
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/F0237E941B1911EE9DFF2942C4F9AE02.roa
File: F0237E941B1911EE9DFF2942C4F9AE02.roa (raw, json)
Hash identifier: qzHIk1toZb4KKScZkuD/1Cu6hTkWnTtVmDyS3VXcG9c=
Subject key identifier: BA:17:BD:0E:51:22:01:E6:AE:4F:6F:4C:72:05:6A:9E:DA:C0:83:32
Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F
Certificate serial: 01FD
Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/F0237E941B1911EE9DFF2942C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:17:09 +0000
ROA not before: Tue 25 Mar 2025 03:39:39 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 133891
IP address blocks: 163.47.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl
rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F
Validity
Not Before: Mar 25 03:39:39 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3f605-5497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:1f:73:e1:1b:a3:7a:d0:b4:32:cc:a2:b6:
15:e6:1c:ca:31:54:4a:a9:b0:b6:06:3a:eb:fd:5c:
76:cf:26:7f:91:3c:42:5d:9c:1f:93:9a:28:72:b1:
5e:29:cf:8a:3b:e3:9a:2c:9f:86:e4:e3:e7:e4:1c:
26:fd:1d:6e:ae:99:f0:c5:cd:6d:0c:6c:c8:2d:0e:
40:54:57:e5:5c:93:16:84:93:51:95:6d:4d:34:27:
92:48:b0:55:c9:29:99:b4:83:b1:cd:8a:3e:61:db:
d1:be:d7:3a:78:51:84:c1:14:5a:60:61:f5:97:a9:
e0:e0:2f:8b:1d:0d:ba:5a:f5:1f:dc:68:37:a1:e5:
9c:3a:3d:0a:4f:fc:8b:2a:8b:d9:45:cb:63:fa:5c:
94:fa:6f:0c:d5:94:0e:47:c0:aa:18:86:b9:68:ae:
b6:9c:99:38:66:11:da:86:ee:52:aa:61:7a:9a:61:
ab:75:39:18:cb:6b:2f:da:81:8f:dc:85:2f:c2:ea:
1f:60:c9:37:02:1a:15:2b:81:0f:07:90:98:58:3e:
2b:a1:a3:8f:b1:d6:af:61:92:a9:50:be:cb:55:83:
fb:42:31:d2:d5:da:4d:29:af:fb:71:d3:f3:14:24:
3b:84:8f:85:29:5e:65:64:da:e2:ba:10:b5:3e:d6:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:17:BD:0E:51:22:01:E6:AE:4F:6F:4C:72:05:6A:9E:DA:C0:83:32
X509v3 Authority Key Identifier:
keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/F0237E941B1911EE9DFF2942C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.47.44.0/23
Signature Algorithm: sha256WithRSAEncryption
65:22:7b:22:b6:38:63:93:f5:c7:6f:a1:b1:d6:16:58:ab:76:
29:3b:57:58:e4:2b:01:e8:23:04:b3:3f:61:aa:5c:e6:7b:99:
88:66:c6:04:3a:c4:ff:7b:2d:32:cb:2b:9c:8b:41:71:09:c0:
cc:3e:eb:40:4f:f6:e4:a8:06:ff:da:a2:f4:05:d6:d4:70:44:
bd:62:18:81:63:d7:0e:e3:da:37:bc:d0:73:f5:a6:b5:fb:6c:
fe:83:03:a7:cf:26:12:60:5f:52:80:c8:67:e0:fc:62:b3:41:
5d:4f:62:b5:f1:4f:e4:09:8a:02:a7:07:9d:0c:84:b9:e5:24:
bc:4b:a7:f6:74:7e:48:3e:14:52:a4:d9:8a:21:2c:17:46:2a:
03:b4:37:7b:15:e3:a0:4a:2e:5d:a6:37:3a:50:a3:cc:3a:57:
05:d3:c0:bf:cf:7e:b2:2e:ff:31:8d:1b:21:e9:44:2c:de:35:
f7:56:d7:56:9f:9b:3a:6a:18:84:a4:5a:24:16:86:bd:76:f7:
8d:e1:f8:ce:5b:8a:52:36:be:42:b8:01:bb:fa:0e:68:4e:90:
70:e2:c6:69:90:3b:88:4c:01:a1:47:38:21:96:3a:1e:39:5a:
4a:22:4d:c1:8d:cd:ac:d0:e2:a9:59:4d:84:6e:96:90:a8:e9:
9d:32:7c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:07 2026 by rpki-client