
$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D96D4614B0F811E595E0F761C4F9AE02.roa
File: D96D4614B0F811E595E0F761C4F9AE02.roa (raw, json)
Hash identifier: pVaeuPDK0FHsvcGhje7MCH08iltLABR4qD4qhWQ9kFc=
Subject key identifier: 18:08:90:A0:08:92:88:C9:DA:7D:33:45:EE:4C:5F:52:42:7B:8A:CE
Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial: 3590
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D96D4614B0F811E595E0F761C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:30:28 +0000
ROA not before: Thu 10 Apr 2025 14:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38478
IP address blocks: 27.50.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13712 (0x3590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Validity
Not Before: Apr 10 14:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a44d84-f3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:0a:a7:65:34:4e:8c:ef:f5:36:33:25:a9:
e8:86:27:c2:ca:71:ae:5b:79:b9:63:ae:9b:7e:02:
3e:8f:e4:58:94:44:0d:4f:42:2a:f1:0b:e0:53:06:
0e:dd:4c:2b:77:64:a8:d8:5f:91:71:7e:7b:d4:6e:
96:a1:4d:94:5b:7c:6c:7b:a4:9a:aa:86:06:7c:dc:
3e:a1:10:1d:bb:5b:02:68:4b:03:6f:43:25:04:e9:
05:32:f9:e8:4a:d4:25:f9:9b:07:0e:d4:5e:ab:75:
89:de:66:63:ef:77:d9:83:44:59:d5:55:81:15:e9:
08:80:0a:64:f8:ee:89:e2:46:00:9d:be:52:10:e6:
28:79:bd:78:db:58:45:70:66:4e:5b:3f:1e:6e:81:
8d:ae:5c:65:f1:31:37:c5:e4:44:38:73:0a:b9:4a:
0d:34:d9:e3:c0:be:d0:8c:13:86:f3:98:7a:58:3b:
17:5d:0f:8b:93:2a:dc:bd:03:62:05:3a:e9:46:46:
30:14:db:c8:e2:99:6c:d6:17:87:dd:fe:92:0a:21:
7f:e0:f6:d2:d6:d4:38:38:20:63:62:21:01:72:9a:
0e:16:20:8f:2d:6c:bf:a4:a7:ab:6e:33:6b:6a:7f:
28:4f:78:8c:4f:49:33:f0:be:6f:0a:e7:82:86:7b:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:90:A0:08:92:88:C9:DA:7D:33:45:EE:4C:5F:52:42:7B:8A:CE
X509v3 Authority Key Identifier:
keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D96D4614B0F811E595E0F761C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.50.34.0/24
Signature Algorithm: sha256WithRSAEncryption
42:14:b8:f4:5e:ad:21:7f:72:1e:6e:11:80:e7:c6:21:a1:ac:
a3:2f:c0:85:4c:70:7e:8c:95:7a:b1:e8:92:2b:81:62:66:c1:
be:e0:58:c2:c7:ef:f9:56:f3:45:92:43:ef:65:f6:95:07:8e:
44:87:58:72:bb:3e:ad:ec:bf:50:88:77:41:7e:87:da:23:6f:
d0:69:f9:c0:26:b7:c4:b3:47:cc:99:0c:94:8c:84:e8:32:e4:
39:8f:58:c7:36:a3:bd:be:ad:94:3e:5f:11:f2:f6:ce:97:b0:
7d:f9:be:ba:cb:ab:43:b9:a6:2e:4a:ae:0c:7e:e7:e2:f1:0f:
3e:d6:65:b7:25:9f:43:f9:9a:9e:38:38:e5:56:73:0c:3d:84:
45:e6:86:49:c4:a8:0b:76:3c:a5:6f:64:96:8e:ab:af:a6:44:
43:d9:8a:b0:5f:06:22:57:ae:37:f2:76:d9:16:38:dd:9c:6b:
70:ef:4f:db:fa:bc:7a:8a:3c:c3:5a:d5:16:f8:f6:01:50:77:
68:88:f3:59:18:6f:86:5a:1f:ad:3a:ac:7e:e5:05:65:34:d2:
2c:5f:6e:e4:33:7e:ff:c1:8e:d6:85:28:6f:24:ba:8a:fa:c1:
f5:64:f3:6f:47:cf:5e:a1:9f:ea:67:2d:69:91:cc:98:a8:bd:
9b:15:70:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:14 2026 by rpki-client