
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/48D65BC2D28F11EB9F83683DC4F9AE02.roa
File: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (raw, json)
Hash identifier: PKuAHlg7IDQmqtBcmxC313Us4ZuOMAlQSrtZq4f+5Bg=
Subject key identifier: 29:2B:80:41:12:20:05:B4:0F:BA:72:D4:C7:CF:CB:B6:8B:EC:D8:3D
Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial: 073D
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/48D65BC2D28F11EB9F83683DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:42:14 +0000
ROA not before: Wed 08 Oct 2025 20:51:39 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 17439
IP address blocks: 217.18.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1853 (0x73d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Validity
Not Before: Oct 8 20:51:39 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a45e56-f90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:8e:db:4b:bf:4f:6e:56:1c:ab:4d:00:25:
dc:70:52:1d:ad:58:93:e8:bd:52:ad:3c:13:4e:26:
e7:dd:98:f5:06:11:25:25:e3:bf:b7:02:1b:4e:ff:
d9:b6:ee:11:9c:b6:11:2b:e3:f5:18:06:4b:43:7b:
a1:c5:36:f3:8c:1e:68:7e:f0:41:c7:24:b1:6a:90:
18:b0:e9:e1:8f:c4:0a:eb:14:6a:f2:9e:8b:c1:a5:
7e:11:53:83:f4:5c:84:67:0c:c6:b6:3b:88:d3:31:
d4:d6:6f:f9:2b:06:e6:79:2c:fd:2e:4f:dc:81:82:
61:ca:1f:16:eb:b8:41:ca:eb:98:38:c0:b4:db:7e:
88:30:9b:fe:2a:fa:ff:dc:f0:d5:47:fd:52:54:3a:
ba:21:d1:af:6c:09:61:e7:f5:90:a1:77:b5:ed:f8:
84:9d:d8:59:73:d8:14:c8:72:96:71:ac:e9:6a:62:
d9:1d:aa:7d:24:5e:ae:4f:ed:62:74:ed:59:9b:75:
36:f5:92:21:d8:3d:4c:d8:c1:23:ba:88:c8:89:fd:
f9:c5:64:63:9e:34:db:57:84:d1:cb:f3:c7:a2:33:
69:d2:60:e9:08:3c:74:95:14:e3:e2:7a:14:40:aa:
3d:35:05:17:e2:e0:db:68:f3:6b:73:45:68:78:7e:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2B:80:41:12:20:05:B4:0F:BA:72:D4:C7:CF:CB:B6:8B:EC:D8:3D
X509v3 Authority Key Identifier:
keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/48D65BC2D28F11EB9F83683DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
217.18.52.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:e9:6c:41:3c:5a:f6:00:e8:ca:da:f2:3f:70:dd:33:5b:3a:
67:cd:30:9d:76:72:3f:60:7e:e8:9e:b7:e1:46:02:f3:fd:68:
52:5a:97:a2:aa:d8:6d:f7:08:b5:26:60:1f:6f:94:a9:78:b5:
47:43:dc:a1:2d:b3:8e:ea:63:5b:14:5a:1d:eb:e9:be:48:0e:
b6:79:78:c4:c5:9c:58:f1:3b:89:4f:37:2e:49:98:ce:7e:3b:
19:f5:8e:ab:02:7f:74:3b:03:a9:e9:a7:99:b3:5f:cd:36:ab:
f8:d6:f9:b8:6f:bf:ab:d5:b6:fa:77:56:0f:43:b6:da:3d:26:
45:d7:a0:58:d0:d4:20:d1:a0:c6:c7:53:e9:5b:e1:dc:5d:93:
02:72:41:bb:77:64:7c:69:85:66:4d:6d:9a:ac:d4:ff:ac:52:
f5:ea:4d:76:5a:3a:ff:a4:2b:23:44:09:0b:3d:05:31:1f:34:
4a:de:36:6e:1c:ee:69:b4:31:a1:b9:b0:92:87:d0:c0:ff:b9:
be:38:7d:34:bd:68:4e:96:45:a8:86:93:ef:73:ce:f1:e8:0b:
91:b0:60:99:c4:c4:84:29:e5:9b:8e:d9:ca:00:64:e9:a0:b1:
82:7c:f3:d0:cf:e1:5e:b2:57:1d:23:d0:be:47:0a:09:50:c3:
fd:eb:85:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:01 2026 by rpki-client