
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/48DDFB8E8FAF11F0B59F0948C4F9AE02.roa
File: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (raw, json)
Hash identifier: z+HwCEnQPM1ZWbTaxIobMQlSkN1lILUyzjqFvMLdIyM=
Subject key identifier: CA:E9:9F:17:81:17:F3:B3:7B:75:4F:1A:C8:4D:71:25:25:F0:B3:54
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 0952
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/48DDFB8E8FAF11F0B59F0948C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:41:33 +0000
ROA not before: Fri 12 Sep 2025 08:05:45 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 153259
IP address blocks: 169.136.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386 (0x952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Sep 12 08:05:45 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a47a4d-7449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6d:c0:35:b9:91:57:16:e6:a2:3e:9e:d3:9e:
07:69:af:c7:5a:09:b7:ee:30:cc:fd:68:90:c3:3f:
ff:46:89:44:50:a7:43:a4:cc:d2:81:ec:d8:f7:41:
a4:22:90:54:f7:95:42:a9:9d:81:ea:05:9c:22:e5:
35:0e:9c:2a:d9:47:dd:fd:b1:7a:89:92:09:f3:4d:
58:11:0e:b7:75:7b:87:2c:5d:90:59:c1:ad:9c:1c:
f2:cb:46:1a:84:6d:b7:3c:b0:a0:64:88:d5:73:22:
05:fc:65:5d:15:4a:51:41:38:da:66:77:97:20:52:
f2:ff:f4:a3:c8:84:b1:d1:cf:73:5b:71:25:b2:c3:
80:52:46:c9:02:e0:06:f3:50:60:48:3d:ed:05:22:
84:e7:3b:f9:d0:17:e6:77:db:81:f8:53:e9:9d:d6:
05:92:51:96:8e:2b:c5:9e:f6:be:f2:27:a5:37:2f:
df:5e:f8:e8:64:10:ae:a8:46:39:22:bf:df:c1:26:
d6:f4:ca:be:f8:4e:73:65:d8:d8:fc:e4:55:72:5b:
c6:29:de:c5:7e:4c:b0:9f:b7:e6:3b:71:eb:b8:6f:
c6:ed:97:5c:aa:9c:a4:5b:eb:0c:05:0a:c1:bc:0c:
af:1b:b6:19:8a:bb:b2:c0:5c:b0:f4:e6:de:63:b2:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E9:9F:17:81:17:F3:B3:7B:75:4F:1A:C8:4D:71:25:25:F0:B3:54
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/48DDFB8E8FAF11F0B59F0948C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
169.136.109.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:5d:02:aa:65:8e:8b:c7:e9:96:c7:2a:2b:07:de:03:07:1e:
9f:0a:0f:80:5f:f1:9f:7e:88:9f:06:4d:5a:f2:17:54:b3:b1:
bb:96:76:88:27:26:41:fa:85:49:f7:bc:85:fa:d3:49:01:da:
1d:e4:ce:1c:f9:57:f9:95:71:d0:bb:d5:9d:82:23:7f:a3:66:
17:a3:6b:7e:3b:d7:83:0f:7a:04:48:32:8a:33:7c:a3:6a:46:
7c:5e:b8:d8:4c:65:df:2f:f9:5b:7f:4c:94:a5:76:b7:3e:a3:
1b:62:a8:9d:23:cf:ac:21:f9:1f:fd:8e:27:e3:6a:2e:9e:15:
c9:f5:c4:b4:0a:81:9b:82:2d:8c:18:ab:2e:e6:63:22:99:3c:
dc:06:9a:74:7d:89:34:8a:36:e2:19:26:b6:85:4a:5f:6b:9b:
a3:67:48:b7:17:e6:9b:2e:c2:70:01:3f:d6:b4:27:fc:56:20:
cd:63:ab:a7:f5:0e:a0:b6:4d:fe:45:44:fe:79:53:cf:be:cf:
f0:93:9b:50:c0:3c:44:10:b8:bb:88:49:46:ea:98:5e:4c:a6:
8f:39:1d:c9:1b:99:82:93:f9:94:c0:ab:1a:6a:f5:06:a2:22:
da:1c:bb:75:19:17:e8:d5:fd:36:1f:4d:21:dd:2e:78:b1:cc:
d8:c8:7a:3a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY5M0ExMTAvBgNVBAUTKDdFMjQ0MzEwRDdBNDU2RUIxMjdCOTI2QzQyRjI2RDc5
RTlBQ0RCODgwHhcNMjUwOTEyMDgwNTQ1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2E0ZC03NDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1G3ANbmRVxbmoj6e054Haa/HWgm37jDM/WiQwz//RolEUKdDpMzSgezY90Gk
IpBU95VCqZ2B6gWcIuU1Dpwq2Ufd/bF6iZIJ801YEQ63dXuHLF2QWcGtnBzyy0Ya
hG23PLCgZIjVcyIF/GVdFUpRQTjaZneXIFLy//SjyISx0c9zW3ElssOAUkbJAuAG
81BgSD3tBSKE5zv50Bfmd9uB+FPpndYFklGWjivFnva+8ielNy/fXvjoZBCuqEY5
Ir/fwSbW9Mq++E5zZdjY/ORVclvGKd7Ffkywn7fmO3HruG/G7ZdcqpykW+sMBQrB
vAyvG7YZiruywFyw9ObeY7IxJQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMrpnxeB
F/Oze3VPGshNcSUl8LNUMB8GA1UdIwQYMBaAFH4kQxDXpFbrEnuSbELybXnprNuI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GN0RGQTcyRUU1
RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1c1NlNUpzUXZKdGVlbXMy
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZpUkRFTmVrVnVzU2U1SnNRdkp0ZWVtczI0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REY5M0EvRjdERkE3MkVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvNDhEREZCOEU4
RkFGMTFGMEI1OUYwOTQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAqYhtMA0GCSqGSIb3DQEBCwUAA4IBAQBsXQKqZY6Lx+mWxyorB94D
Bx6fCg+AX/GffoifBk1a8hdUs7G7lnaIJyZB+oVJ97yF+tNJAdod5M4c+Vf5lXHQ
u9WdgiN/o2YXo2t+O9eDD3oESDKKM3yjakZ8XrjYTGXfL/lbf0yUpXa3PqMbYqid
I8+sIfkf/Y4n42ounhXJ9cS0CoGbgi2MGKsu5mMimTzcBpp0fYk0ijbiGSa2hUpf
a5ujZ0i3F+abLsJwAT/WtCf8ViDNY6un9Q6gtk3+RUT+eVPPvs/wk5tQwDxEELi7
iElG6pheTKaPOR3JG5mCk/mUwKsaavUGoiLaHLt1GRfo1f02H00h3S54sczYyHo6
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:09 2026 by rpki-client