
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/4749FE2AE9EC11F09B751112686F56BC.roa
File: 4749FE2AE9EC11F09B751112686F56BC.roa (raw, json)
Hash identifier: qQlTF9dTZWLs/G09Pvw0hcRd0j+bTrN8gGIowS7qYUU=
Subject key identifier: 8E:59:32:5C:C9:A0:1D:D3:50:DF:C2:A5:CA:0A:A3:48:FF:1A:FB:10
Certificate issuer: /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial: 0141
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/4749FE2AE9EC11F09B751112686F56BC.roa
Signing time: Sun 01 Mar 2026 15:11:48 +0000
ROA not before: Mon 05 Jan 2026 04:09:07 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 132742
IP address blocks: 116.206.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Validity
Not Before: Jan 5 04:09:07 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a45734-1d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:9f:e6:9d:7a:84:be:c3:bb:ec:02:85:00:
2f:23:e3:62:10:80:0c:e2:c8:8f:4f:c3:ba:22:b7:
51:8f:c6:5a:9b:b1:20:a2:ee:c4:b1:e7:e2:d1:6a:
a0:27:54:b9:77:20:47:5a:b6:fb:d7:49:14:b8:64:
77:9a:14:ea:cf:f3:fb:1c:3e:8d:18:0f:6d:df:99:
b1:9c:ba:34:bb:04:d7:5f:98:1a:e9:c3:9d:62:10:
b8:ba:13:e9:22:09:78:d6:ad:48:5e:82:a1:5d:ec:
0e:7f:2c:22:65:4b:8d:c5:88:a5:ed:28:33:f8:5c:
dd:1f:b2:6a:21:21:f7:bd:81:a6:a1:b5:c4:bc:ba:
6d:a4:6c:35:5d:76:50:35:fd:e4:08:41:36:71:34:
14:f4:ac:d2:00:33:83:51:bd:28:eb:15:3b:cf:e8:
34:cf:ce:da:d9:96:81:e3:3b:fd:62:2d:7b:5a:bb:
f0:2d:10:29:74:dc:d8:78:47:57:68:81:dd:d2:e3:
ee:1b:d6:19:6c:12:02:d3:c4:3a:c0:91:28:b2:b7:
f8:34:b2:6f:a7:c5:bd:60:08:4d:a7:31:34:4c:35:
bd:62:b4:35:f0:52:90:0a:76:23:7d:ed:3b:35:e4:
1e:21:bc:c5:ee:2b:29:0c:e3:f3:9e:ab:63:63:fe:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:59:32:5C:C9:A0:1D:D3:50:DF:C2:A5:CA:0A:A3:48:FF:1A:FB:10
X509v3 Authority Key Identifier:
keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/4749FE2AE9EC11F09B751112686F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
116.206.52.0/22
Signature Algorithm: sha256WithRSAEncryption
64:1a:56:5f:dc:d9:fa:b6:00:76:4e:70:f0:30:1c:e6:0c:1e:
75:49:45:65:90:99:1d:22:ca:02:b1:fe:dd:0a:c1:ed:8d:d7:
47:67:bd:c3:16:df:d5:4c:e1:16:c6:6f:e8:87:25:e5:a5:ee:
4c:a6:86:29:a0:c7:76:79:30:96:21:77:1c:b7:f9:93:b6:10:
75:e8:bc:65:87:00:5e:ce:2d:21:f2:10:24:b0:f7:79:bf:df:
7c:27:58:b6:d1:54:37:3b:6f:7a:bb:81:60:6b:0b:ba:be:af:
93:c0:56:93:e1:2a:ea:f9:db:22:d7:b6:45:85:e6:09:3a:f8:
7e:a8:27:da:c8:b9:13:ea:e6:06:76:c8:4c:28:09:89:28:f0:
c8:ad:c3:b5:2e:cf:aa:cd:72:07:64:fa:ae:6b:bd:57:c9:d3:
c4:53:96:d9:5e:8a:9f:f0:88:ce:cc:d5:a2:bf:eb:73:50:4f:
04:94:12:6f:8d:b2:43:fc:4a:17:02:43:39:47:bd:7b:f9:f5:
4a:85:c1:ed:91:0e:b6:80:64:d3:75:35:0b:14:11:eb:a7:3d:
44:bc:b6:a3:e6:cf:76:41:46:26:4e:ef:57:a8:60:24:ce:6d:
6a:b5:a9:c5:0e:5f:33:5b:68:c8:13:35:eb:aa:a0:91:aa:03:
20:e1:d4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:44 2026 by rpki-client