
$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/4978C5B2089911F0B2664480C4F9AE02.roa
File: 4978C5B2089911F0B2664480C4F9AE02.roa (raw, json)
Hash identifier: IQlH8r9Egkb1e2sl24fCnLCD+6CUuF8MDxQFVeoJ8rU=
Subject key identifier: 10:47:0E:9A:34:17:C7:4E:1D:75:5D:51:06:89:03:D3:4C:61:EB:37
Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Certificate serial: 1328
Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/4978C5B2089911F0B2664480C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:34:04 +0000
ROA not before: Wed 02 Apr 2025 17:16:06 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 23607
IP address blocks: 116.204.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4904 (0x1328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Validity
Not Before: Apr 2 17:16:06 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a4242c-de6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f3:57:ca:40:80:cb:5a:e9:b2:ef:bc:88:fc:
5d:b5:24:49:8a:b9:05:6d:c1:b1:74:69:25:52:cf:
c8:c5:b4:54:ef:fb:49:3f:26:99:4b:04:d0:ca:6a:
12:81:28:bc:c4:7d:bb:f2:c3:67:b5:78:8f:d1:91:
e0:22:23:19:bf:71:f2:ab:5a:24:87:fe:3e:08:ee:
5f:3e:22:fd:8d:20:ce:1e:1e:8c:b0:dc:df:9d:90:
cd:3c:21:19:97:e7:0b:88:93:35:89:b5:5f:b1:b3:
8f:6a:8d:8c:5a:84:9e:7e:da:33:01:88:d0:b9:7f:
45:41:e0:6b:a1:80:9e:2c:86:86:f0:50:3f:0a:ea:
6b:15:6e:b4:a9:cd:f7:98:2c:48:44:2f:f3:2f:75:
8c:e6:2f:4c:f0:5c:5c:dc:35:f2:a9:dd:05:fc:d2:
65:80:61:ea:6a:43:6b:ad:86:63:2d:dc:fa:d2:73:
fe:ac:90:71:62:40:a1:5e:09:72:25:7f:4c:f3:d7:
06:d6:60:60:56:c9:64:67:72:0c:8d:65:f1:89:c8:
1e:1c:45:ba:6f:13:fb:3a:e9:20:2f:d5:0f:f9:11:
43:9f:b9:7c:3c:6b:ae:32:53:63:2a:88:50:8e:87:
56:89:dd:7d:13:bb:fc:99:ee:1d:b5:6d:92:f1:ae:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:47:0E:9A:34:17:C7:4E:1D:75:5D:51:06:89:03:D3:4C:61:EB:37
X509v3 Authority Key Identifier:
keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/4978C5B2089911F0B2664480C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.204.167.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:54:b7:f6:9d:62:92:43:bc:f0:76:f9:f7:ca:bb:0e:80:07:
5b:c5:f6:80:45:c5:be:72:7f:25:30:fc:40:cc:db:24:87:8b:
2f:9a:f0:33:8e:de:be:82:76:6f:91:ee:ce:75:38:51:73:f6:
0e:7a:f1:bf:d8:91:71:22:b4:55:60:ed:fb:0e:97:52:67:95:
65:1f:63:23:e3:45:20:cf:3e:79:1c:1b:cf:1d:b2:b8:e8:5a:
30:d0:47:1e:9e:cf:64:e4:29:44:18:2f:91:84:ff:9e:82:8c:
0c:84:16:cf:d3:2b:91:ab:b3:22:24:67:01:25:29:12:0b:fd:
7a:ce:1b:05:bb:b3:87:ed:1d:8c:36:f9:0f:99:73:39:56:de:
8e:7f:66:af:37:9c:aa:9c:71:f4:71:5f:44:61:a7:25:d0:d7:
62:d1:40:fb:31:31:55:47:62:e7:e4:1c:76:15:79:fa:8e:0f:
68:36:2b:7a:e1:d6:00:4b:c2:aa:09:93:0e:d2:02:64:53:4f:
2b:d1:b2:5f:48:1e:ee:bd:e8:40:5e:88:0f:ec:cf:aa:5f:7f:
ec:56:dd:d4:14:80:b5:85:50:0f:db:f7:ea:da:38:49:9a:be:
8c:4a:ae:42:b7:ea:09:27:5b:51:33:fd:6c:c7:05:2a:1f:66:
df:e3:03:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:08 2026 by rpki-client