
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/AD46933EB65011F0B751DB86C4F9AE02.roa
File: AD46933EB65011F0B751DB86C4F9AE02.roa (raw, json)
Hash identifier: 4nT2yihpsRgIGDl3UtBaxjdfAfsQlqp6s85lRI5En8w=
Subject key identifier: EC:53:4F:9F:4B:12:2B:3C:41:AA:77:46:0B:B4:40:4D:00:37:EF:AC
Certificate issuer: /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21
Certificate serial: 2B
Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/AD46933EB65011F0B751DB86C4F9AE02.roa
Signing time: Fri 31 Oct 2025 11:56:47 +0000
ROA not before: Fri 31 Oct 2025 11:56:47 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 150775
IP address blocks: 165.99.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl
rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21
Validity
Not Before: Oct 31 11:56:47 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6904a3ff-1459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:74:77:15:96:94:8c:0d:f3:a1:55:0f:0f:02:
c6:31:8c:25:76:c9:e1:82:5c:62:57:25:22:c4:b7:
57:86:94:bb:16:fd:7c:09:f3:eb:e5:ea:90:b7:ab:
9b:60:ec:d9:54:3d:a9:c9:3f:42:cd:73:75:89:85:
1e:ab:c1:68:fa:89:cc:17:a8:9f:8b:21:d8:49:52:
a6:7c:fc:f8:65:4e:69:07:66:d7:4d:e6:ac:bc:8d:
1b:dc:9c:b4:d4:0d:ee:3d:1e:08:04:93:86:cc:40:
12:8a:ea:55:34:dc:3f:09:5c:1e:40:b2:f8:02:95:
bc:cc:c1:48:4e:1d:ae:14:d0:db:30:37:67:b3:d2:
fa:e5:0a:58:fa:98:53:9e:45:98:d5:84:4f:96:82:
70:c4:e5:94:75:a4:ad:93:ab:a1:2c:b0:ab:e5:67:
c1:33:b6:56:57:0f:9c:ab:78:66:1a:9c:ea:bd:53:
d6:58:94:06:22:1a:75:61:31:e9:2a:6c:7e:85:89:
bc:44:37:59:64:57:6b:c5:27:f2:30:6f:e1:8f:a7:
45:db:9a:11:a8:2a:26:08:ce:f9:06:00:fe:22:61:
e9:41:c6:68:2b:f4:ff:46:97:d1:79:1b:c1:75:47:
01:91:2e:fc:6f:7a:f3:23:05:ed:12:95:3a:09:90:
44:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:53:4F:9F:4B:12:2B:3C:41:AA:77:46:0B:B4:40:4D:00:37:EF:AC
X509v3 Authority Key Identifier:
keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/AD46933EB65011F0B751DB86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:99:e6:ad:22:3e:8e:1c:13:a6:01:0e:da:7d:4e:85:e8:e0:
48:2a:d2:b5:d6:7a:e4:f5:66:9f:3b:c5:9b:84:7e:5f:d4:cd:
71:12:ee:b8:d8:e8:6a:43:b7:7c:ae:80:e7:34:65:5e:48:77:
8d:11:79:55:63:b2:ea:be:87:e3:e9:9f:0e:c8:8a:9b:db:83:
99:0e:8f:eb:a6:22:2d:5f:0e:42:db:e9:82:a5:df:27:9a:0b:
6b:ea:57:7e:43:f3:45:0c:17:5d:fe:81:61:ff:4c:7b:4f:4b:
ea:1d:9b:60:ec:77:a5:5c:57:06:c9:45:28:b3:3e:ea:37:07:
63:fd:d2:71:2e:e7:40:d9:89:33:7c:12:f3:02:52:7f:1a:35:
43:53:7a:ba:e7:d7:db:97:3b:7d:93:e2:45:5c:a2:7a:2b:2b:
47:0b:ec:d9:68:4c:62:ac:8b:3d:a0:56:4b:e0:64:32:c1:7a:
5f:cf:ac:f1:7c:90:fb:0e:52:4b:0d:43:09:a4:fe:56:cc:fb:
a8:8c:c1:17:ec:a1:39:cc:56:7e:0e:c9:a8:78:33:dc:ea:68:
43:6a:4f:11:dc:9d:4f:ae:fa:b3:86:ce:dd:8f:e6:62:a1:f8:
fe:b2:4d:be:2e:70:4a:aa:13:b9:50:40:cf:fb:7a:65:ae:10:
2e:01:d3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:14:42 2025 by rpki-client