
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/4A4E595AC91C11EFB0DEB92DC4F9AE02.roa
File: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (raw, json)
Hash identifier: gUcqtC95g/7PYjkg92p/7QAIqkLozNb3MYQLoLKJN7U=
Subject key identifier: D0:90:F9:3C:57:9F:E7:8F:18:A6:91:D5:A3:03:B8:99:6B:6D:11:DB
Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial: 011B
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/4A4E595AC91C11EFB0DEB92DC4F9AE02.roa
Signing time: Sat 09 May 2026 06:38:30 +0000
ROA not before: Sat 09 May 2026 06:38:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152678
IP address blocks: 119.160.214.0/24 maxlen: 24
119.160.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Validity
Not Before: May 9 06:38:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69fed666-e049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:8f:dc:d9:be:7b:f7:7e:ab:62:7e:bf:c3:
fc:e5:68:92:aa:ed:71:fd:e7:6a:6f:76:d1:6c:0b:
66:96:6d:14:8f:9d:9b:f7:9e:d9:cb:e7:20:44:d5:
67:cf:f2:79:4c:31:13:f3:b9:45:11:a2:9c:e7:94:
80:45:5f:80:77:db:21:b0:58:a5:2e:17:1c:e5:3f:
35:d5:bf:07:8e:53:fa:1f:19:4b:e5:24:0c:85:4a:
35:22:b1:26:13:94:7e:3e:4a:02:6f:90:29:f5:a9:
51:cf:9a:49:79:c2:3c:bb:cb:b8:90:b4:ea:6e:71:
5c:8b:09:45:f9:3c:45:26:6b:90:4f:d7:50:59:fa:
18:bf:8b:01:c3:8a:15:d6:8c:9f:20:f7:e3:64:e4:
6b:d1:41:ef:58:e6:89:bc:2f:ef:c9:90:38:bb:fc:
a4:ae:41:df:19:fe:f1:87:0d:2c:cd:05:64:e2:bd:
f3:bb:82:00:8c:0d:00:c6:e1:5c:7d:a1:3e:5e:d8:
e3:5d:0b:a7:dc:01:f7:67:dc:d1:67:01:2d:19:90:
f2:35:42:20:cc:cc:17:b3:95:5e:81:c4:cb:ec:39:
fb:ff:60:6f:60:b9:63:3e:2b:20:52:b8:68:62:83:
12:82:5e:05:04:dc:36:eb:04:cc:7b:72:81:07:81:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:90:F9:3C:57:9F:E7:8F:18:A6:91:D5:A3:03:B8:99:6B:6D:11:DB
X509v3 Authority Key Identifier:
keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/4A4E595AC91C11EFB0DEB92DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.160.214.0/23
Signature Algorithm: sha256WithRSAEncryption
92:85:d9:63:f8:1f:79:5c:24:a6:8b:da:d4:8f:25:4f:19:3a:
7a:ce:4d:82:cb:88:ec:48:fa:77:f4:b4:aa:7c:ab:29:f9:7b:
d5:a6:c6:de:b3:09:d2:d0:34:23:80:67:76:25:34:07:56:0d:
d7:37:09:5a:bd:cd:e2:a2:84:dd:e6:2c:8b:74:ce:db:95:49:
b5:19:45:9d:77:54:ec:bf:7d:16:8d:13:43:ee:62:c1:8b:3d:
56:09:50:5f:79:cf:27:77:ac:93:9f:17:db:b5:5c:14:67:53:
6b:1d:1c:9a:d3:63:d8:50:a1:9f:c3:52:a1:ca:a1:21:7a:a6:
26:2e:0f:cc:a2:cc:a5:ad:84:1d:7b:b1:ed:42:48:e6:bf:48:
92:48:ed:cd:d3:cf:0e:c2:5c:76:98:c0:31:83:4e:28:8c:0b:
7e:39:07:c3:c0:29:2a:7f:14:9c:d8:2b:ba:e4:d3:2a:f0:76:
62:1d:21:1e:e9:b7:2f:4e:a0:96:68:17:91:ae:d0:e0:c6:3e:
a2:36:92:74:c5:5c:e2:a6:c9:3a:17:dd:f7:2e:be:d2:af:65:
00:97:74:81:8f:c7:b7:70:33:2f:32:f9:80:17:6e:e2:ff:34:
03:6f:75:e3:a9:2b:27:a7:f1:86:1a:bf:aa:68:1c:d7:b6:55:
a1:c1:83:77
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA4QTUxMTAvBgNVBAUTKDg1RThFRTlBOEQzMDUyODU5OTA2MkQwOENCOUNCOUQ1
MTNERjZCRDcwHhcNMjYwNTA5MDYzODMwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZlZDY2Ni1lMDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsaiP3Nm+e/d+q2J+v8P85WiSqu1x/edqb3bRbAtmlm0Uj52b957Zy+cgRNVn
z/J5TDET87lFEaKc55SARV+Ad9shsFilLhcc5T811b8HjlP6HxlL5SQMhUo1IrEm
E5R+PkoCb5Ap9alRz5pJecI8u8u4kLTqbnFciwlF+TxFJmuQT9dQWfoYv4sBw4oV
1oyfIPfjZORr0UHvWOaJvC/vyZA4u/ykrkHfGf7xhw0szQVk4r3zu4IAjA0AxuFc
faE+XtjjXQun3AH3Z9zRZwEtGZDyNUIgzMwXs5VegcTL7Dn7/2BvYLljPisgUrho
YoMSgl4FBNw26wTMe3KBB4FjeQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNCQ+TxX
n+ePGKaR1aMDuJlrbRHbMB8GA1UdIwQYMBaAFIXo7pqNMFKFmQYtCMucudUT32vX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhBNS9EMTUwMzEzNkM5
MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1VvV1pCaTBJeTV5NTFSUGZh
OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjA4QTUvRDE1MDMxMzZDOTFCMTFFRjg4N0Q2RjJDQzRGOUFFMDIvNEE0RTU5NUFD
OTFDMTFFRkIwREVCOTJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBd6DWMA0GCSqGSIb3DQEBCwUAA4IBAQCShdlj+B95XCSmi9rUjyVP
GTp6zk2Cy4jsSPp39LSqfKsp+XvVpsbeswnS0DQjgGd2JTQHVg3XNwlavc3iooTd
5iyLdM7blUm1GUWdd1Tsv30WjRND7mLBiz1WCVBfec8nd6yTnxfbtVwUZ1NrHRya
02PYUKGfw1KhyqEheqYmLg/MosylrYQde7HtQkjmv0iSSO3N088Owlx2mMAxg04o
jAt+OQfDwCkqfxSc2Cu65NMq8HZiHSEe6bcvTqCWaBeRrtDgxj6iNpJ0xVzipsk6
F933Lr7Sr2UAl3SBj8e3cDMvMvmAF27i/zQDb3XjqSsnp/GGGr+qaBzXtlWhwYN3
-----END CERTIFICATE-----
Generated at Wed May 13 07:33:20 2026 by rpki-client