
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/50F0AF8EB2BE11EFA108946DC4F9AE02.roa
File: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (raw, json)
Hash identifier: zFIoI885tqgmIc+TzAmT9MM/Zj8hlNvuKZSxFX8e55k=
Subject key identifier: DB:F4:46:98:E7:88:42:26:4D:A4:77:CE:EB:90:8B:E3:DF:21:E9:71
Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Certificate serial: 014B
Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/50F0AF8EB2BE11EFA108946DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:24:54 +0000
ROA not before: Mon 09 Feb 2026 05:24:19 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 153035
IP address blocks: 203.12.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl
rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7
Validity
Not Before: Feb 9 05:24:19 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a43e26-9522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:a9:eb:6c:24:34:7f:38:8f:93:e4:be:9a:
21:34:eb:10:c9:fd:ff:b4:1e:a0:4f:3b:ac:21:21:
36:8d:d7:b0:bc:e4:0c:2c:48:ca:19:9d:47:7c:ae:
ec:bf:32:94:85:fd:ad:b7:f6:c3:4c:1f:3d:1d:34:
2b:da:7a:d8:90:a4:63:69:ee:d5:32:c9:e8:da:c5:
a2:0e:e3:44:ac:16:08:a0:33:91:4e:d3:2d:67:9d:
9b:85:0b:3c:c9:80:4f:08:e0:14:b1:7d:06:bd:b7:
04:85:28:1f:20:2f:69:61:82:ab:fb:ae:bf:5b:26:
60:6e:fc:54:89:36:a1:df:53:c5:61:bf:68:d0:61:
3d:be:86:c2:e0:b8:70:ed:20:5a:77:ca:c8:62:9a:
c4:12:9e:21:c0:a1:26:51:f7:25:b4:a7:4c:c9:b8:
85:38:bc:7d:69:e6:06:4f:c2:e4:2e:a3:80:fc:4d:
e8:f9:80:aa:85:bb:05:84:c8:3d:27:6e:87:a0:7d:
47:d8:d5:c3:35:aa:ac:ca:c5:cd:29:d4:fd:c6:24:
1d:e0:e2:cc:6a:7d:49:b3:10:ef:97:67:77:76:db:
bc:14:cb:47:8b:5f:19:b6:bf:b9:61:15:44:7c:cd:
4f:b8:5b:b3:6d:dc:a3:d7:f4:fa:ff:5e:0f:49:29:
93:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F4:46:98:E7:88:42:26:4D:A4:77:CE:EB:90:8B:E3:DF:21:E9:71
X509v3 Authority Key Identifier:
keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/50F0AF8EB2BE11EFA108946DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.12.249.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:c7:fa:9e:46:07:4a:bd:c1:91:85:37:d2:8c:6f:6f:f9:e0:
62:86:54:65:62:e8:4b:af:c3:bd:b6:58:90:dd:bc:9f:70:91:
e2:22:33:93:9e:72:ea:0b:02:6d:46:df:b4:df:3c:1b:f2:cc:
8f:aa:d0:ab:77:f9:70:98:81:25:d1:98:0e:bf:cb:d1:eb:c3:
e2:b9:91:4c:f3:94:32:60:39:3b:c4:9f:ba:5f:57:af:76:09:
76:10:dd:c9:2a:e1:59:2f:33:e5:2f:1e:e7:ba:fb:0e:b4:99:
5b:47:6e:05:24:04:a8:d6:68:6b:d6:5f:d9:75:e1:46:e2:79:
33:86:96:69:f3:7f:e7:c4:8c:24:4c:07:f4:65:e4:12:0f:e2:
96:86:91:5b:d1:b2:ee:1f:c6:37:b3:58:19:e8:fd:27:0d:e3:
67:c8:3f:c4:c7:75:30:47:cf:b1:f8:f6:04:21:4c:5a:d2:7e:
5a:df:07:f9:d1:ad:4c:88:c3:d3:a8:64:3d:a8:e8:68:ec:90:
1b:f2:92:22:ad:5d:d4:b6:c2:3b:02:0d:2f:01:64:44:68:40:
95:29:6e:d0:9c:52:b1:1c:24:93:97:21:ff:fd:83:0c:0e:48:
d1:ed:8e:e2:4e:16:fc:a2:5a:5f:a0:9c:73:78:c9:9a:12:ee:
e8:fd:a7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:58:15 2026 by rpki-client