
$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/44A28FACEFEC11EF80EC123DC4F9AE02.roa
File: 44A28FACEFEC11EF80EC123DC4F9AE02.roa (raw, json)
Hash identifier: JiKXROdjk0AOpr8pxMtTospRbspyoLRj1RJOfyjY5w8=
Subject key identifier: 91:6F:DB:62:48:AC:C2:D6:10:41:4D:BC:61:37:AD:7F:B4:76:69:F7
Certificate issuer: /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134
Certificate serial: C3
Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/44A28FACEFEC11EF80EC123DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:04:50 +0000
ROA not before: Fri 21 Feb 2025 00:39:11 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9294
IP address blocks: 163.61.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl
rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91992FA, serialNumber=057B537740382678A078F5BF284C726794B9D134
Validity
Not Before: Feb 21 00:39:11 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3f322-d955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:97:24:51:1c:ed:15:03:3d:de:a7:3d:e0:
83:27:24:2a:c2:32:3d:61:0f:78:3a:4f:00:49:e9:
d4:9d:af:bc:c2:2b:be:88:76:33:4a:2b:d0:82:a6:
41:5f:13:0e:c7:38:b8:56:be:48:81:00:08:55:29:
b2:ab:68:d1:5f:ee:ab:32:78:7f:33:d6:36:5d:2e:
be:42:25:af:79:7b:82:73:c8:13:63:f4:9a:a7:b3:
49:7e:15:b7:c4:eb:89:eb:b6:51:78:33:e5:67:5e:
04:98:18:75:3e:aa:ad:89:92:2b:d1:3b:b4:80:62:
07:20:97:7e:ce:b4:64:34:97:6c:93:57:35:12:6c:
55:13:cc:04:74:0e:0b:01:99:b5:05:ec:1a:67:cd:
2c:c0:c2:e4:f1:28:b7:cb:2c:91:c3:c9:19:1b:a1:
f1:8d:44:e5:67:17:33:ef:ae:6c:1b:09:a2:7f:b6:
31:7d:c7:71:67:24:10:6d:e2:0f:77:af:f6:62:e8:
42:c5:ba:e5:3d:c0:5f:d9:f8:11:0c:13:1b:a5:8b:
76:89:04:5f:57:b4:0e:91:3c:65:35:46:a9:2d:40:
7f:7d:2a:cb:3a:45:d5:66:7c:d7:43:62:9e:f5:94:
36:c7:b0:fb:05:e5:95:f7:0f:9c:45:cd:e0:9e:94:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6F:DB:62:48:AC:C2:D6:10:41:4D:BC:61:37:AD:7F:B4:76:69:F7
X509v3 Authority Key Identifier:
keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/44A28FACEFEC11EF80EC123DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.150.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:af:35:12:96:88:38:ef:10:9f:ad:5e:fa:12:dd:fb:54:f6:
78:c1:03:87:55:54:e2:80:07:1f:e0:a2:6c:27:bf:e8:9d:72:
03:69:99:48:f7:3c:11:86:fe:75:3f:29:b0:17:6f:11:68:a2:
11:c0:ce:3f:95:73:3f:37:5f:70:38:bd:9c:78:c4:07:8e:5f:
2f:64:ea:cc:04:26:a2:c1:86:a8:4a:e4:ee:83:e6:9b:8c:0d:
76:92:0d:2c:e1:81:00:5c:4c:0e:ee:c7:08:96:d4:d2:e4:57:
b5:e8:16:23:b8:73:91:67:d0:09:3d:5b:6f:31:14:9f:93:6f:
77:a8:7b:bc:48:35:d5:d9:6f:2c:d5:01:32:2f:c3:db:7a:ca:
85:06:33:4c:96:82:85:a6:fe:41:2e:82:5f:33:81:c9:33:a4:
c2:90:e8:f2:f6:25:ca:b4:53:f6:fa:7d:85:5a:dc:a4:97:62:
db:b5:17:d3:10:a4:32:0d:76:30:90:c1:fe:6b:c4:55:3b:bb:
b2:a8:78:e6:4c:87:8c:d6:07:52:9b:92:d6:e8:21:8c:f6:a6:
86:00:20:da:cd:7d:9b:27:96:f3:b6:ce:2e:78:05:22:92:a2:
07:7f:23:d9:63:d9:0d:df:6d:1f:a7:4f:af:d9:21:0a:51:91:
0e:f5:86:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:06 2026 by rpki-client