
$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/49FB21A25C8011F0ABC6993DC4F9AE02.roa
File: 49FB21A25C8011F0ABC6993DC4F9AE02.roa (raw, json)
Hash identifier: xddKCKrciYMQOQDWh0L/UeoRnxPJH7k8BoUpUOdsrCo=
Subject key identifier: 1F:C5:09:B2:AC:1B:BF:A7:E0:B5:23:86:9A:8E:9E:65:87:5B:0B:CD
Certificate issuer: /CN=A91877A6/serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
Certificate serial: 7B
Authority key identifier: E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/49FB21A25C8011F0ABC6993DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:11:51 +0000
ROA not before: Wed 09 Jul 2025 04:50:52 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 153995
IP address blocks: 2402:1260::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl
rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91877A6, serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
Validity
Not Before: Jul 9 04:50:52 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3f4c7-d2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:88:13:3a:6d:f3:88:49:ef:1c:46:13:b7:
54:23:fe:40:d1:34:75:f6:9f:ed:c3:35:80:a6:b2:
34:91:3a:c1:82:0b:c2:d7:73:86:c7:96:bf:52:de:
b3:f7:fd:83:0c:43:c4:07:b7:af:f9:6b:55:b3:e0:
f5:93:4e:90:69:cf:07:1a:61:a8:38:71:be:ec:55:
8a:3c:f5:28:58:73:97:81:b1:2f:39:ca:a0:aa:e3:
e0:61:ac:04:11:50:8e:27:4f:bb:79:27:34:00:da:
dd:96:d9:57:4e:65:df:40:e2:6b:70:80:19:66:07:
7c:06:e8:c5:82:56:e0:ea:2a:cb:52:0d:3e:64:82:
f8:d8:5d:9a:b2:f6:e7:7a:31:f1:a8:13:7e:a4:79:
99:6b:bd:a1:76:ea:2b:02:3e:38:53:97:ca:ac:f4:
d3:52:2d:73:90:53:e8:ec:c0:ae:b7:b4:10:7c:e0:
8c:cb:eb:dc:20:a6:3a:04:be:39:56:83:ed:6c:35:
66:61:68:6e:e2:a0:09:87:c3:69:a1:ca:24:14:e2:
f4:f0:60:b1:08:19:45:79:22:d8:16:67:9d:ef:d2:
8c:bf:be:fa:6c:9f:ec:2c:a3:b6:19:52:e6:21:aa:
b3:51:e6:66:4a:80:73:a6:0d:60:c2:9d:f0:fa:d1:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C5:09:B2:AC:1B:BF:A7:E0:B5:23:86:9A:8E:9E:65:87:5B:0B:CD
X509v3 Authority Key Identifier:
keyid:E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/49FB21A25C8011F0ABC6993DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:1260::/32
Signature Algorithm: sha256WithRSAEncryption
8e:4c:6c:21:7f:60:84:00:3e:11:9a:15:0e:af:cc:a5:2c:a5:
d2:b5:29:92:bd:1b:7b:d2:56:cf:f0:bc:02:7d:21:1b:2d:9a:
aa:3e:b2:53:92:2c:71:35:c5:4c:7c:ab:0a:51:5d:37:c3:aa:
ab:96:af:27:c8:9d:36:2f:47:fa:9b:d3:60:07:df:06:d9:d9:
5e:65:e8:05:09:0e:e1:eb:6e:20:f6:cf:f0:4e:be:34:c2:cd:
f3:f6:7a:12:6d:5f:38:18:ad:c8:15:40:09:74:78:cf:25:56:
cc:b9:5e:60:f7:13:de:4e:be:a9:8f:16:c3:0e:0a:b0:b2:4d:
73:f4:57:cf:68:1a:78:ca:05:ce:9f:11:6e:63:7d:e5:4c:cc:
5b:02:c6:e5:fd:af:20:17:b8:99:0c:1b:82:14:9c:50:60:ae:
61:bc:c3:d9:a1:0a:b5:11:17:fe:a7:25:34:90:ce:33:a2:c9:
22:40:83:88:e2:e3:89:07:c1:41:ef:b1:9b:73:ed:1e:e8:d1:
40:22:86:a0:42:2a:34:e0:f3:2d:8b:3c:6e:7e:78:e3:73:cf:
4f:08:8d:71:93:f9:9a:46:09:a0:1a:10:1c:da:e7:e0:82:d0:
7c:6f:eb:f3:b0:bd:52:b7:94:22:7f:09:a3:37:ea:08:14:3d:
9f:9b:0f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:54 2026 by rpki-client