
$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/1396434EC90A11EF8577744AC4F9AE02.roa
File: 1396434EC90A11EF8577744AC4F9AE02.roa (raw, json)
Hash identifier: dZjVpX0OHFb95lVF9Cf+7jCMCOq6ryMRIoLMcRSlevM=
Subject key identifier: 7B:93:C5:85:23:27:E7:1A:02:AE:BB:B0:95:5C:E6:CE:79:29:4F:22
Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597
Certificate serial: 10BA
Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/1396434EC90A11EF8577744AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:41:02 +0000
ROA not before: Tue 30 Dec 2025 15:10:51 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9730
IP address blocks: 152.52.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl
rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4282 (0x10ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597
Validity
Not Before: Dec 30 15:10:51 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46c1e-b928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:9b:05:d6:10:8d:34:35:f4:8c:a6:62:82:
6f:39:26:80:81:5a:24:85:c2:ab:57:ab:9a:e5:eb:
8a:ad:dc:63:64:53:ad:ad:0c:6f:76:7a:7c:39:43:
f1:16:ea:67:26:52:7e:e1:2b:6c:b6:9f:bc:74:c8:
2f:8c:17:fe:f3:eb:fc:41:af:85:26:58:90:7e:95:
a6:1a:0a:46:a0:12:47:11:11:e9:2c:8d:ca:f1:72:
c2:e6:72:6e:d7:5d:2d:8d:3d:3b:64:88:a3:bd:83:
5c:1c:d5:e9:9f:34:54:52:53:86:09:51:4f:cb:e1:
b6:bc:14:d9:73:b2:f0:36:a4:fb:57:5d:36:d9:43:
48:ce:8a:4e:9d:89:af:64:71:a5:51:0e:3e:18:25:
2b:da:0a:8b:de:ca:77:1e:4d:44:0c:49:64:68:41:
61:2e:f4:7c:02:c4:f3:22:4a:81:40:ce:ff:0b:d4:
04:af:22:e9:16:a8:c5:db:09:3c:fa:7c:b2:77:1b:
cb:86:12:9b:aa:05:90:10:65:d3:ad:4c:b0:af:e3:
bb:b1:ae:8c:38:08:a9:19:f9:2f:82:0e:2d:88:2e:
30:28:ec:22:de:99:4c:62:a5:bc:96:3c:0f:36:0a:
15:93:4d:aa:47:c9:01:08:b7:32:21:6c:b3:d9:dc:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:93:C5:85:23:27:E7:1A:02:AE:BB:B0:95:5C:E6:CE:79:29:4F:22
X509v3 Authority Key Identifier:
keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/1396434EC90A11EF8577744AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
152.52.48.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a6:9b:c2:26:fa:57:ee:85:7d:86:ff:63:b2:f0:da:86:3d:
b6:bb:53:d3:4e:6f:dd:a4:13:b0:f7:c7:e4:9f:bb:1b:7b:48:
d5:2c:24:7a:ca:bd:6e:bb:16:a5:ea:eb:dd:dc:4c:5f:d4:0d:
b9:03:2b:b4:f8:c1:70:09:32:55:3c:a2:02:50:2e:93:3e:6b:
9a:ed:bc:00:97:26:62:1d:6f:10:91:07:33:3e:9e:73:1e:2f:
a1:7c:17:ad:9e:92:6e:86:d0:86:e2:d1:87:3d:30:2a:d0:12:
7a:9f:dc:68:5a:04:55:7a:63:cf:7f:69:bf:82:9c:1c:8a:7e:
49:6e:4c:dd:b9:53:35:dd:fe:52:af:81:5a:fd:8c:dd:06:3c:
d0:81:15:2e:fa:0e:eb:cc:b1:64:35:10:f2:23:be:fe:3e:07:
83:24:5e:49:c7:ef:f9:19:16:ed:69:d4:02:2a:ce:4b:92:72:
d7:e7:e1:1c:eb:8a:f5:42:8a:9c:a0:6b:57:be:27:e9:0d:e2:
a1:80:56:d0:3b:e8:9a:0a:c0:08:3b:75:4e:d6:bb:13:8d:ae:
d3:6d:d1:fe:56:ce:71:ab:f6:f4:fa:c7:5b:c0:e3:b7:59:66:
c9:30:aa:a4:51:d9:c8:cf:1a:67:d0:ef:86:ee:ff:e1:79:b0:
46:60:cb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:55 2026 by rpki-client