
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/FD86FDF6707311F1B807F94B77A30FBC.roa
File: FD86FDF6707311F1B807F94B77A30FBC.roa (raw, json)
Hash identifier: gDZWZJSsCK5hepLcVhYuiySc2jdwfmmWoqRN6NOgOZY=
Subject key identifier: F0:DB:B4:68:F3:9C:6C:4C:BB:02:CF:E8:7C:1D:09:67:82:D9:0E:CD
Certificate issuer: /CN=A91F090C/serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1
Certificate serial: 3B
Authority key identifier: 8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/FD86FDF6707311F1B807F94B77A30FBC.roa
Signing time: Wed 22 Jul 2026 08:50:54 +0000
ROA not before: Wed 22 Jul 2026 08:50:54 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45905
IP address blocks: 119.15.156.0/24 maxlen: 24
119.15.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl
rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F090C, serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1
Validity
Not Before: Jul 22 08:50:54 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a60846d-5296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:5e:00:7e:c9:6a:76:a4:02:4d:e2:40:dc:
80:45:c1:f7:a5:08:c5:6c:e0:08:20:bd:10:65:95:
3e:10:2b:ef:b1:61:f2:e5:3a:ff:9d:d7:63:fd:ff:
b1:29:73:ce:1c:0a:7c:7b:70:27:83:a8:cc:b1:ae:
40:f9:f2:6b:aa:ce:d6:29:7d:9b:38:70:de:99:f9:
c0:e7:d9:92:7f:31:10:ce:95:30:94:0b:52:9f:1a:
6e:4a:1f:d7:46:ae:2d:42:2f:8a:82:09:23:bb:15:
06:dd:36:d1:d2:59:fa:6c:8f:f0:51:e4:ba:3b:af:
3f:37:5c:ec:47:07:6e:8c:dc:23:a5:71:19:78:e6:
95:7f:44:e9:33:de:51:df:a2:94:60:a3:65:1a:0b:
b0:04:e2:67:71:29:f8:13:85:1b:7c:67:82:ee:64:
b2:7f:44:61:44:38:00:1b:45:da:23:97:16:57:61:
6d:59:07:e7:bb:a5:cd:19:3b:00:83:e7:80:46:bc:
2d:99:b7:6b:ff:5c:38:bb:f3:18:7c:2d:28:88:20:
c2:65:15:4f:0d:15:56:ae:0d:a3:fc:21:b6:d5:d9:
a8:70:ef:12:20:7c:e3:a9:84:fa:34:2f:9e:0b:00:
c2:b6:ca:33:be:c0:83:89:09:43:90:cf:40:cf:7c:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DB:B4:68:F3:9C:6C:4C:BB:02:CF:E8:7C:1D:09:67:82:D9:0E:CD
X509v3 Authority Key Identifier:
keyid:8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/FD86FDF6707311F1B807F94B77A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
119.15.156.0/23
Signature Algorithm: sha256WithRSAEncryption
74:6f:17:2b:69:c4:54:45:26:a7:74:cb:8a:24:db:cb:51:13:
16:31:fd:05:45:37:c0:06:4b:e6:79:1b:70:17:c8:2e:55:cf:
da:c7:a8:9b:61:5f:47:96:0b:74:29:15:f5:0e:84:39:d8:c4:
19:d2:1e:15:d1:e1:b4:24:85:3c:73:28:e1:47:49:e9:4c:ac:
71:ef:fa:95:d7:4f:58:e5:20:cc:df:39:0f:f6:1c:ac:eb:dc:
19:a7:fa:4f:0e:86:e6:54:b5:76:b5:ab:d3:27:2b:bd:d3:bf:
87:49:2f:83:0f:e9:37:dd:0e:f2:9b:58:33:42:04:05:2e:a2:
90:f4:36:89:94:e9:cf:f6:76:ea:6b:09:4c:f1:3d:ca:73:25:
25:e2:01:d9:56:b0:a4:f6:5b:31:26:2d:81:5a:08:1e:af:88:
13:07:69:ee:07:6a:86:80:2d:91:b0:80:f6:11:d5:7e:17:f6:
9f:22:08:68:f4:59:4c:21:83:20:28:32:bf:1d:83:87:41:02:
00:c7:df:ae:24:cb:83:50:e7:a6:7f:ea:1e:89:96:39:c1:1c:
c0:89:70:f9:a4:bc:3b:93:84:fd:b2:55:c8:fc:fa:97:8b:cd:
39:ec:27:fd:ef:05:e3:5a:aa:2b:2c:1a:80:5b:b3:8d:28:34:
f1:56:6f:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:16 2026 by rpki-client