
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/DB3E929E199611EF9EBFBF4AC4F9AE02.roa
File: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (raw, json)
Hash identifier: yniPMcdgFbwNhplTc+rydNjzQLU8O29V8C25W4mTbeU=
Subject key identifier: 7D:E7:A2:A4:AF:AC:AA:0B:06:5D:A8:EA:D0:DA:0F:03:23:BF:52:A6
Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial: 28C1
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/DB3E929E199611EF9EBFBF4AC4F9AE02.roa
Signing time: Tue 28 Apr 2026 05:43:43 +0000
ROA not before: Tue 28 Apr 2026 05:43:43 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 132716
IP address blocks: 119.92.215.0/24 maxlen: 24
203.213.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10433 (0x28c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Validity
Not Before: Apr 28 05:43:43 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69f0490f-dcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:04:e5:2b:fa:fa:27:00:ee:b7:12:59:c9:
f9:30:c1:39:65:28:a4:9d:27:a5:d3:0d:5b:e2:f9:
5c:5c:35:39:a7:5a:d9:fd:61:1c:6d:34:d1:84:e4:
df:b2:29:ca:76:07:b6:af:54:90:c4:1e:6d:26:b4:
19:97:ec:55:aa:04:98:30:f1:4e:89:a0:20:d2:6a:
6a:5d:c2:dd:db:44:6e:fd:6f:f4:4f:09:c2:b3:35:
db:77:60:ea:b0:c8:1c:ac:2d:b7:38:06:0a:bb:d6:
35:e6:e9:bb:87:45:f0:d9:b5:34:62:f9:36:d4:34:
3b:2b:d1:02:b3:44:c9:86:53:1b:04:01:49:d5:67:
46:62:48:a8:eb:89:24:74:e9:ea:15:8f:9d:1d:8a:
d0:bf:e3:8d:8a:ca:61:62:7d:41:da:2d:43:c7:cb:
97:37:e1:30:4b:54:bc:45:4c:6f:30:c2:3e:2f:aa:
29:5b:c4:ec:f4:a5:c7:2d:4e:33:79:6b:2d:0e:78:
d3:fe:3e:54:ad:d3:bb:f2:29:63:95:77:74:f8:27:
2d:77:6c:fb:8b:b0:5b:d1:f0:4b:f4:05:c7:4e:ae:
8c:ec:9c:4b:b4:31:26:da:ce:99:cb:80:64:2c:a5:
3d:03:7f:59:d6:36:e8:13:64:cb:ca:b3:64:f7:68:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E7:A2:A4:AF:AC:AA:0B:06:5D:A8:EA:D0:DA:0F:03:23:BF:52:A6
X509v3 Authority Key Identifier:
keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/DB3E929E199611EF9EBFBF4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.92.215.0/24
203.213.201.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:2e:57:87:06:2d:54:f9:38:b3:37:aa:90:a9:f5:21:45:92:
f1:b4:62:82:9b:30:7e:10:95:82:2d:ce:58:3e:3d:ba:b9:69:
8b:4e:66:f8:33:b0:03:8c:d1:a7:84:a5:e7:a4:19:d5:6d:21:
de:35:3b:c3:6f:ff:8a:e0:c9:65:cd:f4:ea:14:70:f3:4f:df:
8d:54:5e:38:8a:74:f1:d9:d4:59:05:fb:ff:d0:17:98:1d:ef:
41:0b:4c:92:80:08:86:d7:e9:01:92:e6:b4:13:c8:25:2c:86:
06:8e:58:1d:72:c3:37:e7:9f:5c:e9:52:77:21:f9:9a:09:d7:
dc:51:32:71:53:73:c0:e7:b1:dc:19:3e:46:ee:54:3e:59:80:
06:24:60:c7:b4:c7:ea:c1:97:6c:60:63:f2:f0:96:2e:1f:ec:
38:27:66:e1:fb:10:bb:35:2a:16:95:f6:5f:03:cd:a2:5e:da:
84:63:46:6a:f7:d0:63:5a:4f:03:14:dd:6f:2b:95:1a:04:61:
6d:34:a6:19:71:77:ed:35:6e:07:87:5a:d6:d6:37:91:c5:bc:
1e:b0:5e:25:b4:1c:f4:88:c6:bc:e6:91:f7:4e:20:14:ef:f3:
92:54:41:64:cc:be:81:04:90:6b:fa:03:cb:c6:c4:46:c0:53:
c2:9e:ce:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:37:01 2026 by rpki-client