
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa
File: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (raw, json)
Hash identifier: t0lrWYbEsDKRavSA+NYxahXVuuhYWwqHsIgE48/DyB8=
Subject key identifier: 3C:59:D8:B2:33:0A:A9:81:51:30:BC:34:7E:57:8E:3F:21:FA:8A:31
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 11EE
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:16:58 +0000
ROA not before: Wed 20 Aug 2025 17:57:33 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 24144
IP address blocks: 2404:f4c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4590 (0x11ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 20 17:57:33 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4829a-87ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ea:a5:8e:03:e8:03:14:95:83:81:16:17:e1:
f6:e3:4d:1c:8b:60:16:36:ed:62:17:9a:36:0c:1d:
6c:33:23:0f:dd:f2:7e:05:85:1a:8b:cc:3e:04:c0:
fc:83:ec:29:c9:95:f3:5f:ad:ab:2b:07:18:7f:a1:
c6:b2:eb:04:fb:c4:bc:f8:db:eb:98:a5:2e:73:bf:
0f:19:3b:c2:ea:57:fa:85:b2:c5:12:01:ab:5d:21:
91:20:dd:72:d3:ea:f1:9f:11:67:c9:2c:26:65:5f:
68:e3:6a:0c:cd:66:6e:1a:b7:43:2e:d6:48:27:02:
eb:aa:99:70:e2:4f:f7:1b:8a:a4:d5:8e:56:96:b9:
a6:b0:50:f5:7e:cb:6e:76:24:9b:57:c6:78:25:0c:
ca:33:eb:54:93:1a:00:c9:e6:63:c0:a7:21:c6:83:
0f:86:47:84:04:5b:69:0c:47:6d:d6:ce:a5:89:ac:
bf:3a:0c:47:c0:ca:74:b8:c2:6d:9c:74:5e:3c:fa:
0b:6a:af:04:f2:e5:7b:f2:c5:b5:60:2f:9f:1a:91:
81:a3:9a:89:ea:3a:8a:94:b1:83:ba:13:d2:3c:1e:
c5:e6:3c:d2:15:63:3a:d7:7a:30:58:e1:1f:a8:53:
58:03:59:ff:ab:a1:aa:47:71:8e:e6:fb:e8:5b:96:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:59:D8:B2:33:0A:A9:81:51:30:BC:34:7E:57:8E:3F:21:FA:8A:31
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:f4c0::/32
Signature Algorithm: sha256WithRSAEncryption
40:35:aa:f3:ff:86:f7:a4:04:5c:4e:9f:91:76:1c:4f:cd:04:
6a:96:ce:ed:76:1e:6b:78:96:f2:6f:cb:30:34:f8:5e:f6:1d:
2f:06:d3:1c:23:cc:3c:3e:b8:23:10:86:4f:30:db:04:b4:31:
80:a1:1b:1d:7d:bb:01:e8:26:56:3b:08:dd:07:db:f9:cb:16:
77:18:19:36:f2:65:9f:2e:55:e2:c9:0a:a7:41:3a:3d:81:50:
7e:e5:b0:88:27:59:fa:28:dd:ca:57:b7:6b:08:fb:bd:99:c6:
a1:32:67:33:fb:26:a9:11:93:42:dc:7d:de:c0:59:e4:dd:89:
bc:e6:61:b5:cc:45:13:19:08:dd:98:1a:0f:ad:e2:7e:58:5b:
0d:55:ec:ac:04:08:7b:7d:bc:b2:33:83:c6:cc:99:51:df:17:
73:c5:53:00:6d:44:8b:2c:03:13:43:3c:44:bc:a9:6a:0d:5d:
38:75:2e:38:23:52:d8:8d:cf:29:c5:5d:da:f8:1c:a0:1c:36:
91:7f:8f:f1:9a:52:17:53:af:87:f8:c5:fa:6c:fe:ca:84:7e:
20:53:0b:ee:04:f1:5d:49:7a:4b:33:c7:67:11:53:be:b9:20:
88:c6:16:f3:cf:67:b2:1f:f8:91:1b:af:73:ce:05:4c:2a:03:
9d:7e:89:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:10 2026 by rpki-client