
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/97FD1076C5E511F09E339443C4F9AE02.roa
File: 97FD1076C5E511F09E339443C4F9AE02.roa (raw, json)
Hash identifier: E/DnBPpBtlMD1DbIPU+ccz441sZFZP11b0s4OVzLUFY=
Subject key identifier: FF:3F:3A:93:15:5C:E4:C4:1A:C1:D9:3C:F6:71:66:28:84:E9:3D:13
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3C2F
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/97FD1076C5E511F09E339443C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:26:45 +0000
ROA not before: Thu 20 Nov 2025 07:50:34 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 152219
IP address blocks: 49.213.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15407 (0x3c2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Nov 20 07:50:34 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4af15-a0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:7a:66:4e:b6:fc:e7:d7:4b:12:7c:fd:4e:
89:7b:4d:b2:06:15:fc:eb:6f:a2:a0:5a:4a:c5:a0:
4d:3a:c7:78:55:b1:a1:49:a1:e2:21:c9:50:e8:a6:
57:3f:52:08:32:25:66:1e:e0:4d:92:e0:db:b4:3d:
ad:21:47:a9:49:a5:5f:c2:4c:ae:7f:74:49:33:f3:
09:0f:7c:c8:de:21:53:02:c6:e4:65:0c:5e:fc:c8:
b1:cb:a4:f7:da:20:4d:7f:0e:77:02:85:70:8e:69:
21:1c:c7:a2:ac:1d:c4:76:ff:c8:70:26:ad:90:0b:
1a:3a:c9:4f:03:77:12:9b:89:f9:98:5d:aa:3f:69:
a0:08:da:73:f6:95:83:c8:6a:19:5b:81:10:08:4f:
b0:a5:1d:77:66:13:56:a3:19:b8:40:5e:e6:72:77:
5d:35:be:c0:88:7f:9b:54:52:4f:32:37:d9:69:48:
59:ba:50:d5:6f:7f:50:0d:d2:1b:10:42:0e:07:e5:
e1:36:0d:62:d2:1f:fb:1d:3f:52:db:d6:95:6a:8a:
d3:c0:bb:d2:95:16:d1:f5:7c:57:05:5e:4f:a3:ea:
64:11:d7:6f:92:3d:0a:c4:b1:6b:c8:fd:b8:5a:50:
bc:d1:38:5a:d1:14:71:73:a6:73:67:57:de:06:f3:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3F:3A:93:15:5C:E4:C4:1A:C1:D9:3C:F6:71:66:28:84:E9:3D:13
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/97FD1076C5E511F09E339443C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.213.44.0/24
Signature Algorithm: sha256WithRSAEncryption
68:34:b5:97:4f:14:ef:83:8b:59:3a:1b:d5:f0:0d:e8:35:28:
42:1c:32:99:dd:2c:ce:a7:e2:a7:9e:eb:90:1a:6e:62:1d:6a:
b9:fa:40:c0:fc:f2:09:31:9a:c3:fa:dc:dd:cc:9e:51:1b:7d:
a1:40:f3:72:8f:fc:7d:a7:ea:52:1d:27:63:d6:d0:cc:a9:b0:
fd:2d:bb:35:b6:42:5d:7d:cc:db:89:b7:8a:34:c4:5c:99:4d:
e8:aa:e0:29:1e:6c:2b:f3:aa:f9:65:bf:b1:5a:2e:de:40:11:
57:0a:d1:ee:44:96:cf:75:bb:5f:bf:ee:59:f6:f1:77:8f:8e:
2a:a8:f6:dc:6c:bc:70:76:be:50:5c:21:c4:61:58:89:e6:73:
b7:97:60:0b:e0:12:8c:37:e2:46:d0:3c:92:33:e6:ee:c6:91:
69:a5:c0:d5:24:61:54:a8:75:9b:b3:ad:19:c4:ae:62:5d:f4:
9f:95:c4:d3:e5:5c:5e:ab:a9:11:6f:bb:5e:e0:9e:40:b3:84:
b5:bb:ed:b4:e1:cd:d3:a9:08:37:9f:b4:5d:20:b4:8a:53:73:
f8:43:34:6a:aa:c0:42:9f:b9:9f:c9:b2:3b:57:b4:f7:0f:dd:
a6:6b:c1:2f:4e:e8:87:6e:2e:c0:02:23:49:2a:4e:2e:ca:96:
fd:80:3a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:39 2026 by rpki-client