
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/2B6413D4670811EF9D46FA4FC4F9AE02.roa
File: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (raw, json)
Hash identifier: sqpOzCSyWagdZtLDNG0fEoo6eV6DhP/ql0m0DJxSXx0=
Subject key identifier: 64:73:6C:FA:D3:D0:AC:5E:2D:05:A3:88:39:A7:5E:34:E2:88:9A:80
Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Certificate serial: 01D7
Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/2B6413D4670811EF9D46FA4FC4F9AE02.roa
Signing time: Mon 13 Apr 2026 15:16:29 +0000
ROA not before: Mon 13 Apr 2026 15:16:29 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 150750
IP address blocks: 113.192.47.0/24 maxlen: 24
2001:df3:4340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Validity
Not Before: Apr 13 15:16:29 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69dd08cd-2d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:2e:aa:45:be:0f:04:26:a1:37:43:e3:0b:
3b:f6:2b:17:a6:c9:a1:3d:db:49:73:f3:e4:bb:61:
aa:ea:d2:6f:bf:7e:f4:24:a1:38:74:7f:b6:c6:d4:
d9:89:e4:97:d7:43:37:d7:0f:36:e8:e5:31:9c:7a:
c3:16:ef:79:a8:d0:0e:e4:ba:95:cd:19:c1:53:b9:
74:00:ab:78:c3:7f:04:a0:4f:26:3f:0f:68:b0:63:
9c:28:18:c2:dc:32:09:84:ed:d1:93:d8:4d:a1:f1:
25:70:23:0a:25:46:2a:b5:48:30:bb:f7:28:07:49:
ea:be:26:20:06:0f:40:63:f7:f6:f2:20:55:3a:52:
50:18:03:60:0a:96:6b:dd:5e:36:7e:02:ce:b2:f3:
dc:de:e4:0a:86:4c:4b:60:db:53:a2:8d:4f:f5:3b:
77:e6:8c:58:9e:cd:8b:2d:9a:74:d2:eb:22:ba:17:
4a:82:a9:6b:6d:ba:8e:1a:92:1e:a0:c8:41:c6:6f:
75:f7:fe:14:bc:1c:01:79:5a:41:1e:37:cd:e8:aa:
9b:46:61:88:c7:78:8a:37:16:9a:47:87:51:d4:89:
7f:d2:46:b4:bb:ea:d9:9b:12:80:43:1d:03:2e:02:
2b:cc:9a:79:9b:4a:de:ae:4e:01:58:4b:a3:bc:d0:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:73:6C:FA:D3:D0:AC:5E:2D:05:A3:88:39:A7:5E:34:E2:88:9A:80
X509v3 Authority Key Identifier:
keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/2B6413D4670811EF9D46FA4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
113.192.47.0/24
IPv6:
2001:df3:4340::/48
Signature Algorithm: sha256WithRSAEncryption
57:a0:aa:01:5a:ea:46:f8:f5:60:09:10:87:8f:0c:38:66:cc:
6f:a6:9a:d7:03:35:80:ae:c4:3f:5d:a9:c3:33:19:c3:92:b0:
fe:d6:55:b8:88:09:33:c1:9e:13:30:9f:9a:6a:5b:ee:9c:b2:
90:77:eb:55:fc:30:d7:81:13:ef:c3:4f:48:b2:a3:30:38:4a:
1c:b0:93:34:d5:4c:25:99:9b:7c:25:de:a2:1f:9c:12:42:84:
1c:68:98:34:e3:34:24:eb:fc:95:b2:1c:4f:01:15:c1:98:5d:
79:fb:2a:07:ce:9c:3a:c8:78:6f:e3:bd:09:c2:f5:bd:dd:eb:
ac:8f:ff:b0:c5:aa:59:5e:28:f8:46:a7:a8:a6:25:d2:3d:c4:
40:86:8e:ef:ca:20:67:b7:0b:c3:48:f5:a1:40:a0:68:e7:73:
be:2b:ad:a1:54:78:55:a9:7a:a2:32:04:4a:8d:a9:ef:3c:13:
47:33:2f:99:95:d2:00:9c:bb:dc:9a:a3:0d:e9:fa:6a:c9:7b:
d8:44:25:3e:ed:a4:7f:6d:64:a2:bb:2b:44:52:88:e7:57:90:
39:05:4c:bb:75:1d:01:d7:f1:07:28:f2:10:63:34:8f:c0:3a:
de:0e:ac:16:0b:de:32:10:b8:57:b1:1e:95:8a:84:36:a2:c4:
ce:3f:b3:4c
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2
ODA0RDRCMkEwHhcNMjYwNDEzMTUxNjI5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWRkMDhjZC0yZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuo8uqkW+DwQmoTdD4ws79isXpsmhPdtJc/Pku2Gq6tJvv370JKE4dH+2xtTZ
ieSX10M31w826OUxnHrDFu95qNAO5LqVzRnBU7l0AKt4w38EoE8mPw9osGOcKBjC
3DIJhO3Rk9hNofElcCMKJUYqtUgwu/coB0nqviYgBg9AY/f28iBVOlJQGANgCpZr
3V42fgLOsvPc3uQKhkxLYNtToo1P9Tt35oxYns2LLZp00usiuhdKgqlrbbqOGpIe
oMhBxm919/4UvBwBeVpBHjfN6KqbRmGIx3iKNxaaR4dR1Il/0ka0u+rZmxKAQx0D
LgIrzJp5m0rerk4BWEujvNAcWwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGRzbPrT
0KxeLQWjiDmnXjTiiJqAMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1
RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDYzRUEvNTBBNDI4OUU5NUZGMTFFRUE2QTRGNzBBQzRGOUFFMDIvMkI2NDEzRDQ2
NzA4MTFFRjlENDZGQTRGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAccAvMA8EAgACMAkDBwAgAQ3zQ0AwDQYJKoZIhvcNAQELBQADggEB
AFegqgFa6kb49WAJEIePDDhmzG+mmtcDNYCuxD9dqcMzGcOSsP7WVbiICTPBnhMw
n5pqW+6cspB361X8MNeBE+/DT0iyozA4ShywkzTVTCWZm3wl3qIfnBJChBxomDTj
NCTr/JWyHE8BFcGYXXn7KgfOnDrIeG/jvQnC9b3d66yP/7DFqlleKPhGp6imJdI9
xECGju/KIGe3C8NI9aFAoGjnc74rraFUeFWpeqIyBEqNqe88E0czL5mV0gCcu9ya
ow3p+mrJe9hEJT7tpH9tZKK7K0RSiOdXkDkFTLt1HQHX8Qco8hBjNI/AOt4OrBYL
3jIQuFexHpWKhDaixM4/s0w=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:59:25 2026 by rpki-client