
$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/48B8F476089911F0B2664480C4F9AE02.roa
File: 48B8F476089911F0B2664480C4F9AE02.roa (raw, json)
Hash identifier: MuNuMkxAFUR1Wh7csTaD0KC8yfFyrk8OC925bsZ2OHQ=
Subject key identifier: 39:BF:8A:87:9A:83:50:B0:21:AA:00:E2:E9:27:01:94:FC:2D:5F:7E
Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Certificate serial: 1327
Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/48B8F476089911F0B2664480C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:34:03 +0000
ROA not before: Wed 02 Apr 2025 17:16:05 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 141432
IP address blocks: 116.204.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4903 (0x1327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Validity
Not Before: Apr 2 17:16:05 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a4242b-ec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:34:27:fa:00:cc:f0:2b:ca:96:56:f5:a3:
cc:19:02:99:ff:cf:9a:91:cc:9a:3e:98:d2:fa:3b:
ca:cd:89:be:97:7d:40:92:dc:0e:00:e4:1b:77:e2:
78:61:03:f5:aa:71:52:3a:b1:d8:6c:1b:3b:13:b1:
87:2f:77:dd:c8:ce:5c:c6:db:83:89:28:f5:83:10:
48:f0:d8:4f:30:9e:ca:07:30:6a:55:1d:29:50:0b:
70:76:da:fd:2a:3d:be:89:6b:4c:0c:3e:f0:e0:74:
0c:44:57:9d:cb:90:2b:59:e5:0b:ab:16:79:1c:9d:
07:b0:7e:c7:0b:98:5c:70:8f:03:1f:84:0c:9b:3a:
5c:4b:42:98:f2:d3:e2:0d:5f:28:05:51:12:bc:b9:
24:e8:65:76:fa:f7:31:77:81:48:26:b6:8d:6c:5b:
56:aa:6c:f2:e4:4a:c1:b0:19:c8:e8:c9:ea:66:d5:
84:28:36:e2:8b:9e:f0:98:8b:88:26:01:29:95:e1:
00:c1:ff:c0:08:6a:46:74:7e:58:4e:5d:03:dd:07:
22:bb:1e:91:2c:4c:88:a2:df:ac:05:c9:4a:9a:9d:
9d:14:1a:08:be:03:aa:79:19:eb:7b:4a:0f:23:79:
ec:5c:df:67:35:17:c6:45:14:b9:02:50:5a:31:65:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BF:8A:87:9A:83:50:B0:21:AA:00:E2:E9:27:01:94:FC:2D:5F:7E
X509v3 Authority Key Identifier:
keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/48B8F476089911F0B2664480C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.204.167.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:45:2e:b6:c2:19:5c:fa:8e:35:65:01:68:ae:0f:d6:5b:6f:
f5:f8:e3:4b:f8:92:e8:2d:83:49:f6:f1:ef:f4:aa:f9:9c:66:
5e:51:e5:5b:06:9d:d2:94:66:83:7c:76:a9:52:d2:ca:dd:77:
81:c0:00:97:29:45:3a:66:bd:33:e6:e7:3e:08:13:91:87:a6:
17:11:e3:38:bf:ac:36:33:47:e6:a5:3a:43:e4:6b:a2:18:b9:
1b:1c:43:02:14:55:96:eb:e2:20:62:f6:40:4a:d6:39:fe:17:
bb:fa:87:9b:ae:b4:ff:02:74:f2:29:d4:56:ca:a2:eb:e3:6d:
25:c8:cb:2c:4d:7b:3a:a4:a5:55:d4:6c:2a:5c:78:7c:e0:90:
0b:d3:3e:d4:db:e0:47:1d:38:48:a3:53:d5:87:7a:1b:ab:25:
5d:3a:3e:a6:d2:fe:ba:00:01:5b:5d:bc:60:89:ee:4f:26:3e:
ea:86:46:a8:b0:2f:3b:59:06:cb:e1:83:4a:29:90:99:05:59:
54:72:f0:b5:53:b2:d8:5f:85:b4:aa:b8:0d:e9:0d:ce:59:8e:
5d:35:f8:c3:f7:48:ce:97:15:5e:e9:5c:4e:08:fc:1e:e0:0f:
3a:3e:4b:c0:a3:24:10:89:aa:9e:39:f1:d9:0c:3b:f6:12:33:
70:a1:95:a8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICEycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE1RDUxMTAvBgNVBAUTKDQ3NkY1NzJBMzgwMjM2QUYzM0Y2MkQ4MkE1QkEyNjRE
MkZCQkFEN0MwHhcNMjUwNDAyMTcxNjA1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjQyYi1lYzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnrw0J/oAzPArypZW9aPMGQKZ/8+akcyaPpjS+jvKzYm+l31AktwOAOQbd+J4
YQP1qnFSOrHYbBs7E7GHL3fdyM5cxtuDiSj1gxBI8NhPMJ7KBzBqVR0pUAtwdtr9
Kj2+iWtMDD7w4HQMRFedy5ArWeULqxZ5HJ0HsH7HC5hccI8DH4QMmzpcS0KY8tPi
DV8oBVESvLkk6GV2+vcxd4FIJraNbFtWqmzy5ErBsBnI6MnqZtWEKDbii57wmIuI
JgEpleEAwf/ACGpGdH5YTl0D3Qciux6RLEyIot+sBclKmp2dFBoIvgOqeRnre0oP
I3nsXN9nNRfGRRS5AlBaMWXLawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDm/ioea
g1CwIaoA4uknAZT8LV9+MB8GA1UdIwQYMBaAFEdvVyo4AjavM/YtgqW6Jk0vu618
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTVENS80RUJDQUYyNkQw
QUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05xOHo5aTJDcGJvbVRTLTdy
WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1IyOVhLamdDTnE4ejlpMkNwYm9tVFMtN3JYdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTE1RDUvNEVCQ0FGMjZEMEFGMTFFOEFBRUIwNzU2QzRGOUFFMDIvNDhCOEY0NzYw
ODk5MTFGMEIyNjY0NDgwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAdMynMA0GCSqGSIb3DQEBCwUAA4IBAQAtRS62whlc+o41ZQForg/W
W2/1+ONL+JLoLYNJ9vHv9Kr5nGZeUeVbBp3SlGaDfHapUtLK3XeBwACXKUU6Zr0z
5uc+CBORh6YXEeM4v6w2M0fmpTpD5GuiGLkbHEMCFFWW6+IgYvZAStY5/he7+oeb
rrT/AnTyKdRWyqLr420lyMssTXs6pKVV1GwqXHh84JAL0z7U2+BHHThIo1PVh3ob
qyVdOj6m0v66AAFbXbxgie5PJj7qhkaosC87WQbL4YNKKZCZBVlUcvC1U7LYX4W0
qrgN6Q3OWY5dNfjD90jOlxVe6VxOCPwe4A86PkvAoyQQiaqeOfHZDDv2EjNwoZWo
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:22 2026 by rpki-client