
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/E22BD636AC5011EBA37CCA28C4F9AE02.roa
File: E22BD636AC5011EBA37CCA28C4F9AE02.roa (raw, json)
Hash identifier: svVIYMOHHISnIzFT8WuFL4ZZ7FcD/VousWYFm3mhG44=
Subject key identifier: 4B:B5:F0:25:C3:1F:3F:80:2E:B8:7B:DD:F5:F3:AF:85:5A:9A:BF:D9
Certificate issuer: /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829
Certificate serial: 068E
Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/E22BD636AC5011EBA37CCA28C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:35:07 +0000
ROA not before: Sat 06 Dec 2025 21:35:13 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 55885
IP address blocks: 49.156.48.0/22 maxlen: 22
49.156.48.0/24 maxlen: 24
49.156.49.0/24 maxlen: 24
49.156.50.0/24 maxlen: 24
49.156.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl
rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1678 (0x68e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BD7, serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829
Validity
Not Before: Dec 6 21:35:13 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4327b-6d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:7f:b0:d2:94:5d:ad:d7:34:4f:fb:a8:05:
b8:f7:5f:3d:a3:48:a6:cc:0b:3e:d9:5b:f7:2f:7c:
a3:c9:de:18:98:96:48:13:bd:ce:66:cc:7b:a5:27:
cf:ef:26:43:ad:4c:3a:0b:0f:a6:1d:d6:89:58:38:
a8:f0:0a:93:b0:8f:97:4c:b7:12:49:3a:f6:86:33:
d9:86:1d:42:46:98:ef:10:7e:a5:d6:4c:0e:63:a5:
87:2e:73:08:ec:93:6c:b4:71:15:36:01:11:1e:57:
cd:e3:33:a7:65:80:02:fa:43:8e:4e:03:d2:60:53:
dd:ba:fd:e5:13:70:8c:38:63:e6:66:54:23:90:c2:
c2:8b:8b:91:85:7f:9b:0f:b5:38:cf:ac:66:09:22:
93:97:ae:3b:a1:11:d8:bb:77:5d:e2:71:d3:2f:a6:
09:00:ad:82:22:5b:d7:e1:62:b3:a0:e4:8c:c3:4b:
eb:0f:ef:79:9a:d4:b7:a7:1d:30:b3:ca:91:c6:b7:
e1:4e:4e:7c:44:13:66:eb:fd:2a:17:ea:c5:6d:94:
6a:29:95:48:cf:da:f2:5f:e5:e6:9d:cf:4a:48:00:
e9:cd:7f:53:50:aa:85:93:05:20:32:9a:02:e7:b5:
fc:0a:52:13:34:e9:8b:3c:63:b8:a9:d3:2e:20:77:
14:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B5:F0:25:C3:1F:3F:80:2E:B8:7B:DD:F5:F3:AF:85:5A:9A:BF:D9
X509v3 Authority Key Identifier:
keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/E22BD636AC5011EBA37CCA28C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.156.48.0/22
Signature Algorithm: sha256WithRSAEncryption
90:1f:a8:80:00:60:6a:53:58:ac:15:6a:8a:c8:67:fe:3b:8c:
ec:6d:03:22:e4:b8:7f:30:81:71:b5:d0:ed:71:6f:5e:eb:12:
cd:85:c1:98:91:df:64:8d:a8:5c:70:48:55:ea:66:04:7d:d1:
c0:49:92:7a:73:16:67:28:c0:2c:bd:94:ea:bf:1f:a7:d3:73:
58:1d:42:ab:ce:13:0c:98:2a:2a:61:1a:9d:df:f7:67:b7:8a:
56:27:98:81:d5:4a:1b:ea:cf:2b:53:9a:c9:0b:0f:99:d5:29:
65:59:33:47:9b:31:f3:b9:20:a7:ec:5e:7e:f7:dd:f6:09:d0:
04:14:45:6d:7e:53:ee:30:b8:7c:c8:2c:a8:9a:3e:75:6a:ad:
38:aa:f9:9f:ee:86:ee:0c:d8:67:f2:da:7b:cb:eb:18:2c:d0:
e0:c6:f4:cc:5d:f1:51:60:a5:13:ff:d9:db:16:82:65:10:88:
d9:ce:d5:9c:6b:e6:87:6a:2a:53:81:d8:0d:48:a4:c7:16:a1:
1a:b0:ce:db:9a:c3:3c:9f:13:cb:c2:63:12:2d:ec:50:04:1d:
b7:cb:4a:7e:29:6f:62:d1:46:a5:27:68:d3:d3:9f:28:21:38:
6c:19:a1:a8:95:ee:ca:07:cc:6c:ca:65:1b:1f:73:d3:a1:c2:
8b:5d:8a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:10 2026 by rpki-client