
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A50523F43F5211EBB1B1701FC4F9AE02.roa
File: A50523F43F5211EBB1B1701FC4F9AE02.roa (raw, json)
Hash identifier: mfLPXcvsn2GPwPl0nmYTUbj8MnwQ+nd3JJseLaE/iN8=
Subject key identifier: AA:7B:33:C1:B5:61:5D:D0:BC:3D:FB:0A:D8:2F:53:9D:D5:7B:E8:8A
Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Certificate serial: 07D3
Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A50523F43F5211EBB1B1701FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:46:58 +0000
ROA not before: Fri 28 Nov 2025 20:53:49 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 7474
IP address blocks: 2402:13c0::/48 maxlen: 48
2402:13c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2003 (0x7d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Validity
Not Before: Nov 28 20:53:49 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a46d82-414d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fa:fb:55:88:76:e6:ea:96:da:ce:15:65:08:
8a:c7:44:d0:1a:a9:2d:88:75:26:4e:35:fd:d6:84:
4a:c1:eb:40:b7:8f:74:46:de:fe:b5:cd:8f:8e:ef:
4c:9f:20:02:b1:fb:07:30:d1:ab:c0:11:e3:1d:95:
62:1f:a3:f8:f6:a0:81:16:24:81:8c:8c:54:c2:ed:
ea:49:58:4e:67:98:83:47:e7:18:33:8d:fc:42:8b:
be:1f:2f:7d:3b:28:ce:11:b5:69:ef:d7:18:7b:14:
d6:c4:a3:b9:47:97:cd:a8:f0:65:c0:64:05:fa:cf:
18:8f:5e:f7:9d:8e:a0:0f:aa:c1:2e:51:5f:bc:ff:
01:2a:3d:c7:5b:44:07:36:12:da:25:9e:fb:e6:f7:
21:99:53:6e:c5:2a:05:6c:d6:de:fc:8c:65:7a:90:
1a:4e:1c:0f:15:d2:1d:85:c2:af:90:c6:1e:66:48:
5e:41:19:68:44:fd:74:0e:3f:20:32:a1:04:83:03:
42:17:12:80:4b:09:8e:2b:b2:69:f8:d2:91:93:37:
be:9d:4a:28:a5:d6:22:f0:6e:e5:3a:74:0a:9c:b5:
f3:41:1a:5f:9d:0c:24:ef:42:ad:90:38:02:3b:70:
de:c2:3d:0e:b7:c6:b1:b8:05:44:a7:c8:19:94:8f:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7B:33:C1:B5:61:5D:D0:BC:3D:FB:0A:D8:2F:53:9D:D5:7B:E8:8A
X509v3 Authority Key Identifier:
keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/A50523F43F5211EBB1B1701FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:13c0::/47
Signature Algorithm: sha256WithRSAEncryption
40:03:58:89:54:e6:9e:28:21:ed:5b:c1:41:bb:9f:11:74:02:
82:c9:40:8a:65:33:39:55:44:26:4e:15:81:e9:b1:c7:32:bf:
61:40:69:28:3d:09:e8:bc:d5:c6:20:d7:ce:c4:15:59:0f:55:
5a:3d:29:8c:ee:5a:70:28:35:9b:9e:9e:4c:67:f3:f8:a0:c6:
19:45:36:e9:a3:5a:1f:c1:bf:12:40:ea:79:94:58:20:ad:0f:
a2:4a:e8:16:d9:34:8f:07:a9:f6:0e:5c:46:e0:05:1c:87:ba:
e6:bf:e1:4d:e6:c7:83:88:96:f5:bc:1b:52:31:4d:44:bc:6e:
4e:ba:dd:2f:bd:c0:1b:b8:78:86:8a:16:b0:15:89:9a:49:47:
78:13:e8:00:ee:f6:cc:f7:d2:5d:1c:7a:ff:4b:2a:0f:ae:d3:
de:d4:42:7c:04:12:15:ff:a4:65:91:79:70:db:a6:8c:9b:0c:
ee:c0:3f:a8:d5:5c:af:73:15:13:78:c3:32:38:05:ed:b0:8e:
23:40:a2:93:bf:d6:ca:0c:8b:b1:d4:63:64:a9:3e:46:6a:7a:
96:98:c1:d3:bf:5d:47:19:5b:3f:d6:bc:f4:91:a9:80:4e:9e:
40:21:16:32:ce:ac:71:4f:4c:ed:71:41:97:56:af:39:11:a9:
2a:b0:82:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:53 2026 by rpki-client