
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/48A87092E55C11F0AC7781DC396F56BC.roa
File: 48A87092E55C11F0AC7781DC396F56BC.roa (raw, json)
Hash identifier: I0wBboWIudBQ7dYBJo2wUoCVtx7RIy0Rqyv4U3HVGRg=
Subject key identifier: EB:44:B1:2E:53:17:87:5D:A3:C0:06:02:CB:7E:09:4E:3C:7B:15:44
Certificate issuer: /CN=A91A9720/serialNumber=C2E574D210CD71588736BF379D47CD1146AC37B2
Certificate serial: 27
Authority key identifier: C2:E5:74:D2:10:CD:71:58:87:36:BF:37:9D:47:CD:11:46:AC:37:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/48A87092E55C11F0AC7781DC396F56BC.roa
Signing time: Sun 01 Mar 2026 05:50:09 +0000
ROA not before: Tue 30 Dec 2025 08:54:46 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 154416
IP address blocks: 2402:3e20::/32 maxlen: 32
2402:3e20::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.crl
rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9720, serialNumber=C2E574D210CD71588736BF379D47CD1146AC37B2
Validity
Not Before: Dec 30 08:54:46 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a3d391-1c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dc:0f:53:d4:27:db:6c:8c:74:da:fa:44:a6:
54:98:60:e4:a3:34:cc:80:60:56:12:93:bb:d4:98:
d2:26:7e:07:29:9c:e9:3c:d3:7d:a5:42:21:dd:09:
dd:f8:2e:4b:51:a2:93:8b:3d:5b:fc:ad:70:c9:68:
b3:4b:8f:b1:4c:4e:c8:4d:f9:ba:be:6d:c5:59:24:
aa:0e:66:90:ab:45:e4:b1:e1:6b:e5:da:39:c8:7f:
9b:d8:c7:21:e7:e8:09:a0:92:1c:72:17:c0:47:2b:
7e:4e:c9:7a:74:46:70:bc:ae:0e:67:ca:8f:dd:2b:
e5:44:64:df:ab:f0:a3:4d:4a:6f:aa:20:c4:1b:9a:
77:4b:88:9c:1b:de:40:b7:3c:36:95:77:42:e5:bb:
89:5a:72:a6:59:ed:da:ed:ca:40:62:9d:71:86:9c:
e1:dc:4c:3f:5a:75:01:07:6a:b5:a9:6a:82:e4:10:
8f:fc:ac:4b:aa:f9:e4:f6:bb:c7:2c:72:6c:f1:38:
26:60:b7:fa:08:90:01:2b:94:dd:4c:85:94:0a:3c:
49:88:93:f2:46:7b:54:b3:dc:e6:a2:74:c0:f8:4e:
2d:a9:8c:ad:6c:57:a0:96:88:ac:ac:0c:a6:e7:c8:
b3:64:0f:03:a4:fc:2e:04:3a:06:2e:b2:26:8c:ec:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:44:B1:2E:53:17:87:5D:A3:C0:06:02:CB:7E:09:4E:3C:7B:15:44
X509v3 Authority Key Identifier:
keyid:C2:E5:74:D2:10:CD:71:58:87:36:BF:37:9D:47:CD:11:46:AC:37:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/wuV00hDNcViHNr83nUfNEUasN7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuV00hDNcViHNr83nUfNEUasN7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/5A450750E55911F0B2288958386F56BC/48A87092E55C11F0AC7781DC396F56BC.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:3e20::/32
