
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/F69648C2ECF211EABBFDDD24C4F9AE02.roa
File: F69648C2ECF211EABBFDDD24C4F9AE02.roa (raw, json)
Hash identifier: cf4yHcoutqovI1dQvoBzonoaRmnFgyfFyjHSp2dFK4U=
Subject key identifier: 2D:98:4C:92:DE:53:3D:61:BC:50:78:99:49:6D:E1:EE:3C:A0:40:71
Certificate issuer: /CN=A9147241/serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950
Certificate serial: 087F
Authority key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/F69648C2ECF211EABBFDDD24C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:50:45 +0000
ROA not before: Fri 16 Jan 2026 20:17:14 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4818
IP address blocks: 210.48.192.0/20 maxlen: 21
2402:1980::/32 maxlen: 33
2402:1980:c200::/39 maxlen: 39
2402:1980:c400::/39 maxlen: 39
2402:1980:e200::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl
rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:36:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175 (0x87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950
Validity
Not Before: Jan 16 20:17:14 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a45245-424c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:fe:7e:21:8f:43:9a:73:d8:fe:28:f1:ed:
7b:62:be:60:e7:17:ce:da:ae:30:e5:8d:17:6d:51:
d8:21:d4:c5:d5:8f:95:fe:36:4e:62:25:53:b0:93:
f6:8c:d6:b8:10:41:e6:8d:22:d9:fc:49:1f:a4:b8:
45:fd:eb:3b:7b:d1:10:93:6c:4d:e5:be:f8:08:23:
db:9b:1d:4e:68:7c:e1:14:94:5f:c1:99:af:ca:84:
5d:23:3f:46:da:7f:5a:29:c2:fd:46:74:84:1b:03:
98:07:0b:f1:f5:8d:18:b8:69:26:fe:85:1e:ad:97:
d8:7f:4a:c0:bd:24:0e:8d:a7:f4:8f:af:20:ef:40:
a0:b8:17:5d:17:24:42:97:1c:46:54:bf:d4:a1:33:
bf:ea:fc:34:4d:13:4c:f7:89:68:de:e1:50:69:fd:
2e:2b:a5:d1:f1:fc:4d:51:45:31:00:44:55:ad:2f:
e8:7c:d2:d2:2c:78:d6:04:91:7b:26:ab:68:9e:c0:
a0:13:16:1c:92:6e:c6:b8:d4:60:f5:19:d0:96:ea:
4e:48:f4:8a:ab:58:e1:f2:e1:1d:b3:24:cd:25:37:
d7:06:39:1e:c4:71:d3:08:0d:fa:0f:d6:cf:08:1b:
85:9c:6a:6e:7a:4f:38:bc:6b:91:64:3d:82:02:3b:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:98:4C:92:DE:53:3D:61:BC:50:78:99:49:6D:E1:EE:3C:A0:40:71
X509v3 Authority Key Identifier:
keyid:5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/F69648C2ECF211EABBFDDD24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.48.192.0/20
IPv6:
2402:1980::/32
Signature Algorithm: sha256WithRSAEncryption
88:6a:55:ea:d0:05:1f:6f:22:10:c2:2f:97:40:42:ed:1b:7c:
ac:e4:ef:48:42:59:66:44:df:53:ea:18:9e:af:a5:e1:9b:59:
13:bd:15:5f:4b:e7:3f:4b:77:bf:1b:32:43:eb:a1:5e:db:e2:
06:57:aa:b8:27:ed:a7:d4:8e:ec:be:d7:5e:af:2c:70:0a:fa:
7f:08:52:a0:52:0e:58:67:85:82:2c:00:b7:cd:13:b6:61:76:
9d:f5:33:53:68:6a:2f:1c:b9:9a:1e:c9:36:65:a5:92:46:78:
cd:8d:b9:c9:3c:aa:16:2c:fc:23:7e:62:7f:e0:1f:c9:c3:35:
9f:b3:43:72:64:48:25:54:43:81:04:9c:46:33:86:66:b9:93:
7d:88:5d:21:46:d5:78:00:f4:f0:80:23:71:07:6b:7b:48:b2:
ed:ad:3e:1d:6d:87:98:b4:63:a4:ec:04:83:de:41:cb:8f:bc:
a0:51:71:ff:2a:69:0e:5b:c6:8e:95:75:43:ae:0d:3d:1a:77:
eb:51:1e:33:64:93:ed:db:8d:36:4f:15:3d:d5:45:19:50:e1:
d3:b0:c2:ce:8f:91:df:25:62:b8:5e:54:6e:e9:3e:ea:8b:5f:
5f:2c:57:0c:0c:4a:70:c4:8a:8c:2d:be:5a:9f:39:58:12:b6:
bf:47:f3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:43 2026 by rpki-client