
$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/48B8F476089911F0B2664480C4F9AE02.roa
File: 48B8F476089911F0B2664480C4F9AE02.roa (raw, json)
Hash identifier: KjogEvmeziwi8gySjs9Ywm3IXf9Y7i+lrZLVGgULe+c=
Subject key identifier: A7:5C:4F:E9:5E:75:4E:BB:F1:05:FF:45:DD:0E:D4:23:CB:C6:09:C3
Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Certificate serial: 133B
Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/48B8F476089911F0B2664480C4F9AE02.roa
Signing time: Mon 30 Mar 2026 17:21:16 +0000
ROA not before: Mon 30 Mar 2026 17:21:16 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 141432
IP address blocks: 116.204.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4923 (0x133b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Validity
Not Before: Mar 30 17:21:16 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cab10c-e96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:b2:2b:22:cd:61:c5:87:d2:49:5c:4e:6e:
43:0d:68:b7:6e:98:03:80:8c:cf:f5:52:15:26:f2:
f0:ca:d9:18:78:4c:27:e9:14:07:2a:68:fa:8e:f9:
26:32:a7:f0:88:07:fd:c0:0d:2b:57:cb:64:11:43:
64:96:b5:aa:b8:e2:81:ec:a2:4e:04:0a:f9:bb:0b:
5e:17:26:b4:49:34:77:81:cd:32:c4:dc:46:68:a4:
88:9f:09:5c:d9:1b:36:c2:6f:04:e7:ca:f0:cf:08:
72:73:ca:c3:83:4f:d4:99:62:9b:c2:81:57:1e:1c:
db:9d:f6:80:de:5b:b7:3e:e8:91:15:66:74:26:0e:
fe:66:52:2c:67:74:16:d9:63:18:58:70:d0:ec:a0:
25:e3:29:fd:11:63:06:64:c2:e2:96:71:d8:56:4c:
40:d7:bb:ab:2a:a8:73:fe:0e:c7:0a:b9:71:0d:4f:
96:0b:8f:a1:45:4b:30:ed:1d:0c:02:d8:48:f6:6e:
2c:39:33:67:96:a1:e8:68:91:b6:c0:cb:d7:29:60:
74:d5:b8:dc:44:bd:1e:d7:15:f1:66:5d:6c:6f:7a:
09:bd:a9:4e:d0:80:b8:0b:7d:ab:c4:10:23:0c:38:
81:3f:89:f3:41:4f:35:84:aa:b1:84:26:47:0b:8a:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5C:4F:E9:5E:75:4E:BB:F1:05:FF:45:DD:0E:D4:23:CB:C6:09:C3
X509v3 Authority Key Identifier:
keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/48B8F476089911F0B2664480C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.204.167.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d8:cf:31:62:48:fb:39:0c:e0:4c:2e:bd:6d:76:69:17:50:
7d:58:80:6c:a3:f6:10:11:95:62:14:21:e6:31:52:2b:c5:aa:
ff:0e:8f:41:e6:2d:35:97:7e:3a:0b:70:08:58:b3:b7:8f:fe:
96:a1:f9:cd:60:e1:e5:af:09:98:c1:06:f5:fe:ef:49:e8:20:
41:6f:a3:9b:d6:c3:ce:75:33:c2:66:be:0f:70:d2:95:9d:0c:
28:28:28:88:c2:8a:64:ff:c3:00:ef:e4:18:a4:a2:99:3d:bf:
28:21:6e:4d:c6:1f:40:35:ae:5d:6b:c9:d6:23:9a:94:d3:e3:
76:7a:60:82:d8:d8:4f:ed:98:bc:eb:0b:ca:23:03:2c:51:31:
0d:07:fb:0f:a1:c9:f7:79:28:3f:6c:71:9e:6c:09:3f:df:65:
33:8a:d3:a7:9a:11:98:a0:39:54:85:cc:44:86:63:42:83:20:
9f:1f:3d:de:ec:e6:5b:83:30:91:0f:10:60:e4:84:36:27:2b:
12:27:34:02:3b:3a:f3:26:0a:b3:a8:3b:fe:73:dd:55:b8:a3:
06:da:d5:7e:bb:15:33:eb:63:3d:19:f1:87:0a:bb:f7:91:c9:
d0:71:9a:ce:34:81:eb:15:0b:a2:76:12:ce:3a:37:82:41:4e:
d6:22:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:34:47 2026 by rpki-client