Signature Algorithm: sha256WithRSAEncryption
4f:97:a0:54:d9:51:a7:1e:9a:58:b1:49:7b:b4:55:5d:ee:bf:
bf:55:83:c7:2f:f5:08:85:2b:12:41:bf:03:9d:b3:74:9b:4a:
b6:9c:5e:81:a6:38:bf:c8:f7:21:25:22:f3:dd:ac:dd:d1:45:
5c:0c:4a:a8:f9:2f:dc:1c:34:6d:5c:b0:1e:aa:bd:9a:97:a8:
20:15:f5:c0:07:e6:03:26:7a:7b:c4:87:fe:06:6f:bd:e0:54:
7b:63:e4:c1:f8:97:66:50:02:cd:5a:7c:13:7a:aa:57:71:fb:
dc:a1:67:21:9e:53:87:f2:62:cf:8d:7c:e1:a2:77:d3:08:9d:
f1:63:c5:f0:0d:b1:66:2f:44:e2:68:f7:29:2d:ef:d5:90:c4:
6c:61:a1:99:c7:6b:04:55:be:cf:35:82:fe:14:79:52:b0:4b:
1d:17:dd:48:e8:76:1f:58:a5:4c:e9:be:4c:59:73:85:a3:14:
41:0f:4e:11:23:a9:ce:a7:6d:40:45:2c:f1:d6:c0:01:a2:75:
dd:1e:67:74:b9:c0:72:c7:73:b0:b3:14:af:cd:34:07:79:dc:
a9:bd:72:f4:32:8d:40:23:a6:b8:73:83:02:b0:a9:81:0d:97:
16:a5:ad:d4:66:60:ff:c2:b0:5a:d2:8e:14:c5:52:3f:6c:43:
63:23:d2:59
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
OTcyMDExMC8GA1UEBRMoQzJFNTc0RDIxMENENzE1ODg3MzZCRjM3OUQ0N0NEMTE0
NkFDMzdCMjAeFw0yNTEyMzAwODU0NDZaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkMzkxLTFjNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDh3A9T1CfbbIx02vpEplSYYOSjNMyAYFYSk7vUmNImfgcpnOk8032lQiHdCd34
LktRopOLPVv8rXDJaLNLj7FMTshN+bq+bcVZJKoOZpCrReSx4Wvl2jnIf5vYxyHn
6AmgkhxyF8BHK35OyXp0RnC8rg5nyo/dK+VEZN+r8KNNSm+qIMQbmndLiJwb3kC3
PDaVd0Llu4lacqZZ7drtykBinXGGnOHcTD9adQEHarWpaoLkEI/8rEuq+eT2u8cs
cmzxOCZgt/oIkAErlN1MhZQKPEmIk/JGe1Sz3OaidMD4Ti2pjK1sV6CWiKysDKbn
yLNkDwOk/C4EOgYusiaM7PoTAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQU60SxLlMX
h12jwAYCy34JTjx7FUQwHwYDVR0jBBgwFoAUwuV00hDNcViHNr83nUfNEUasN7Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5NzIwLzVBNDUwNzUwRTU1
OTExRjBCMjI4ODk1ODM4NkY1NkJDL3d1VjAwaEROY1ZpSE5yODNuVWZORVVhc043
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd3VWMDBoRE5jVmlITnI4M25VZk5FVWFzTjdJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTcyMC81QTQ1MDc1MEU1NTkxMUYwQjIyODg5NTgzODZGNTZCQy80OEE4NzA5MkU1
NUMxMUYwQUM3NzgxREMzOTZGNTZCQy5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAj4gMA0GCSqGSIb3DQEBCwUAA4IBAQBPl6BU2VGnHppYsUl7tFVd
7r+/VYPHL/UIhSsSQb8DnbN0m0q2nF6Bpji/yPchJSLz3azd0UVcDEqo+S/cHDRt
XLAeqr2al6ggFfXAB+YDJnp7xIf+Bm+94FR7Y+TB+JdmUALNWnwTeqpXcfvcoWch
nlOH8mLPjXzhonfTCJ3xY8XwDbFmL0TiaPcpLe/VkMRsYaGZx2sEVb7PNYL+FHlS
sEsdF91I6HYfWKVM6b5MWXOFoxRBD04RI6nOp21ARSzx1sABonXdHmd0ucByx3Ow
sxSvzTQHedypvXL0Mo1AI6a4c4MCsKmBDZcWpa3UZmD/wrBa0o4UxVI/bENjI9JZ
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:22:33 2026 by rpki-client