
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/44B43AAECC1011EFA5596A50C4F9AE02.roa
File: 44B43AAECC1011EFA5596A50C4F9AE02.roa (raw, json)
Hash identifier: k+B0JqG6DzUUO2dkYKnaQ9nxWqOFCU6QTo0xPWo3f40=
Subject key identifier: E2:38:EC:5F:9A:FF:B8:26:97:E6:46:9B:CB:84:81:9C:33:3E:13:37
Certificate issuer: /CN=A91CE7A4/serialNumber=78362EF9FE39496EF65B36F83B6698AF9308DFAB
Certificate serial: F8
Authority key identifier: 78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/44B43AAECC1011EFA5596A50C4F9AE02.roa
Signing time: Fri 17 Apr 2026 06:40:41 +0000
ROA not before: Fri 17 Apr 2026 06:40:41 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153483
IP address blocks: 2001:df4:dec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl
rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 05:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE7A4, serialNumber=78362EF9FE39496EF65B36F83B6698AF9308DFAB
Validity
Not Before: Apr 17 06:40:41 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69e1d5e9-bac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:58:2f:28:00:79:6b:48:86:2a:61:17:e5:
93:8e:34:7c:b1:6d:e9:36:fc:8c:a7:14:f3:2f:74:
70:50:84:db:95:02:9e:36:4a:79:7e:38:a1:cb:10:
a1:d6:db:bc:6d:ad:ea:af:c6:56:92:55:13:ef:83:
61:c0:f1:b3:22:99:71:46:e5:2d:cc:95:38:44:db:
31:25:cf:a9:2c:de:e7:62:ed:df:eb:b2:7c:33:1f:
16:f6:5e:50:72:20:7b:87:6c:33:03:5d:98:0a:37:
c5:c9:aa:83:01:e7:94:22:0b:f9:18:44:13:3b:f4:
ca:04:3e:63:38:d1:8a:5c:4c:7b:6f:01:c5:2e:75:
a7:14:4b:3e:9e:1c:90:ad:fc:f2:5b:31:2b:f1:6b:
4b:b8:64:47:57:b3:22:7b:b4:8d:a0:5d:f7:f5:e5:
51:62:97:fc:78:6d:18:67:14:dd:85:c4:88:69:8e:
2f:6e:a7:7d:32:ac:e3:9b:a7:ea:e2:7e:f1:28:fc:
e0:c6:23:cc:40:96:a0:90:a7:68:71:cc:56:dd:ce:
62:1e:a5:a4:82:be:02:7a:b8:b8:9a:36:61:11:28:
b8:56:05:df:38:db:7b:69:88:91:fa:18:42:a9:38:
c9:32:af:8e:a9:39:dc:c8:ed:33:70:78:a5:1d:a5:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:38:EC:5F:9A:FF:B8:26:97:E6:46:9B:CB:84:81:9C:33:3E:13:37
X509v3 Authority Key Identifier:
keyid:78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/44B43AAECC1011EFA5596A50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:dec0::/48
Signature Algorithm: sha256WithRSAEncryption
c5:d4:7e:d4:ad:3a:bc:31:2f:86:2a:e9:08:1c:d3:7f:46:41:
e6:63:5f:60:95:49:7b:18:9a:f7:04:97:ca:8c:1d:ca:26:15:
d8:07:6d:31:90:f4:5f:f4:3e:bc:ec:3f:c2:3d:4c:fd:c3:ad:
8e:18:29:b6:dc:56:37:62:a0:45:a8:85:35:c3:74:b6:27:91:
46:d8:de:db:05:8a:e4:62:2f:0c:bf:62:50:bc:05:7c:4e:b5:
69:4f:5b:5a:d9:74:dc:86:08:75:da:e9:26:54:da:81:2f:a5:
3e:c5:e1:ef:0f:a2:b0:34:4f:9e:0f:59:b4:6a:40:28:f0:8f:
15:07:6e:14:b8:fe:02:15:ee:4a:02:09:cb:8f:61:0b:a4:01:
8c:55:6a:ce:f4:13:a0:13:76:47:95:d9:ce:2f:ff:60:aa:68:
22:64:27:58:61:34:76:8c:7b:a3:d2:c9:ad:1b:6d:51:91:52:
96:9e:6a:0c:f1:b2:8e:85:ce:19:0c:a0:31:ef:12:0c:94:72:
a0:d4:a1:62:a5:ce:5c:00:e9:96:dd:97:56:7c:d9:05:9a:b9:
27:85:ab:0f:ea:4a:d8:67:6e:07:1c:73:09:4a:96:f7:4c:fa:
1e:32:50:12:7c:be:96:fd:a8:f2:0d:26:b8:d6:3e:05:34:57:
7f:6c:c2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:41:43 2026 by rpki-client