
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/11749BE62DA511F1AB5ACB70A2833773.roa
File: 11749BE62DA511F1AB5ACB70A2833773.roa (raw, json)
Hash identifier: u1IB5dE51O5NoBXF8I3dV5NS6opSVbCQW+k0AqG4/jY=
Subject key identifier: 56:E7:67:42:5B:DD:B7:5C:EE:3B:0F:76:81:4A:B1:35:0C:82:E5:52
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: B4
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/11749BE62DA511F1AB5ACB70A2833773.roa
Signing time: Wed 01 Apr 2026 08:30:42 +0000
ROA not before: Wed 01 Apr 2026 08:30:42 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 57402
IP address blocks: 63.216.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Apr 1 08:30:42 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69ccd7b1-a82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9a:5c:02:0e:b6:eb:7f:45:ae:bf:33:05:08:
ed:89:a7:73:b4:b8:70:45:b2:61:91:44:6f:66:77:
33:5c:a2:bb:de:bf:bf:e3:9d:53:db:7c:bb:35:36:
11:57:0d:2c:37:2b:88:0a:32:08:fb:51:67:fb:42:
04:0d:3e:80:dc:c7:aa:e8:55:db:23:1d:50:d0:ea:
3f:b5:0e:6c:ec:ff:18:2b:18:86:0f:eb:4d:f3:79:
05:a9:90:ca:49:21:52:de:8b:89:8d:14:da:39:19:
27:ac:3c:cd:57:f6:44:94:1f:a0:cb:ad:0f:69:4a:
a4:8e:89:db:b7:3a:1a:49:76:bd:fe:7a:ad:bf:b7:
94:74:13:45:d6:6c:01:be:f1:05:c5:e8:97:7a:18:
cc:2f:1e:9a:7e:89:94:9d:f9:3f:60:01:4a:e2:7e:
90:e4:d8:88:91:fa:9a:40:be:a7:73:6f:a4:7a:de:
f4:fe:0e:69:ac:f0:f9:6d:b8:59:a2:82:47:c9:a9:
d3:12:03:8f:90:7a:1e:5d:f1:23:41:1a:f4:39:cc:
f7:fd:64:b2:a7:c3:e1:58:fd:35:30:bb:f2:bf:d0:
10:b2:45:c8:a0:6d:e1:aa:43:1e:3a:84:28:d8:ae:
d3:c2:5e:b6:ac:87:62:ec:3a:31:7a:ac:a6:d0:ac:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E7:67:42:5B:DD:B7:5C:EE:3B:0F:76:81:4A:B1:35:0C:82:E5:52
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/11749BE62DA511F1AB5ACB70A2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
63.216.92.0/22
Signature Algorithm: sha256WithRSAEncryption
43:79:22:82:34:9c:2c:1b:2d:36:7e:38:0c:05:d5:a8:7f:e7:
1c:a0:fd:12:41:54:5a:2b:96:fa:97:0f:64:38:cf:b4:bd:88:
3e:fd:ca:7e:49:2e:b9:3a:36:4b:13:b0:45:07:5d:1d:2a:5a:
89:dc:a2:d0:0f:50:23:28:ea:92:c0:f8:cf:92:f5:44:dd:38:
9e:ed:1f:e7:a2:74:df:ff:1c:f5:aa:c9:dd:01:80:1a:0b:49:
47:4f:ec:ab:00:c5:db:06:b7:8d:f5:ea:b8:9f:c3:d3:31:82:
e4:a5:b2:93:3c:88:ff:b9:e2:20:70:4b:ce:ca:28:be:87:9f:
a7:0d:2d:9a:72:04:4d:21:0c:48:82:2b:27:2f:34:cc:47:0b:
88:73:73:9e:e7:04:17:ff:89:d7:71:45:0f:81:e7:2d:87:db:
7a:c8:20:0f:3e:fb:a2:82:c0:62:5a:f7:25:cc:e8:4b:dd:ba:
10:59:28:01:23:9a:15:a2:a9:54:fb:ef:b4:d3:54:88:58:5b:
f9:79:92:48:02:0a:61:63:7a:cb:89:8d:ad:b6:04:60:f1:e4:
f1:bf:fe:b1:a4:26:0d:85:19:6c:63:3e:3e:62:1a:0f:ef:31:
5c:1c:d5:18:4e:ce:d3:7e:b5:80:91:e1:23:10:0c:84:85:5a:
45:ec:c3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:39 2026 by rpki-client