
$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DCA7C1ECB0F811E595E0F761C4F9AE02.roa
File: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (raw, json)
Hash identifier: xeFzCopV71maYEg1r/El2ibbwX7/wW/fpz6xhHAMBuU=
Subject key identifier: 47:00:44:4C:9E:2A:70:8D:92:68:81:A0:F1:2B:12:DF:C6:A1:CD:FB
Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial: 3592
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DCA7C1ECB0F811E595E0F761C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:30:30 +0000
ROA not before: Thu 10 Apr 2025 14:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 27.50.32.0/21 maxlen: 21
2400:7a00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13714 (0x3592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Validity
Not Before: Apr 10 14:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a44d85-4e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:4c:cd:55:ef:24:53:cf:62:eb:de:9c:e7:
b2:a6:0b:8d:df:b8:ec:39:b2:54:2f:12:cf:a8:11:
99:f3:93:77:d2:1d:2d:46:72:f9:42:7a:b7:7f:67:
e1:2d:de:6f:f3:3f:77:05:7b:28:49:00:bc:b2:7d:
d5:bd:a7:35:8f:5b:1a:99:6d:88:e9:64:4e:9c:08:
78:0c:8a:cb:66:66:57:cc:bb:fa:00:3a:d6:6d:60:
71:9c:07:0f:13:28:b6:48:c4:9d:f0:03:66:03:b3:
ef:4e:5f:e0:cd:27:12:0b:d5:58:89:16:82:e3:b9:
3e:0d:ab:d0:b7:89:47:1c:1c:cd:27:13:5b:7b:a0:
4f:6d:f9:a2:93:7c:43:94:28:c3:b2:93:6e:33:e0:
4f:2d:4a:f6:0e:d6:4b:11:d3:63:2f:7a:86:03:0f:
a3:eb:48:2b:b4:9e:8a:5c:1a:53:a6:c9:b6:81:40:
c0:c7:75:47:ff:ac:65:1c:3b:01:e8:9e:b5:e9:0b:
59:e8:f3:8e:80:7e:9d:6a:01:79:fd:0c:c2:9a:5d:
87:5b:fc:84:f0:5c:06:7d:70:1b:fe:89:49:fe:89:
a8:15:2e:0e:69:29:b1:d6:7e:8e:ee:71:c9:e6:a9:
56:89:7a:d8:3e:6f:c9:5c:08:fe:59:df:87:5d:8f:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:00:44:4C:9E:2A:70:8D:92:68:81:A0:F1:2B:12:DF:C6:A1:CD:FB
X509v3 Authority Key Identifier:
keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/DCA7C1ECB0F811E595E0F761C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.50.32.0/21
IPv6:
2400:7a00::/32
Signature Algorithm: sha256WithRSAEncryption
0d:17:7f:74:c0:4b:13:5a:37:4f:fb:ef:88:7c:84:75:ca:be:
bc:a3:58:88:08:f4:3c:8a:f1:4a:27:1e:0f:d9:f1:64:1c:85:
8e:65:55:ed:02:9b:5c:d9:81:4d:9d:3b:31:eb:97:f9:8d:e1:
c8:37:34:7f:40:68:08:c7:3d:01:85:56:d4:37:7e:04:57:b3:
68:e4:43:a9:37:c5:7a:55:da:04:00:2e:a2:e8:ad:a5:3a:1d:
17:b4:3e:8e:9c:6f:19:69:f0:bd:65:9b:ef:c3:d8:6b:cf:4b:
91:7a:69:b5:84:9f:dd:4d:c4:c0:77:f4:f2:bb:37:a0:1d:e9:
9d:13:97:d8:bb:be:06:d5:3f:10:95:13:14:c8:61:c3:33:80:
c7:4d:16:00:30:69:a6:23:2b:cb:0e:6f:5c:2e:be:56:42:e0:
05:bc:4f:d6:ae:18:24:5a:36:74:19:2c:fc:d6:f9:9a:80:70:
e4:64:9a:c7:9e:9a:4c:e2:87:04:02:8c:2c:08:d1:ae:e3:8e:
2b:24:a4:71:42:14:ea:c3:36:7e:0f:66:90:4d:aa:75:1c:91:
88:d5:93:7a:9b:9d:4a:ae:a2:78:64:1c:af:b2:da:86:7c:e1:
63:42:39:f0:0c:3e:c4:b1:e1:9a:35:39:51:44:d9:50:16:9d:
a7:7c:43:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:29 2026 by rpki-client