
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/749BAA209BC911F0B2979527C4F9AE02.roa
File: 749BAA209BC911F0B2979527C4F9AE02.roa (raw, json)
Hash identifier: C9Jv/Uq2OB5j76pUfpVUgNkJDsXVeicuF4bcmmtVO0Y=
Subject key identifier: 4E:53:D0:5F:B8:F9:3A:CD:62:FA:45:0C:C3:0A:9E:DE:60:E5:0E:22
Certificate issuer: /CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Certificate serial: 01C2
Authority key identifier: 5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/749BAA209BC911F0B2979527C4F9AE02.roa
Signing time: Sun 01 Mar 2026 05:24:12 +0000
ROA not before: Sun 01 Mar 2026 05:24:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58689
IP address blocks: 36.50.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl
rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE972, serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Validity
Not Before: Mar 1 05:24:12 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3cd7b-30a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:6b:dd:e0:44:89:63:0d:e8:f3:e2:c6:94:
2c:6f:40:62:a3:5d:b3:a3:06:7e:6d:ee:b0:b1:5a:
cf:e5:7d:c3:cb:c8:b8:3b:74:99:b1:7b:0a:bc:39:
21:99:15:a3:8f:f7:44:9c:18:c3:75:fb:f1:b7:1b:
1c:41:10:7e:76:26:19:dc:17:e7:cb:5c:6a:55:eb:
61:fb:1e:3d:3b:1d:a6:a7:e3:cc:2c:a6:e4:c1:8c:
f8:1f:53:66:a1:b5:f2:aa:ee:04:12:3a:b7:3c:74:
6c:ed:98:a2:31:97:73:65:a5:9f:86:f6:61:53:a6:
39:00:09:30:bb:ab:c6:c4:8a:f0:82:ea:86:8c:27:
48:bd:5d:76:28:3d:9f:67:08:fd:aa:7d:94:21:73:
d9:53:43:fa:5d:09:cf:18:cc:ba:cf:8a:5c:ca:49:
6a:21:58:2e:e3:23:dc:60:4e:40:48:4f:66:0c:23:
d2:df:02:93:d3:a4:12:40:7a:17:1b:a0:1d:cd:eb:
34:40:60:a2:62:3e:2a:70:d6:cc:01:64:db:4e:a1:
09:8f:df:de:fa:d8:89:b3:d5:08:85:e1:4f:c7:78:
ff:28:b2:04:f6:d5:c8:f1:62:cd:19:0e:5b:6e:e1:
fa:eb:cf:43:6c:8b:a6:e6:12:7d:a6:cb:ca:8e:15:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:53:D0:5F:B8:F9:3A:CD:62:FA:45:0C:C3:0A:9E:DE:60:E5:0E:22
X509v3 Authority Key Identifier:
keyid:5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/749BAA209BC911F0B2979527C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.199.0/24
Signature Algorithm: sha256WithRSAEncryption
97:18:46:7b:75:4e:41:fc:b1:98:ee:c9:12:48:c2:2a:5c:8b:
3e:a4:9b:e3:14:b5:3c:1a:06:25:1e:dc:d3:ea:95:c4:79:98:
2a:b0:02:c3:a3:b8:9e:39:b1:20:32:44:e8:e9:d2:17:cd:3f:
07:44:5b:d0:b8:2a:01:c8:7c:01:8f:77:7c:5f:c6:cf:da:5e:
9d:45:63:05:b8:04:a6:63:63:e3:b6:d4:3a:10:0c:3d:1c:93:
f8:01:6c:1c:d9:cd:2e:50:10:13:d8:c6:37:b9:5e:db:34:f3:
07:6f:9e:5a:cb:19:45:e9:31:8d:c0:ad:a6:3f:9d:a8:5e:9c:
50:ed:c1:bb:5c:6e:33:e0:ba:b0:6a:df:ff:6f:cb:6a:99:54:
d3:98:85:d9:ba:97:e7:f0:86:64:5b:88:85:66:56:cf:da:6c:
c5:89:6a:70:bd:94:cb:6f:52:39:ae:67:82:78:64:77:66:a2:
fd:ac:3c:6e:f4:55:8d:9f:bc:f5:52:01:3f:14:93:4d:8a:c2:
87:27:96:66:71:9c:ae:c8:72:d1:72:1b:87:1e:66:e9:4a:ab:
47:e1:4f:03:c2:29:3d:18:44:81:d8:26:34:3f:a4:55:d2:3c:
c5:a1:11:7e:c7:b4:96:85:cb:fc:6e:cd:53:cc:57:14:c9:12:
bf:41:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:06 2026 by rpki-client