
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/4B52A44814DF11EEAB46A86DC4F9AE02.roa
File: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (raw, json)
Hash identifier: TptByVGgUQdWR0MavGH9OYmCsbH/nXydqU06KChwsXI=
Subject key identifier: B4:40:1B:D9:8E:82:04:CD:70:38:1D:49:63:C2:5E:93:72:3E:AC:A2
Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
Certificate serial: 1ECB
Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/4B52A44814DF11EEAB46A86DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:19:33 +0000
ROA not before: Fri 12 Dec 2025 16:13:27 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 59091
IP address blocks: 163.138.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl
rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7883 (0x1ecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
Validity
Not Before: Dec 12 16:13:27 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a47524-fa2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ba:30:1e:89:c1:76:0e:48:6b:98:66:9d:f2:
93:9c:ea:e6:43:21:f4:de:2a:24:37:b2:e3:ef:16:
c9:61:d8:ed:12:af:8a:81:56:57:1e:10:2a:c9:50:
5d:f1:b1:e3:d2:7f:0b:a0:10:59:e5:4a:92:ea:b4:
e0:25:04:12:f0:a1:fb:19:ab:08:4c:45:4b:a5:32:
9f:4e:32:75:9a:9c:f3:ec:14:8f:f2:32:d8:6c:5a:
c9:86:2e:3b:53:06:87:4e:51:b0:d0:9d:86:a5:65:
59:82:7a:3d:e9:f1:a0:6c:a3:0c:57:61:1f:85:90:
16:f5:b9:6c:b0:f1:78:40:56:5a:91:96:6a:0e:8d:
cb:7e:af:77:46:ff:bc:b6:1e:55:04:0e:f1:dd:45:
94:90:f8:7c:fb:8c:ac:ea:6b:dc:5c:e6:60:77:9b:
7b:db:fb:7b:6c:be:12:51:f5:46:36:61:ce:78:41:
43:53:7f:5a:e9:43:38:0f:eb:bd:ab:30:c0:9d:bf:
01:3f:ca:60:ce:f3:b9:70:e4:66:37:43:34:41:ef:
84:40:d0:0b:7b:74:06:00:53:e0:eb:d9:69:4a:43:
a0:8a:f7:25:bd:91:d5:a1:46:4b:97:f2:40:b8:f8:
8c:89:ac:e0:f0:ea:cb:c3:2b:c7:96:1a:d5:4f:43:
13:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:40:1B:D9:8E:82:04:CD:70:38:1D:49:63:C2:5E:93:72:3E:AC:A2
X509v3 Authority Key Identifier:
keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/4B52A44814DF11EEAB46A86DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.138.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:bf:b6:36:50:ad:f0:ef:10:b5:8f:ba:0a:ee:eb:bd:6e:75:
ad:bd:3d:b5:ee:d2:88:77:b0:d7:09:bb:ff:ce:98:c4:94:41:
e9:9e:b2:c4:5f:f1:b7:a8:03:41:26:a7:c9:e3:9e:43:03:ff:
63:7e:8b:94:31:e8:33:a1:3c:5e:d8:a9:bf:01:e4:55:1b:1c:
1f:cc:51:c2:67:0a:63:36:61:4a:ef:47:8c:4e:3f:d7:1c:4d:
5f:1d:1b:1a:60:80:1f:88:93:02:ca:09:62:28:d3:93:36:b4:
72:02:e8:8c:21:2b:24:26:84:e0:7d:19:d0:47:e1:4f:ce:9f:
49:47:da:19:92:3e:01:b6:59:78:8b:3d:56:0b:0d:b0:ce:b1:
c9:16:67:7b:32:ea:2b:53:1e:23:80:26:92:30:81:17:d4:7e:
60:79:a9:52:2d:f2:f5:dc:68:77:33:5c:a6:ec:43:76:1c:87:
a9:6e:f7:e6:6b:43:7f:d5:a5:cb:69:bf:f4:2d:75:d6:a2:ff:
e3:7a:b6:ce:e6:48:6c:cc:fd:72:79:7f:6f:a7:4e:51:fc:5e:
d1:c5:9c:22:d4:d7:f1:3a:c7:9d:11:d5:73:47:ad:39:23:aa:
24:8d:cc:bf:e8:48:b6:75:69:05:75:4d:51:80:99:69:84:60:
9c:b8:d5:3c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICHsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMUExMTAvBgNVBAUTKENFMTE0NjgwRkY2RjREOUJDM0YxODgwRDYxMEQ2QUVF
RUFFQkYwRDQwHhcNMjUxMjEyMTYxMzI3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzUyNC1mYTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmLowHonBdg5Ia5hmnfKTnOrmQyH03iokN7Lj7xbJYdjtEq+KgVZXHhAqyVBd
8bHj0n8LoBBZ5UqS6rTgJQQS8KH7GasITEVLpTKfTjJ1mpzz7BSP8jLYbFrJhi47
UwaHTlGw0J2GpWVZgno96fGgbKMMV2EfhZAW9blssPF4QFZakZZqDo3Lfq93Rv+8
th5VBA7x3UWUkPh8+4ys6mvcXOZgd5t72/t7bL4SUfVGNmHOeEFDU39a6UM4D+u9
qzDAnb8BP8pgzvO5cORmN0M0Qe+EQNALe3QGAFPg69lpSkOgivclvZHVoUZLl/JA
uPiMiazg8OrLwyvHlhrVT0MTyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLRAG9mO
ggTNcDgdSWPCXpNyPqyiMB8GA1UdIwQYMBaAFM4RRoD/b02bw/GIDWENau7q6/DU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS81REQ0OEFCNjg5
RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRadkQ4WWdOWVExcTd1cnI4
TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3poRkdnUDl2VFp2RDhZZ05ZUTFxN3VycjhOUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTRCMUEvNURENDhBQjY4OUYyMTFFNjlFNUY2MzM5QzRGOUFFMDIvNEI1MkE0NDgx
NERGMTFFRUFCNDZBODZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQFo4rAMA0GCSqGSIb3DQEBCwUAA4IBAQA/v7Y2UK3w7xC1j7oK7uu9
bnWtvT217tKId7DXCbv/zpjElEHpnrLEX/G3qANBJqfJ455DA/9jfouUMegzoTxe
2Km/AeRVGxwfzFHCZwpjNmFK70eMTj/XHE1fHRsaYIAfiJMCygliKNOTNrRyAuiM
ISskJoTgfRnQR+FPzp9JR9oZkj4Btll4iz1WCw2wzrHJFmd7MuorUx4jgCaSMIEX
1H5gealSLfL13Gh3M1ym7EN2HIepbvfma0N/1aXLab/0LXXWov/jerbO5khszP1y
eX9vp05R/F7RxZwi1NfxOsedEdVzR605I6okjcy/6Ei2dWkFdU1RgJlphGCcuNU8
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:34 2026 by rpki-client