
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/71D21A40A05E11EDAC005F21C4F9AE02.roa
File: 71D21A40A05E11EDAC005F21C4F9AE02.roa (raw, json)
Hash identifier: EG8PFOOesqWPvVdNHM52edAdaM9JSZK6Y4SC+lEpZu8=
Subject key identifier: 51:16:C7:AF:7F:43:7A:1B:1B:46:91:9D:29:96:66:52:79:0C:DE:D8
Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial: 2612
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/71D21A40A05E11EDAC005F21C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:20:18 +0000
ROA not before: Fri 02 Jan 2026 16:14:04 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 37932
IP address blocks: 147.50.197.0/24 maxlen: 24
147.50.198.0/24 maxlen: 24
147.50.199.0/24 maxlen: 24
147.50.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9746 (0x2612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Validity
Not Before: Jan 2 16:14:04 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a48362-d560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:ec:ac:86:cd:61:b4:74:d6:25:3f:3b:29:
b0:d2:1a:2b:c2:d4:5b:40:a5:a4:5a:20:3b:2a:00:
da:38:2d:b9:29:0d:73:bf:c5:e5:05:79:67:2c:06:
a6:af:26:79:71:43:3b:f0:0e:07:91:48:0a:af:0a:
5f:4b:55:0a:e5:1d:9b:7d:95:24:34:c3:55:1b:5b:
57:16:14:a0:25:e8:6e:2f:6b:a5:8d:b0:c2:ee:4a:
50:26:7c:4c:3f:8d:ca:bc:bb:81:f0:50:2b:2a:db:
26:8f:46:69:a7:e8:a2:bd:e6:4f:0f:9a:b1:24:f7:
ef:57:00:fa:a2:91:6e:4e:8c:fa:64:f3:e6:b4:b4:
79:e4:a6:e5:1f:95:68:6c:e9:9b:35:5c:79:e7:d3:
0e:2f:bc:e1:06:31:04:dd:82:54:5f:71:b9:94:22:
a3:ac:01:2b:fc:0a:26:c7:c1:e0:1e:25:14:bc:e7:
54:f1:11:33:80:62:19:33:35:87:32:54:1d:45:14:
f2:17:2a:14:20:b9:d3:70:5e:0c:ae:2f:c8:29:d6:
01:a7:01:bb:e6:a2:7d:57:bf:02:f9:4e:ce:91:9e:
fa:f9:fb:b8:c6:18:bf:a0:c6:f9:51:f5:16:b6:3d:
82:bc:0f:0b:7e:fb:eb:79:e2:52:b8:ff:39:64:6e:
40:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:16:C7:AF:7F:43:7A:1B:1B:46:91:9D:29:96:66:52:79:0C:DE:D8
X509v3 Authority Key Identifier:
keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/71D21A40A05E11EDAC005F21C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
147.50.197.0-147.50.200.255
Signature Algorithm: sha256WithRSAEncryption
a7:b7:83:b3:9c:0c:7f:3e:30:02:6b:3f:46:93:6a:78:63:7e:
f1:fa:f8:03:6f:15:0e:e3:7b:d3:63:af:bd:0b:c4:39:d1:24:
c3:11:d3:7e:60:15:eb:13:ce:ce:c4:f4:d7:48:7d:05:12:3c:
27:44:4e:51:d8:a7:c2:7a:70:c2:bb:9e:42:93:cb:80:64:e5:
34:e8:d5:47:83:80:c0:b2:6b:a4:c2:2e:00:0f:15:19:31:0c:
9b:1c:45:8d:d2:3b:f1:f6:e1:52:6b:67:c2:7e:97:69:19:35:
ec:cd:91:54:b7:c0:7d:f5:57:3b:13:8b:45:11:49:0f:f1:69:
8d:a5:78:72:08:24:05:ac:9d:67:2f:71:70:3f:f8:f3:9b:05:
09:b3:93:6c:41:87:d9:7f:bc:05:78:a6:83:5a:3e:c0:82:2b:
32:b6:02:64:0f:c4:a0:9d:14:5e:d2:c9:4b:90:d4:b0:6b:1e:
4d:18:87:10:6b:13:a1:7c:65:8d:e5:7e:25:5c:9c:d5:f0:e1:
ef:8c:70:eb:7e:6b:db:7a:2a:c5:ec:d1:3d:77:c1:b7:63:25:
c8:a5:60:31:5a:76:cc:8a:23:aa:14:5c:04:4c:67:25:f9:e6:
b4:5f:10:56:f8:de:8e:65:06:e9:73:5e:77:09:8c:47:3a:e2:
92:ec:fc:6e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICJhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx
NDhDNkI0RkEwHhcNMjYwMTAyMTYxNDA0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODM2Mi1kNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp7jsrIbNYbR01iU/Oymw0horwtRbQKWkWiA7KgDaOC25KQ1zv8XlBXlnLAam
ryZ5cUM78A4HkUgKrwpfS1UK5R2bfZUkNMNVG1tXFhSgJehuL2uljbDC7kpQJnxM
P43KvLuB8FArKtsmj0Zpp+iiveZPD5qxJPfvVwD6opFuToz6ZPPmtLR55KblH5Vo
bOmbNVx559MOL7zhBjEE3YJUX3G5lCKjrAEr/Aomx8HgHiUUvOdU8REzgGIZMzWH
MlQdRRTyFyoUILnTcF4Mri/IKdYBpwG75qJ9V78C+U7OkZ76+fu4xhi/oMb5UfUW
tj2CvA8LfvvreeJSuP85ZG5AhQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFFEWx69/
Q3obG0aRnSmWZlJ5DN7YMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG
NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvRDkwMTEyODQzRjRGMTFFNTk1MTJFMDRDQzRGOUFFMDIvNzFEMjFBNDBB
MDVFMTFFREFDMDA1RjIxQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBACTMsUDBACTMsgwDQYJKoZIhvcNAQELBQADggEBAKe3g7OcDH8+
MAJrP0aTanhjfvH6+ANvFQ7je9Njr70LxDnRJMMR035gFesTzs7E9NdIfQUSPCdE
TlHYp8J6cMK7nkKTy4Bk5TTo1UeDgMCya6TCLgAPFRkxDJscRY3SO/H24VJrZ8J+
l2kZNezNkVS3wH31VzsTi0URSQ/xaY2leHIIJAWsnWcvcXA/+PObBQmzk2xBh9l/
vAV4poNaPsCCKzK2AmQPxKCdFF7SyUuQ1LBrHk0YhxBrE6F8ZY3lfiVcnNXw4e+M
cOt+a9t6KsXs0T13wbdjJcilYDFadsyKI6oUXARMZyX55rRfEFb43o5lBulzXncJ
jEc64pLs/G4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:06 2026 by rpki-client