
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/48F50A889F7411F1B417F0063911F970.roa
File: 48F50A889F7411F1B417F0063911F970.roa (raw, json)
Hash identifier: 4rAC2sCn051vT4i3fxiypBMiq2S5c+b6RpWtPnIYbTE=
Subject key identifier: 0D:B9:D8:EB:B0:97:30:5C:36:6D:F0:B4:4B:6E:52:72:B5:6F:01:37
Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial: 0853
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/48F50A889F7411F1B417F0063911F970.roa
Signing time: Mon 24 Aug 2026 04:28:41 +0000
ROA not before: Mon 24 Aug 2026 04:28:41 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 142192
IP address blocks: 202.94.165.0/24 maxlen: 24
2407:4ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2131 (0x853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Validity
Not Before: Aug 24 04:28:41 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a8bc879-1b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:cd:05:6b:43:ea:ce:86:6c:4d:98:26:d1:
a9:74:ec:f6:90:9d:27:7f:53:a6:32:b5:69:8e:f7:
5b:75:90:39:c4:39:ae:52:2e:1e:49:b7:fa:ee:8a:
4f:69:5c:f2:c7:44:33:43:d7:6e:5d:25:cc:7f:12:
68:11:60:a2:a7:cd:2c:68:24:e5:23:45:38:d7:50:
99:88:28:2f:16:f2:3d:69:d3:3c:43:4a:af:49:a3:
05:89:f8:63:f8:3f:03:e6:c5:cc:d7:40:a7:8b:c3:
60:1c:bf:84:50:3a:ef:f1:cd:5c:7c:b1:35:fb:ce:
d4:2e:52:4e:d7:86:99:42:56:2a:cf:46:85:97:4d:
e9:a7:b2:13:ec:d0:01:46:fa:2a:b0:5a:00:53:0c:
3f:2f:9b:63:e7:cf:aa:5a:f1:9d:6a:ff:d8:bf:b5:
b2:31:e1:fa:2f:69:a9:15:16:55:f9:f2:01:9b:38:
06:41:36:20:17:aa:d0:38:5e:7f:54:da:9b:b9:cd:
ae:c7:fc:d7:9a:e6:d5:9b:8b:5f:7f:a2:e2:d4:c0:
22:95:17:b3:30:a6:39:60:61:79:7a:14:0d:0e:16:
58:8c:b4:bf:75:35:4a:59:64:e7:2e:4b:b2:7d:11:
3d:2d:37:e1:34:f4:53:6c:7f:26:bb:8c:87:3d:c2:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B9:D8:EB:B0:97:30:5C:36:6D:F0:B4:4B:6E:52:72:B5:6F:01:37
X509v3 Authority Key Identifier:
keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/48F50A889F7411F1B417F0063911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
202.94.165.0/24
IPv6:
2407:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
1c:b1:8e:41:d7:2e:95:ff:80:d7:9c:7b:e5:56:1c:06:32:8e:
11:aa:64:67:0e:8e:d6:a3:8d:5c:75:7c:9d:91:b9:12:07:41:
6d:c5:f4:f7:2e:c3:a0:a4:75:9a:30:fb:71:e2:41:e3:58:c8:
da:88:22:9a:99:1b:ca:3b:e6:5d:88:df:e5:dc:e2:3f:ee:8a:
44:de:39:b4:97:92:4d:93:57:c0:9a:e5:d7:72:1b:63:71:f7:
02:84:cb:ae:21:1a:5d:db:4d:ef:b9:17:b7:2d:81:df:01:85:
7b:c2:01:94:db:d1:65:83:0c:74:e9:aa:c7:34:21:a4:62:c0:
0c:82:13:b4:84:bf:f9:8e:03:c4:90:ae:71:47:57:98:5f:7b:
a0:16:aa:4e:51:44:51:03:2c:f7:b0:8e:60:09:d8:93:31:cb:
a0:42:a1:13:51:4b:ce:4b:e1:59:66:4a:66:4d:cd:6a:cb:c7:
72:c2:eb:ab:95:8a:80:3e:0c:c0:42:af:88:ec:ff:09:48:19:
a3:e6:64:a1:f6:0b:ec:8d:f3:4a:c9:ee:94:55:b1:cc:c6:4e:
18:2e:e5:b7:5f:74:aa:b8:f5:64:63:f6:ca:e3:7c:78:c3:e9:
c6:76:e1:2b:89:53:b6:48:5c:9f:08:2e:25:4a:6d:49:99:f9:
4e:3a:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:54:17 2026 by rpki-client