
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/46C3344E346611F0AF16091DC4F9AE02.roa
File: 46C3344E346611F0AF16091DC4F9AE02.roa (raw, json)
Hash identifier: BsavRARE4BkmH9B+ggGXbKAtBKZsBMzUNEmr+sJhuto=
Subject key identifier: E6:82:39:C7:CF:93:6D:E4:32:83:F0:D6:08:A8:F9:7A:7B:6A:A5:60
Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial: 029D
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/46C3344E346611F0AF16091DC4F9AE02.roa
Signing time: Fri 27 Feb 2026 15:17:16 +0000
ROA not before: Fri 27 Feb 2026 15:17:16 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 26337
IP address blocks: 65.254.64.0/19 maxlen: 24
66.116.128.0/18 maxlen: 24
66.116.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Validity
Not Before: Feb 27 15:17:16 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a1b57c-361c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:86:6d:5f:9e:11:4e:11:08:2a:65:0b:1a:
8a:b1:23:46:04:ae:1e:fb:b9:97:6b:ff:dc:0b:13:
97:9f:58:db:20:ea:c5:8c:0f:3e:a2:ad:a9:f2:62:
0a:9b:1d:ce:8f:26:eb:df:99:fa:6a:80:92:36:c3:
f2:97:a8:43:bc:70:6c:64:98:33:18:86:f5:9f:a5:
08:3b:49:5d:f2:a3:e0:c0:20:dc:e7:f1:0e:12:21:
42:1b:57:e2:54:ed:57:c3:1d:54:e4:5f:45:d3:4f:
a5:09:33:c3:1b:a8:7e:9c:bf:5f:6c:ab:55:ab:5a:
e4:6a:ed:53:ab:de:5a:e8:df:5a:e0:96:08:51:1f:
4a:ef:da:bb:36:c8:f2:6e:44:00:a9:49:c8:f6:8e:
52:34:00:9a:00:d0:95:c0:aa:d7:da:2a:80:90:4d:
27:92:4e:55:72:7b:36:5a:54:65:c4:1a:37:de:d5:
5a:92:13:4d:98:45:2e:1e:d2:a4:33:c3:fc:8e:4c:
c1:cf:f3:80:8a:07:d1:3f:17:f8:97:8c:26:d4:09:
24:87:c5:76:dd:43:5b:64:ac:ba:98:d0:98:31:25:
9d:19:c6:d0:6f:96:0e:ca:e3:a9:83:9a:ec:f6:54:
0a:68:da:8b:60:0e:1a:bf:08:2d:9c:4b:d5:8c:3a:
4e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:82:39:C7:CF:93:6D:E4:32:83:F0:D6:08:A8:F9:7A:7B:6A:A5:60
X509v3 Authority Key Identifier:
keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/46C3344E346611F0AF16091DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
65.254.64.0/19
66.116.128.0/17
Signature Algorithm: sha256WithRSAEncryption
ae:78:01:1e:b0:2e:db:2b:e6:c3:14:fc:bd:dd:35:7b:7d:de:
50:e7:6e:c6:5b:69:7a:b9:15:08:79:5c:8a:83:01:e5:c6:c9:
79:18:21:79:ac:96:0c:f9:a6:a1:c5:11:77:b2:2d:c0:9b:5f:
fa:15:13:6b:c9:68:58:9a:11:e2:88:8d:74:92:47:72:80:30:
f2:c0:9e:0c:3f:7d:72:ef:6f:d1:29:2b:47:36:fe:e8:ee:63:
6e:90:39:ef:1d:25:c6:9a:73:cc:f7:83:d5:66:1c:9b:f6:fe:
7b:86:ff:f5:6c:81:61:f0:6e:37:f4:1f:9e:53:fd:68:c3:07:
07:ae:14:9f:5a:33:f9:dd:a6:ff:71:30:bd:4f:0f:db:50:90:
5e:8c:ec:8c:4a:65:83:13:6d:dc:b3:93:15:e2:d0:8d:ca:e5:
6f:3e:2f:98:4e:c3:90:8a:d3:30:6e:21:3b:51:75:8b:d8:65:
b2:e8:ee:05:b1:ba:78:cd:77:d3:e0:49:f1:af:b4:34:c6:2d:
9b:9c:68:20:79:e7:ec:5b:23:91:64:f4:65:d3:1e:6c:03:23:
f8:99:6d:d3:1c:bc:38:92:8c:e7:5f:35:21:c3:2a:70:bc:25:
44:ba:47:b4:04:62:91:45:be:0b:57:94:b1:cc:6d:5c:dd:1d:
f7:09:81:2b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB
RTdEQ0M3NjEwHhcNMjYwMjI3MTUxNzE2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDDA02OWExYjU3Yy0zNjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoEKGbV+eEU4RCCplCxqKsSNGBK4e+7mXa//cCxOXn1jbIOrFjA8+oq2p8mIK
mx3Ojybr35n6aoCSNsPyl6hDvHBsZJgzGIb1n6UIO0ld8qPgwCDc5/EOEiFCG1fi
VO1Xwx1U5F9F00+lCTPDG6h+nL9fbKtVq1rkau1Tq95a6N9a4JYIUR9K79q7Nsjy
bkQAqUnI9o5SNACaANCVwKrX2iqAkE0nkk5Vcns2WlRlxBo33tVakhNNmEUuHtKk
M8P8jkzBz/OAigfRPxf4l4wm1Akkh8V23UNbZKy6mNCYMSWdGcbQb5YOyuOpg5rs
9lQKaNqLYA4avwgtnEvVjDpOdQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOaCOcfP
k23kMoPw1gio+Xp7aqVgMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG
QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzc0OEUvNEQ3ODkyNkE0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvNDZDMzM0NEUz
NDY2MTFGMEFGMTYwOTFEQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQFQf5AAwQHQnSAMA0GCSqGSIb3DQEBCwUAA4IBAQCueAEesC7bK+bD
FPy93TV7fd5Q527GW2l6uRUIeVyKgwHlxsl5GCF5rJYM+aahxRF3si3Am1/6FRNr
yWhYmhHiiI10kkdygDDywJ4MP31y72/RKStHNv7o7mNukDnvHSXGmnPM94PVZhyb
9v57hv/1bIFh8G439B+eU/1owwcHrhSfWjP53ab/cTC9Tw/bUJBejOyMSmWDE23c
s5MV4tCNyuVvPi+YTsOQitMwbiE7UXWL2GWy6O4Fsbp4zXfT4Enxr7Q0xi2bnGgg
eefsWyORZPRl0x5sAyP4mW3THLw4koznXzUhwypwvCVEuke0BGKRRb4LV5SxzG1c
3R33CYEr
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:16 2026 by rpki-client