
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/E166AF6C7DBB11E8B2F55A1CC4F9AE02.roa
File: E166AF6C7DBB11E8B2F55A1CC4F9AE02.roa (raw, json)
Hash identifier: HLjSIYtjXtx1taTVjzrvHsrBb9bP9yfl7hOESvIsT6Q=
Subject key identifier: 4A:E1:C4:A7:70:60:FD:45:30:C1:F8:EE:55:D7:84:7A:51:C7:CC:DE
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2BAF
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/E166AF6C7DBB11E8B2F55A1CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:22:49 +0000
ROA not before: Fri 02 Jan 2026 16:12:52 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 132681
IP address blocks: 49.231.25.0/24 maxlen: 24
49.231.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11183 (0x2baf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Jan 2 16:12:52 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a49209-bc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:d3:88:8b:6e:80:ed:5e:ea:dc:98:59:9e:
09:26:8b:a0:e8:d5:aa:a9:90:df:e8:1b:07:91:d7:
56:03:11:ab:51:ad:2f:a2:72:7a:31:b5:09:bd:ca:
7a:02:47:1e:62:17:95:ff:6a:e4:0f:c2:67:d1:1b:
a8:b4:45:a6:04:20:ad:e1:82:3f:d3:70:09:a8:17:
8f:b2:4a:cc:b4:77:03:4e:a6:74:4b:72:80:7d:4f:
73:28:d3:8c:bb:ab:1d:a7:bd:18:51:e1:86:74:34:
b5:f8:df:5b:83:ff:d4:c2:54:17:f0:69:7d:92:e6:
5e:82:b3:97:b9:d9:97:92:a8:4b:5c:9d:b4:bb:42:
1d:b0:38:4c:ea:f1:46:17:89:56:b9:bb:ce:d9:a8:
f3:88:86:cb:a0:da:91:df:e0:9d:02:78:31:0c:2f:
85:2d:be:e4:55:d0:9b:e0:32:a1:1e:93:1d:f9:d8:
88:d3:eb:3c:b2:f6:b1:46:d7:41:e5:b6:a3:ec:09:
0d:80:8e:f0:95:62:13:1f:66:1a:62:b4:05:27:82:
f9:b7:e6:db:18:fe:f0:90:1b:3e:d2:39:85:f4:89:
e3:a5:12:af:56:55:e0:f5:bb:44:f9:f7:c0:ec:e5:
0e:2b:94:74:c4:c0:46:3a:1b:5c:80:ec:ce:ec:e8:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E1:C4:A7:70:60:FD:45:30:C1:F8:EE:55:D7:84:7A:51:C7:CC:DE
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/E166AF6C7DBB11E8B2F55A1CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.231.25.0-49.231.26.255
Signature Algorithm: sha256WithRSAEncryption
a9:9e:c3:b9:ed:26:51:6a:6b:72:e8:0e:2b:7d:ef:af:9e:cc:
6b:c0:0b:e1:65:db:03:4e:9b:ea:f6:3f:8f:4d:59:5d:0e:27:
fd:05:0a:88:a3:20:2c:a6:40:2d:5e:02:d7:c0:88:42:c4:b2:
e1:8a:ff:ff:9e:ba:07:57:3b:5b:c3:bd:f6:c3:5c:81:64:65:
8e:3c:ae:2c:9f:b4:86:c8:6c:33:b7:ce:7e:c6:c8:a1:96:c7:
61:b2:e4:3f:25:4f:4a:ee:75:c1:a7:62:87:8d:58:44:74:52:
b6:e1:1f:b6:53:7e:62:06:6b:9d:70:37:0f:fd:bc:f4:69:83:
c5:37:9d:2a:ba:d1:4d:a3:8e:1b:2b:48:dc:f8:37:c6:53:a9:
aa:d7:11:8b:26:82:84:69:7b:74:79:b0:72:f8:ad:be:69:76:
39:93:52:65:c0:c8:e9:15:10:6d:3d:96:18:64:07:84:40:7e:
31:67:ed:56:2f:10:68:01:c5:45:94:d6:9a:25:cf:21:66:9c:
a6:c8:cd:1c:61:df:fa:7f:21:e4:7f:90:34:73:7f:ba:fe:03:
76:39:3f:06:c9:03:84:39:56:8a:99:e9:22:3e:72:6b:0e:73:
83:cc:17:0f:ca:2f:23:de:77:9c:b2:3d:8a:25:8a:fb:5c:60:
92:3e:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:16 2026 by rpki-client