
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/3486D47412D511EFB1EF161DC4F9AE02.roa
File: 3486D47412D511EFB1EF161DC4F9AE02.roa (raw, json)
Hash identifier: vmFsKgonT1sP7XlgpbWPmdbrw2z/dTAl1pk0bSYlcE0=
Subject key identifier: 2F:3E:1F:91:FA:76:17:9F:E8:99:70:63:76:A1:AF:82:B4:EC:88:98
Certificate issuer: /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Certificate serial: 03C0
Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/3486D47412D511EFB1EF161DC4F9AE02.roa
Signing time: Fri 29 May 2026 18:00:51 +0000
ROA not before: Fri 29 May 2026 18:00:51 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 55256
IP address blocks: 45.250.161.0/24 maxlen: 24
45.250.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960 (0x3c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Validity
Not Before: May 29 18:00:51 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a19d453-8428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:50:b3:82:9e:ff:29:8a:66:c4:90:76:fb:34:
76:d7:96:95:96:ec:8d:e6:0a:ae:b1:08:35:ec:41:
11:c9:49:56:f7:81:cf:c4:9f:46:65:fb:a4:0e:c2:
aa:c9:2c:40:07:3a:de:96:14:2d:18:29:c6:8d:f8:
21:73:1e:dd:3f:19:ce:54:d2:a9:94:c7:47:b4:7b:
03:06:93:21:6f:c4:6e:86:55:1f:c5:0f:e1:be:13:
90:2b:77:84:ac:08:d0:90:b8:56:55:fe:3d:41:f7:
17:8a:0e:d8:28:05:05:41:57:bd:c8:54:46:81:9e:
a1:e4:74:9d:5a:1f:17:54:a1:2d:89:15:32:71:1a:
93:5f:64:5f:28:e7:d3:df:29:bf:58:23:23:ad:72:
a1:34:a5:57:f2:a6:18:c5:d3:fd:16:f2:a2:0b:44:
e5:e7:db:ef:07:d8:fb:81:26:52:a8:7b:bc:ea:b3:
87:49:10:75:f3:b5:be:e7:32:20:93:1d:22:0b:4f:
b2:17:7a:8c:36:50:88:b6:2e:8b:d5:ee:d3:0c:2d:
a8:2d:90:dc:f5:ad:aa:df:aa:ee:29:0b:a8:fe:2c:
fb:33:f8:1a:48:85:13:14:db:26:9a:11:86:f2:9c:
93:6e:d7:fb:22:dd:23:b9:33:cd:e9:cb:d7:c2:08:
f3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3E:1F:91:FA:76:17:9F:E8:99:70:63:76:A1:AF:82:B4:EC:88:98
X509v3 Authority Key Identifier:
keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/3486D47412D511EFB1EF161DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.250.161.0/24
45.250.163.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2e:e8:ba:7a:cb:08:66:38:0e:63:a7:b6:ad:4b:89:7a:c3:
b8:bb:92:2c:6c:6d:bd:58:a3:1d:f8:95:08:89:4f:c5:97:62:
37:87:45:74:15:00:f5:f3:49:df:0a:86:69:2d:b2:07:ba:8c:
a8:a3:6d:8b:35:24:cb:4a:2c:4b:d0:bd:dc:b5:a1:e0:7e:b1:
bd:a2:71:ec:63:06:f2:06:20:45:04:5d:fe:e6:4f:fb:30:c0:
ce:6a:fa:8f:bb:33:25:84:6a:a9:48:39:9c:1a:a0:d6:17:f2:
b0:c1:13:89:1b:2c:46:47:01:c9:c3:a9:39:74:be:2a:ec:0e:
b2:bf:b4:76:3e:78:97:10:7d:ca:68:3c:b3:e8:0d:da:65:e8:
07:aa:f1:43:f2:b9:4d:ea:05:52:ef:d2:0c:d3:88:fc:70:66:
3a:53:cf:39:d3:dc:06:a0:fd:b6:52:1d:71:56:1a:df:10:08:
95:cd:5d:5a:06:81:13:ad:0a:83:0c:8a:25:35:96:f0:9d:12:
a6:0a:11:fe:8a:25:bc:c4:01:f8:61:6b:05:e3:09:ba:16:33:
2b:e0:c1:d3:6b:8d:f6:cc:39:ae:ab:27:ad:d4:af:1e:b1:ba:
3b:63:81:a2:64:3f:ac:a0:74:24:80:27:4a:d9:f9:c9:05:da:
0a:35:52:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:54:47 2026 by rpki-client