
$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/5D117282A7F911EF8E7B1773C4F9AE02.roa
File: 5D117282A7F911EF8E7B1773C4F9AE02.roa (raw, json)
Hash identifier: ANjzdpRTnZYnb2IgP9uL0uuWKgG+fxMLmh0yV+GGQqk=
Subject key identifier: 37:8F:8C:4F:08:0B:30:71:EC:97:93:85:5A:7C:82:3A:54:E3:B3:0C
Certificate issuer: /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
Certificate serial: F9
Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/5D117282A7F911EF8E7B1773C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:12:17 +0000
ROA not before: Mon 19 Jan 2026 05:24:37 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139326
IP address blocks: 160.250.48.0/23 maxlen: 23
160.250.48.0/24 maxlen: 24
160.250.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl
rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
Validity
Not Before: Jan 19 05:24:37 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a41f11-3bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:8a:8d:01:dd:72:e7:8d:c9:51:d9:a3:26:
3c:ca:92:e7:2e:d8:3f:1c:6f:49:4a:fa:88:4b:ca:
fb:d6:3e:af:e9:22:40:82:cc:cd:48:4d:26:f9:05:
32:fe:cc:af:cc:2d:53:ae:e6:cf:aa:23:d2:ab:a7:
65:0c:5d:95:ee:44:f1:36:8e:3e:2a:b5:2d:bb:80:
1e:34:08:58:17:9e:8a:a8:7a:de:75:2f:a8:67:ff:
0a:80:8f:f4:2a:ad:b3:e8:29:55:e8:c7:47:2e:11:
b4:05:47:b6:f6:c2:87:45:46:a4:81:09:a1:22:a5:
b4:df:a6:8b:42:9f:9d:fb:ef:6b:e0:35:9c:99:d7:
54:c2:53:f8:cb:b9:4c:2c:52:14:f8:e1:ac:56:4e:
2b:6d:be:03:2b:0d:49:61:9d:e5:fe:f9:fd:13:52:
ad:49:2e:29:be:30:22:9e:a1:00:0a:b0:47:46:ec:
e4:4d:e2:ba:94:2b:07:48:f5:42:63:89:0e:1c:f3:
d7:22:5d:b3:2d:2a:87:c1:ae:10:0e:75:ec:80:1e:
d9:b5:67:6b:94:00:2c:d6:e7:8e:c6:41:74:f4:13:
b5:1a:6d:8f:fa:86:83:72:37:4e:40:45:0d:05:ea:
08:f0:3e:a1:c6:d1:f3:75:b9:2f:d4:8e:a2:ea:32:
13:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8F:8C:4F:08:0B:30:71:EC:97:93:85:5A:7C:82:3A:54:E3:B3:0C
X509v3 Authority Key Identifier:
keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/5D117282A7F911EF8E7B1773C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.48.0/23
Signature Algorithm: sha256WithRSAEncryption
81:dd:41:73:6e:2e:9b:53:0c:96:78:4c:fc:1e:6d:3a:3d:df:
0f:3e:f8:11:80:da:89:56:c6:2e:8c:12:f2:8c:97:a2:5b:76:
ce:43:43:fc:ba:f2:c4:f6:9f:4f:05:14:73:cb:6c:fd:e1:96:
d0:87:e3:5e:15:9a:01:bf:5b:eb:b4:bf:1c:6f:7f:6a:21:0e:
00:0b:10:43:8c:6e:73:f4:92:d6:6c:7f:ff:06:d0:5f:22:28:
fc:2b:23:ce:e6:68:1b:c1:dd:7e:59:87:51:6a:56:dd:47:12:
28:da:6c:d7:78:18:ba:02:ac:f3:65:d1:a8:29:06:44:4f:90:
12:fe:23:b0:bf:44:0e:0c:9e:5d:11:2d:b5:51:66:fa:3a:01:
24:58:1d:7e:d2:e6:22:d5:60:c7:ec:46:15:94:79:2a:44:9a:
e3:92:1c:c3:7b:2f:76:df:9f:b9:bd:40:2b:01:ce:31:e7:a2:
e2:a8:a2:a5:a7:55:78:15:9a:bd:c7:43:05:04:85:a6:54:ee:
37:b3:85:a8:da:2d:0f:49:de:71:a8:d4:f2:20:5e:69:de:56:
2b:cd:b4:9e:01:d9:3b:b6:1a:a7:0f:52:16:83:ad:0f:2f:ed:
d1:90:29:db:ff:46:72:51:f6:9f:90:f9:d7:ef:55:06:6c:09:
1a:6f:c5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:10 2026 by rpki-client