
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/0861EEFA881A11EFA769B787C4F9AE02.roa
File: 0861EEFA881A11EFA769B787C4F9AE02.roa (raw, json)
Hash identifier: psgGb3ANrPemsGMpfT9JCuPtdmIwAydwkIMUMCBZW4Y=
Subject key identifier: 19:BE:2F:E9:56:2B:C9:77:8A:F2:4B:8A:5C:06:E0:95:14:8D:BD:8F
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 19CD
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/0861EEFA881A11EFA769B787C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:50:41 +0000
ROA not before: Fri 20 Feb 2026 17:14:48 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 138475
IP address blocks: 49.255.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6605 (0x19cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Feb 20 17:14:48 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a48a81-b2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:1c:a5:a8:10:e6:6e:b4:f2:2c:f4:64:3c:
3c:02:8e:5b:93:d5:74:b5:7e:6e:aa:61:eb:d8:55:
a7:8c:f3:9d:79:6a:94:8e:0a:68:06:37:af:0e:fe:
70:f9:61:3d:ea:8b:1f:ab:a2:8f:3f:99:4d:76:bd:
26:dc:69:ef:44:cb:07:d9:ed:6f:b1:e2:b0:83:de:
f6:e3:8e:1e:ef:77:1f:95:5e:25:18:30:2f:c0:8e:
5f:99:80:ff:2e:73:e4:c9:4b:61:46:12:22:bc:c9:
34:30:ee:00:c5:51:e6:af:6a:13:d5:65:bc:a4:0f:
6e:f9:0b:66:04:9f:55:e2:79:32:68:75:97:7f:8f:
2d:e0:4c:93:81:15:15:73:5c:b7:be:66:a4:a6:c9:
3d:6a:a9:81:2b:b5:dd:21:bd:cd:27:ca:f7:97:ae:
26:e7:06:46:17:9f:9c:ff:94:2f:75:84:e1:38:a6:
53:8c:ab:89:5e:c3:fd:9d:15:ac:01:dd:f4:d9:8d:
2c:a9:56:06:fb:dd:1c:3c:7f:b3:b0:ef:8d:dc:9f:
1e:dd:79:01:13:3a:47:d9:3b:91:0a:bd:eb:37:df:
42:d9:02:99:1e:b5:6f:44:64:2e:f8:30:13:c8:55:
d6:bd:40:c7:36:33:56:de:8e:cb:79:7f:34:dd:55:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BE:2F:E9:56:2B:C9:77:8A:F2:4B:8A:5C:06:E0:95:14:8D:BD:8F
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/0861EEFA881A11EFA769B787C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.255.74.0/24
Signature Algorithm: sha256WithRSAEncryption
23:dc:26:7a:11:1f:61:d8:68:ef:b1:bb:09:f2:10:39:eb:13:
97:45:1a:2b:7e:98:08:78:de:7c:14:6c:ad:e4:4b:1c:26:a4:
f9:e5:e7:c9:f8:d3:6d:93:ad:e8:15:cc:bc:b4:5a:eb:63:c8:
ea:25:0a:8e:5b:eb:20:c6:73:35:41:be:db:15:6a:f2:1c:e2:
26:30:bb:12:d9:c4:ac:a4:5d:57:50:0e:9c:6e:b6:14:1a:00:
b3:5f:4f:22:6b:fc:e1:cb:39:c0:0b:e0:6c:f1:27:30:f2:4d:
11:94:f6:65:9a:94:11:87:91:ba:b1:6b:b6:16:ca:d0:17:66:
dd:e4:d0:0d:50:cf:0d:55:32:f1:d9:41:d9:71:82:23:26:a7:
1a:b2:fe:db:b3:dd:0d:52:1e:64:f3:63:89:da:c6:7c:15:33:
ca:be:e7:ca:28:91:b5:ed:5e:bd:c9:be:37:6c:94:f6:f7:52:
a0:17:65:d0:5c:02:41:df:f4:cb:22:21:74:87:db:0b:1b:69:
44:cb:77:da:90:8d:25:69:3f:67:83:44:5c:07:5b:e0:63:17:
d6:85:30:a0:ef:67:b0:f1:40:44:00:b4:12:4f:f7:8c:31:05:
40:c4:81:d0:6d:d7:28:9a:68:9d:3f:0c:1e:6f:ed:94:7f:c6:
c7:19:1c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:43 2026 by rpki-client