHZNYYZ2s+pDsbIze+rI9Pl7uws=
Subject key identifier: A5:1C:F1:46:87:B4:0D:DF:68:19:C6:27:A2:51:2D:5D:B8:33:2C:56
Certificate issuer: /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A
Certificate serial: F8
Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/19C407C0CC1011EFBC7E0050C4F9AE02.roa
Signing time: Fri 17 Apr 2026 06:40:38 +0000
ROA not before: Fri 17 Apr 2026 06:40:38 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153483
IP address blocks: 161.248.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl
rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE7A4, serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A
Validity
Not Before: Apr 17 06:40:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69e1d5e6-a889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:bc:e3:ad:dd:32:ed:50:9b:2f:7c:e9:d9:
dd:8c:80:90:88:6f:4b:b5:e4:bb:d0:7c:30:de:ab:
cd:99:4c:b6:74:2b:41:ec:99:62:81:be:82:41:bb:
86:58:8e:c0:76:a1:d6:dd:4b:dd:ed:a6:72:34:8a:
a0:e0:30:35:31:14:c3:e9:a5:ec:f4:e9:8d:f2:4b:
e3:4e:97:1d:48:2f:16:d4:6b:81:42:60:3e:45:34:
ee:d1:af:a7:09:cf:b8:e0:86:11:af:27:03:75:e8:
d1:93:69:67:6e:2f:c5:38:c6:a5:b3:6d:db:5a:19:
da:50:e9:4e:e5:07:bc:03:25:be:bb:0d:d4:af:6b:
31:5c:d8:92:24:e2:31:0b:1f:0a:19:e5:86:8a:c6:
fe:45:64:b6:e3:48:d6:0b:13:90:59:45:ca:52:92:
b0:27:be:4a:3e:ec:ef:f6:ad:13:a3:09:e7:6b:05:
be:be:64:99:22:7c:1a:22:c1:7c:1d:07:57:94:23:
ae:6f:a2:b7:4e:e8:b5:0f:b2:0d:81:f3:89:78:dc:
4e:1f:ae:f8:dd:98:5a:dc:44:33:d6:c2:49:6f:32:
92:a2:aa:6a:4c:41:e9:7f:08:52:ed:2b:e7:a8:11:
a6:e2:19:ca:c8:06:c0:3f:d9:6e:0d:eb:80:e6:1d:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1C:F1:46:87:B4:0D:DF:68:19:C6:27:A2:51:2D:5D:B8:33:2C:56
X509v3 Authority Key Identifier:
keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/19C407C0CC1011EFBC7E0050C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.100.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:5e:df:fe:e9:75:6c:3f:9b:6a:1e:96:8f:35:9c:d5:ed:2a:
ab:83:88:df:ff:c1:87:b2:ec:35:11:e6:43:70:ea:37:95:ca:
7c:e2:9f:67:6a:03:0b:3e:da:60:4a:d7:4b:37:28:96:b9:f3:
52:8b:54:78:bb:e8:4d:0e:14:ef:c2:a9:cc:6b:58:21:6e:66:
78:fa:af:aa:5b:2f:65:b8:03:d3:bb:72:2f:18:da:fb:fd:6b:
b4:a9:5d:62:26:13:d0:4a:05:a0:48:42:58:b8:30:5d:e7:51:
68:48:0e:92:0c:05:8c:b0:d9:fa:04:0a:0f:7f:2f:a7:5d:9e:
3a:14:8c:a1:6c:26:b4:1f:20:d2:54:4e:36:26:bc:40:a3:fd:
82:88:61:78:97:af:ef:b0:9e:c5:02:22:4a:3a:fd:f3:f7:74:
24:48:2a:17:c9:e8:98:7b:3b:fc:4a:c0:77:2b:bc:88:3f:f1:
0a:69:9e:57:f1:60:04:74:da:f0:12:3a:83:36:df:5f:c2:7e:
e9:72:a3:f3:85:a1:d5:44:54:f4:29:2a:ef:0d:bf:9a:a0:28:
fd:86:56:6e:e9:e5:08:41:91:f4:50:1e:50:c6:bb:39:07:a4:
f6:73:c7:3d:b0:24:3b:e7:a9:96:1b:08:3b:72:ef:bb:80:80:
30:c1:1c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:57:40 2026 by rpki-client