
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/AE5BAB8CA05B11ED9406DE26C4F9AE02.roa
File: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (raw, json)
Hash identifier: YKw1rlL31hVg1Btav4cBL6K8S7mM5RTM05NklurcJqw=
Subject key identifier: 49:B8:2E:19:AE:76:DE:06:01:83:81:E7:16:08:0D:43:AE:3C:F9:D2
Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial: 2616
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/AE5BAB8CA05B11ED9406DE26C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:20:22 +0000
ROA not before: Fri 02 Jan 2026 16:14:08 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4750
IP address blocks: 147.50.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9750 (0x2616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Validity
Not Before: Jan 2 16:14:08 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a48365-9e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:15:71:ca:54:c5:af:75:36:f2:67:fc:06:
6d:7a:0e:de:72:aa:6e:7a:52:f2:70:f2:51:21:1d:
cb:d9:ea:a0:26:65:fa:a8:c1:2d:1c:8a:0e:f3:af:
af:5d:ca:ac:71:a2:d1:bc:9d:78:06:47:78:ff:29:
d8:71:33:c8:e1:04:58:dd:44:68:97:f6:49:c1:91:
2e:7b:af:04:12:9e:b9:f4:81:f2:2a:8a:9f:97:4e:
03:b3:88:2b:14:81:20:58:03:05:4b:39:b8:22:52:
74:03:ee:ac:8f:b8:5e:cb:10:e0:54:06:fc:0e:d7:
5e:3c:fa:f9:19:34:91:6a:7a:7e:8e:cd:4a:3b:4c:
1b:cb:10:f3:15:50:b3:99:1c:df:7c:2c:35:49:5b:
00:51:55:eb:36:1c:c9:99:ea:d5:05:5e:60:93:26:
69:47:be:27:07:8d:62:20:da:74:74:ba:f4:43:c3:
f5:5b:59:22:82:7b:c0:f6:0f:d4:fe:a1:d1:a7:ba:
46:08:d1:55:2d:8c:b4:77:1e:d4:26:5a:d0:0f:58:
6d:0f:3b:39:58:3a:95:2e:74:03:1d:06:ae:ed:52:
43:21:fd:e4:9b:23:46:86:ee:15:1f:ac:9a:02:14:
d8:49:61:bb:3c:43:4f:af:56:d8:37:4d:38:f9:95:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B8:2E:19:AE:76:DE:06:01:83:81:E7:16:08:0D:43:AE:3C:F9:D2
X509v3 Authority Key Identifier:
keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/AE5BAB8CA05B11ED9406DE26C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
147.50.124.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0b:a8:05:81:66:79:18:40:c3:5c:c1:c1:6f:52:f3:45:1e:
11:08:f4:87:91:80:ff:40:ec:96:44:ee:1f:08:b4:60:c1:6d:
df:a3:bc:5a:cf:24:72:3b:26:5b:38:8b:27:7e:a7:91:8b:4d:
11:c6:72:9e:a5:f6:41:58:a3:0f:60:77:d1:53:86:86:4f:20:
b6:0e:b4:50:c9:fa:7e:e1:d0:de:4f:dd:b6:d1:87:68:fb:5e:
21:37:96:13:96:b6:be:0c:73:f7:ef:42:42:81:ed:8b:e8:6f:
57:47:8b:f3:54:99:35:df:2a:a5:d2:f8:88:4a:b5:82:0e:96:
ab:70:f2:bf:50:cb:f6:6a:7b:6e:1d:b5:28:e8:0d:7f:66:34:
a2:2e:6b:a6:cd:9c:b7:9b:15:d9:85:1d:c3:8b:3f:6f:42:de:
b1:a2:96:dd:6b:95:d4:d0:6e:2f:a1:b3:c4:48:e5:d6:27:0e:
a7:45:c2:27:e1:b9:15:03:d9:61:aa:ad:f0:18:90:ba:e3:ac:
f5:ff:d4:f1:96:f5:e4:a1:33:42:74:99:5e:8b:f7:9e:fe:3e:
c1:6b:0d:11:9b:4d:14:ad:cb:51:6d:7d:03:39:86:72:33:9d:
29:11:b4:7a:b9:da:75:ea:1b:42:42:c5:04:f2:73:65:ce:1c:
4e:7e:f2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:59 2026 by rpki-client