
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/A7FC3D6C041F11F1A6FA4A091E3D8C67.roa
File: A7FC3D6C041F11F1A6FA4A091E3D8C67.roa (raw, json)
Hash identifier: zqRSIq7TQ9YhehrRszjYHmmXVsq7Z1RZBr7dzybRlhI=
Subject key identifier: D3:F9:D8:09:6A:BA:20:6F:FA:41:A9:E0:B0:C1:E6:BC:1C:3A:8F:8D
Certificate issuer: /CN=A91273B6/serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Certificate serial: 67
Authority key identifier: 75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/A7FC3D6C041F11F1A6FA4A091E3D8C67.roa
Signing time: Sun 01 Mar 2026 10:55:52 +0000
ROA not before: Sat 07 Feb 2026 12:22:23 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 150142
IP address blocks: 49.143.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:52:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273B6, serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Validity
Not Before: Feb 7 12:22:23 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a41b38-f689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:ef:32:ce:81:f4:c7:3b:ab:a5:cc:b3:9a:
2f:36:93:e5:c7:e6:ab:6a:92:dc:c3:68:b9:12:f3:
f8:9d:4d:9c:df:8c:2a:23:e6:8f:a3:ba:b6:3d:63:
b4:0d:1e:e2:28:20:ad:4c:fb:5e:eb:e4:60:af:99:
7b:65:e8:73:b4:17:44:d0:f1:34:3e:6b:d1:39:c7:
d2:a5:11:0d:3e:14:04:30:78:13:32:ec:43:39:7a:
62:26:9c:34:d9:50:2b:cf:73:78:09:cf:c5:ce:b8:
77:22:e3:57:e9:55:2a:cf:55:e3:54:94:33:13:6b:
17:92:cc:cd:8b:20:a9:37:73:7a:34:68:23:df:b0:
6e:99:d1:4d:18:cb:d5:af:d7:37:62:ad:d1:2d:5d:
7c:d2:0b:35:4c:cf:a2:bc:c4:f8:cd:e0:76:28:f3:
4e:e1:7f:17:c3:2a:9a:8f:62:75:8a:e6:08:dd:ff:
c4:34:20:30:e3:10:e7:6d:8c:34:5a:8d:0a:17:79:
b1:2d:9b:43:f3:8c:d5:e0:57:0b:d4:c9:3f:8c:ef:
10:29:5a:e8:02:a3:dd:e7:93:03:7f:af:9a:10:08:
11:3f:21:a7:8b:4e:d9:09:0d:2c:2c:a9:93:0c:d0:
41:95:64:6c:80:63:77:09:e3:b8:fc:67:d9:7d:6e:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F9:D8:09:6A:BA:20:6F:FA:41:A9:E0:B0:C1:E6:BC:1C:3A:8F:8D
X509v3 Authority Key Identifier:
keyid:75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/A7FC3D6C041F11F1A6FA4A091E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
49.143.249.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:a7:b7:93:71:96:47:23:df:f1:7f:56:e1:7e:1d:f0:4d:f9:
b7:f0:0a:e0:b0:8b:a0:fe:0a:be:74:1b:32:69:44:ac:ad:98:
30:73:ee:2d:77:b4:2d:98:0a:80:ef:ad:49:6f:90:23:08:3f:
40:62:71:94:f1:cf:ba:b5:4a:90:b2:67:9b:ca:db:75:7d:e5:
0f:63:19:19:51:13:6e:d6:fa:9f:f6:a4:13:d4:9b:0c:38:5e:
3a:eb:b6:bb:a6:49:05:a7:6a:0a:81:ce:5f:40:b5:9d:b1:d0:
47:20:2d:c8:7d:c3:bf:fa:db:a4:cb:0d:0e:6d:e0:09:2d:33:
63:ca:4e:d1:28:65:7f:ac:37:aa:c8:8e:c8:c1:96:9d:56:1a:
3c:bf:3a:a2:16:d8:27:95:ac:eb:3a:10:00:aa:e2:b8:fe:6c:
4a:69:f2:7c:1f:21:b3:35:9c:44:a4:08:3d:22:10:e1:e4:de:
b7:c4:0a:03:fc:80:6d:ae:41:af:91:ee:f1:86:7d:56:45:57:
54:3e:d2:64:3d:20:a6:60:e4:96:71:00:3f:75:37:48:a8:d0:
a6:e5:23:4c:a3:88:df:08:5a:e8:fb:7a:6f:28:c2:09:5c:76:
53:f3:f0:45:19:64:bd:ea:d5:30:5c:0c:c1:44:66:9e:e1:76:
46:6d:f3:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:22 2026 by rpki-client