
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/4B82FA441A8611ECB908E939C4F9AE02.roa
File: 4B82FA441A8611ECB908E939C4F9AE02.roa (raw, json)
Hash identifier: uV1mWEm9Bs1DW7VnjBjbNklIBwl6dVIf/TDxxXlFI88=
Subject key identifier: A8:11:B5:8F:1E:2F:99:18:91:F2:37:5E:D6:CE:88:18:9C:8A:CE:6C
Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial: 0BF8
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/4B82FA441A8611ECB908E939C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:00:10 +0000
ROA not before: Fri 28 Mar 2025 20:01:51 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 136552
IP address blocks: 210.24.100.0/22 maxlen: 24
2400:1700:200::/48 maxlen: 48
2400:1700:210::/48 maxlen: 48
2400:1700:211::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3064 (0xbf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Validity
Not Before: Mar 28 20:01:51 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a4628a-17dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:56:3d:b7:a5:43:b1:67:48:64:8e:5f:d8:
d1:09:41:a9:ce:a7:c6:18:47:c6:e5:74:97:31:c9:
87:ac:f8:39:d3:d5:88:b7:19:55:0f:22:d2:22:0b:
9d:da:7d:fd:f0:ec:b9:ed:34:a1:11:1c:0c:29:ee:
cb:70:81:45:e4:67:4f:e1:8b:f5:ec:b3:45:ac:10:
b2:ac:95:dc:d6:3f:26:76:df:d7:1b:95:aa:8b:3d:
07:3f:21:ec:77:10:d1:33:ac:a6:28:73:36:b3:2e:
ca:5d:4b:89:da:6e:ac:8b:80:16:3c:dd:60:32:21:
88:e3:25:ce:54:7a:3b:ea:92:dd:96:34:81:a2:ee:
05:b7:b1:b9:f2:f9:c5:ec:a2:f8:19:f6:79:44:00:
e2:06:06:81:38:41:77:97:ce:52:22:40:39:7d:c7:
57:69:67:d3:64:7d:78:76:7d:28:91:1b:c0:6b:98:
ed:3c:4e:52:35:7e:9a:df:62:39:2f:79:e4:d8:5b:
f5:7b:f7:66:95:8d:4e:f1:d2:5a:c4:37:56:da:1d:
48:15:d3:39:e2:01:2e:24:9f:5e:a1:15:8a:5b:a7:
21:dc:08:9a:63:68:f1:c0:38:38:d7:2a:ae:34:5c:
65:40:1c:48:33:bd:f4:81:05:74:41:b7:d8:5c:7f:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:11:B5:8F:1E:2F:99:18:91:F2:37:5E:D6:CE:88:18:9C:8A:CE:6C
X509v3 Authority Key Identifier:
keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/4B82FA441A8611ECB908E939C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.24.100.0/22
IPv6:
2400:1700:200::/48
2400:1700:210::/47
Signature Algorithm: sha256WithRSAEncryption
5d:b7:2f:65:7f:ec:bd:53:40:ed:ee:db:55:7a:00:f9:69:bd:
8a:16:e0:27:7b:81:66:9a:e9:72:e7:fd:3e:ee:4d:7f:66:e5:
d8:9e:cf:69:fa:8f:65:59:79:b4:b3:a5:27:c1:7b:19:4e:18:
4d:1e:c6:8e:f4:6a:b1:1b:4e:6f:ad:be:e9:ed:6b:e1:b9:58:
5d:5d:73:c2:32:ad:cb:dc:06:70:98:41:4e:26:a6:dd:fc:90:
16:84:5e:69:c4:ac:61:08:69:d8:0a:1f:f8:ce:19:c3:84:72:
1e:68:12:11:49:3c:40:52:7b:bf:16:23:0e:8c:2a:de:cb:32:
09:2f:47:b2:5e:00:49:09:44:c5:49:46:27:76:3f:c6:cc:8a:
21:32:3f:8e:80:d0:df:14:67:dc:9a:6d:6d:99:37:ea:74:d0:
a8:0c:69:7e:a9:b1:f0:7f:78:ea:9a:b0:be:9a:f1:87:fc:47:
4a:bd:f4:60:fc:88:aa:89:1b:54:6a:d6:da:68:1b:20:a3:ad:
09:f0:0b:14:2a:e8:29:28:cf:f7:f1:34:04:9e:ea:a2:59:b7:
25:59:33:c9:14:94:05:21:10:ca:c7:8e:ee:96:23:2e:eb:78:
e8:ef:a6:93:ac:4a:34:b4:92:d5:16:20:96:f9:e4:72:e1:b2:
ae:2d:b5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:37:13 2026 by rpki-client