
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/43BCAA10601011F1B53A223F8947A888.roa
File: 43BCAA10601011F1B53A223F8947A888.roa (raw, json)
Hash identifier: vep7CQcy+up6mhfS5ogfXgZcJcDxtccr1HC4IMBwAoM=
Subject key identifier: 30:5A:1D:66:38:0D:2F:F2:D2:45:3A:52:FA:1D:45:E4:76:CF:09:FD
Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Certificate serial: 097C
Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/43BCAA10601011F1B53A223F8947A888.roa
Signing time: Fri 02 Oct 2026 20:40:29 +0000
ROA not before: Fri 02 Oct 2026 20:40:29 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 154114
IP address blocks: 45.125.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2428 (0x97c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Validity
Not Before: Oct 2 20:40:29 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6ac016bd-c162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:90:b7:c2:20:4b:33:7e:a0:7d:0e:e4:2e:
38:3d:f7:66:91:d0:2e:7a:2e:95:4a:8a:d3:ca:0a:
0d:84:5e:44:4c:4d:39:a6:73:cb:5f:58:55:a7:49:
ff:3e:72:85:3f:fd:68:c4:d8:89:cc:16:18:fa:46:
e4:35:b1:24:59:ce:aa:14:b5:68:d6:43:12:be:f7:
d6:f8:87:15:8a:33:60:55:a1:b1:b5:ee:ab:08:3a:
92:13:bd:b7:9a:63:fd:8b:44:9e:51:29:4a:54:dd:
76:b2:bd:35:9e:07:8d:d4:ff:04:3d:1c:e0:72:59:
5e:cd:b9:46:ae:83:f0:21:d3:a9:26:37:17:ac:e9:
76:b8:99:af:99:b9:45:08:aa:36:34:5b:98:d7:04:
b5:4b:6b:32:c5:5c:a3:69:ae:15:7c:23:8e:b6:a8:
d3:a6:6e:e6:83:ba:f0:cf:14:38:79:e8:4b:5e:0d:
00:ca:7b:62:1d:86:2e:aa:79:ab:09:b9:79:4b:de:
5e:b0:18:8d:ae:77:43:bc:c4:06:76:a6:b8:44:db:
90:2c:24:fe:b0:d7:95:6b:81:c7:ff:87:1c:c9:46:
a6:e8:a9:fd:2d:53:5d:3f:f9:0d:f3:b7:1b:75:21:
2b:e3:30:61:74:e6:91:47:b0:87:bf:8f:1c:63:d4:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5A:1D:66:38:0D:2F:F2:D2:45:3A:52:FA:1D:45:E4:76:CF:09:FD
X509v3 Authority Key Identifier:
keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/43BCAA10601011F1B53A223F8947A888.roa
sbgp-ipAddrBlock: critical
IPv4:
45.125.50.0/23
Signature Algorithm: sha256WithRSAEncryption
07:0a:2c:c1:03:f5:19:05:c9:6b:d6:12:58:78:08:74:48:7b:
1f:55:f6:0a:59:ba:8e:9f:11:a9:f9:45:37:2e:ec:1e:c5:06:
64:c6:12:c1:fc:87:a3:d6:d2:e2:7e:9f:38:4e:a2:2a:6a:be:
b0:6e:b5:1d:d1:51:02:bf:9d:a9:4d:50:e4:bb:7a:7c:23:3e:
84:44:29:88:fd:1e:09:b7:0a:12:e1:f5:2c:36:f6:fd:3f:63:
c5:a0:31:e8:da:c7:e0:dc:86:bc:c8:51:a6:af:4b:2c:f8:35:
77:1f:9e:f6:f1:71:ea:a9:c7:85:2f:7c:00:89:85:c4:5b:1b:
25:83:43:0d:3c:d1:1b:60:27:77:b3:ce:a5:4d:8d:fc:b3:d6:
dc:51:60:66:c8:1b:2e:68:cd:90:f0:26:e5:6d:41:52:4e:b0:
41:29:a9:ba:93:1e:85:dd:eb:26:0e:b8:46:85:bc:33:6a:1e:
9f:e1:b2:e5:1c:9f:4e:d3:e8:34:77:3b:55:62:cf:1c:50:a8:
98:ce:e3:ec:b4:1b:64:db:c1:44:dd:17:70:41:20:06:cb:4b:
ff:a2:08:87:56:c3:2d:d7:5f:55:22:48:0f:d9:36:06:b0:cf:
71:0d:59:d0:a2:4e:dd:9b:ce:de:c7:d4:3b:3f:e2:cd:94:f2:
79:e4:9c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:51:18 2026 by rpki-client