
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C4A85FD48FE811E98B967A66C4F9AE02.roa
File: C4A85FD48FE811E98B967A66C4F9AE02.roa (raw, json)
Hash identifier: Yra/cySrBt0zcZ3P5GOXeK6swd+KmGvdWYxnM5VydGA=
Subject key identifier: 70:5C:31:8D:A7:48:A4:E4:F0:84:69:0E:8D:8C:17:7E:5A:F1:E2:BD
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 11EF
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C4A85FD48FE811E98B967A66C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:16:59 +0000
ROA not before: Wed 20 Aug 2025 17:57:34 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 24239
IP address blocks: 2404:f4c0:f000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4591 (0x11ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 20 17:57:34 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4829b-2d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:69:af:95:8d:b3:21:f8:fb:34:3e:1f:23:
4e:2e:ce:f3:5c:ed:76:58:dc:8e:65:ff:72:0e:93:
d0:4f:67:17:8d:8a:bf:8d:05:ae:4c:fe:64:61:1d:
24:1f:ee:10:72:ac:d8:d5:c4:67:51:95:ea:ea:b8:
f9:31:b3:c7:9e:39:3f:b6:48:c7:27:09:e4:d9:78:
2c:09:d5:4f:e5:3d:0a:5d:c4:70:4e:ed:7a:42:91:
e4:3b:91:13:b1:3b:e9:b6:b5:fd:f5:9e:7a:31:03:
b5:eb:9d:3c:6c:05:20:66:03:40:d7:c3:b7:49:35:
89:73:0d:40:09:a0:ef:15:d2:ad:81:5f:09:9d:12:
c3:31:1c:e9:06:94:a1:16:dc:22:e1:45:23:e3:4a:
eb:0d:7b:30:0a:2c:c1:c6:94:3f:b3:1e:5f:d5:d7:
b8:f4:ea:e3:2a:b6:7e:cd:e9:69:c9:c6:99:b0:16:
65:e9:71:3d:be:fc:89:1b:ec:86:40:05:25:1c:88:
e1:39:81:8b:2b:44:70:e6:76:4b:53:2e:c3:fd:37:
be:3a:86:f8:68:1a:e9:95:9e:f7:67:68:9f:a5:33:
8c:13:a9:7a:4e:6d:a8:cf:a4:d1:b2:1a:33:b5:2b:
1e:7d:7c:25:fa:18:fb:40:e4:ed:dc:76:bf:38:f0:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5C:31:8D:A7:48:A4:E4:F0:84:69:0E:8D:8C:17:7E:5A:F1:E2:BD
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C4A85FD48FE811E98B967A66C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:f4c0:f000::/44
Signature Algorithm: sha256WithRSAEncryption
5f:34:c3:f3:ec:a8:94:42:15:58:96:be:75:87:f7:b4:a7:c9:
87:b2:cd:be:82:2a:20:19:5b:00:7e:24:6b:9c:0c:7a:ae:21:
89:87:0c:1f:0b:6d:d4:f6:13:ad:4a:19:04:fc:7f:8a:41:9c:
39:37:da:d4:79:5c:0b:83:65:98:3b:26:05:dc:dd:05:37:c5:
29:e2:b5:97:91:19:5e:7b:b7:6a:88:5a:7b:3d:7f:76:e2:ab:
22:8d:c7:b3:2b:8f:b3:31:9f:d6:9d:f7:e8:d2:31:d4:c0:b4:
45:6b:d7:63:74:15:b6:08:d2:77:41:43:b2:29:95:b0:bf:5e:
3b:17:f0:fc:5f:fc:c2:60:a7:47:c6:78:d8:93:e8:bc:ca:23:
67:d3:ac:96:0a:ea:9d:d8:b2:4b:9f:36:1c:d4:6f:f8:93:77:
74:83:4b:6b:bd:96:5c:b1:96:29:e1:33:d8:68:cd:7d:7d:35:
62:03:7f:da:12:df:0f:e7:71:9c:41:e9:b4:ee:ec:7c:13:e4:
49:25:da:12:5d:bd:8e:f5:ca:80:50:36:ce:04:96:6e:b9:b8:
00:4e:59:3a:15:32:41:4b:aa:fb:f2:f8:79:ee:1b:d9:9a:59:
d4:01:d1:b1:36:09:a7:7a:1c:6c:ef:b4:d8:5b:0d:29:80:0a:
10:99:1f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:50:03 2026 by rpki-client