
$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D96D4614B0F811E595E0F761C4F9AE02.roa
File: D96D4614B0F811E595E0F761C4F9AE02.roa (raw, json)
Hash identifier: pziarfpXcmZshK5aRJXPQK28eVft/dtml9oMxHa7rpY=
Subject key identifier: 48:83:76:7F:43:46:7B:09:BD:3C:54:F7:87:70:6B:52:32:E6:6A:A3
Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial: 35AA
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D96D4614B0F811E595E0F761C4F9AE02.roa
Signing time: Sat 04 Apr 2026 15:10:13 +0000
ROA not before: Sat 04 Apr 2026 15:10:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38478
IP address blocks: 27.50.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13738 (0x35aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Validity
Not Before: Apr 4 15:10:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d129d5-91b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:5e:62:17:5f:c8:a9:7b:b8:19:92:e0:e1:
13:3b:2e:75:b8:6b:26:08:af:fe:d5:4e:56:98:83:
5a:38:21:cb:4a:e2:ea:3d:af:51:6f:ee:41:a6:00:
69:95:18:74:47:e1:02:f6:53:41:59:48:e3:cc:91:
fd:24:09:40:fd:49:8b:69:fe:03:f3:e5:53:5b:b1:
70:15:86:dd:eb:d5:96:17:94:7a:28:12:91:80:11:
7b:aa:46:6c:da:c0:6e:61:fe:46:78:96:ac:aa:38:
f4:0b:f2:b1:73:5a:16:19:ac:5e:61:87:51:90:ae:
be:8b:2f:5c:08:49:93:7c:8c:5e:5e:ca:94:65:a1:
26:64:22:64:8d:9d:61:dc:d6:e6:58:43:34:4b:72:
8b:4a:17:d0:f7:aa:b2:3c:7a:c8:e3:70:18:63:ca:
5a:ed:e9:e6:b5:89:03:e0:f7:55:bd:d6:33:b1:1f:
60:99:68:2d:bf:fc:1c:f0:49:99:85:dc:09:24:ad:
3e:77:05:56:1f:2b:26:7f:b3:d3:3b:e1:20:d1:78:
ac:fd:58:ea:32:b8:44:e7:91:66:cb:d2:11:7e:44:
10:3c:f4:73:a9:c1:8d:f6:c8:14:fe:91:6e:69:90:
bc:0e:8b:87:26:b3:ff:8d:49:44:88:de:32:ea:93:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:83:76:7F:43:46:7B:09:BD:3C:54:F7:87:70:6B:52:32:E6:6A:A3
X509v3 Authority Key Identifier:
keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/D96D4614B0F811E595E0F761C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.50.34.0/24
Signature Algorithm: sha256WithRSAEncryption
15:1f:34:4d:f5:78:b2:81:84:43:ca:b5:3c:8a:1a:17:0c:f9:
49:b2:b2:81:a4:16:4a:a8:01:32:4f:2b:eb:1f:e7:cf:e3:ff:
ad:97:92:8f:48:61:f4:f7:33:da:ff:e5:b0:32:cc:cb:84:90:
45:ba:fd:b2:17:4b:c6:af:ea:9c:6f:b5:db:c4:da:94:dc:ec:
15:0e:67:35:19:5c:57:77:9a:59:f2:ff:19:e5:a0:fb:00:fd:
09:b0:6c:6b:16:61:db:b7:b9:dd:ea:a3:cd:29:96:3a:dd:3c:
88:35:4a:4f:2e:3d:4b:da:3b:04:80:ee:04:1a:6f:fc:86:53:
d6:a3:51:f4:1d:78:a1:4e:63:0f:c3:7d:5b:40:42:26:6e:d1:
6c:d2:d7:d0:16:c1:7d:b2:40:26:cf:ed:6a:10:6a:58:bf:d3:
66:3e:50:19:45:da:85:cf:19:c3:01:37:23:22:c9:66:3e:da:
fb:71:2b:fc:ac:b0:25:11:cf:bd:d7:c8:b6:64:2e:7c:2f:97:
50:94:69:8f:84:da:bc:fd:2b:b1:2e:c3:9b:39:5d:30:d6:aa:
23:b5:72:1a:5c:fe:73:db:3d:9b:1d:0d:55:e1:9d:8b:6f:42:
e7:e9:1c:e4:d7:bc:2f:5a:0a:81:01:23:b1:13:07:3a:bc:90:
d8:f5:09:82
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1
NjM1REE4RjIwHhcNMjYwNDA0MTUxMDEzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQxMjlkNS05MWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2u9eYhdfyKl7uBmS4OETOy51uGsmCK/+1U5WmINaOCHLSuLqPa9Rb+5BpgBp
lRh0R+EC9lNBWUjjzJH9JAlA/UmLaf4D8+VTW7FwFYbd69WWF5R6KBKRgBF7qkZs
2sBuYf5GeJasqjj0C/Kxc1oWGaxeYYdRkK6+iy9cCEmTfIxeXsqUZaEmZCJkjZ1h
3NbmWEM0S3KLShfQ96qyPHrI43AYY8pa7enmtYkD4PdVvdYzsR9gmWgtv/wc8EmZ
hdwJJK0+dwVWHysmf7PTO+Eg0Xis/VjqMrhE55Fmy9IRfkQQPPRzqcGN9sgU/pFu
aZC8DouHJrP/jUlEiN4y6pNMcwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEiDdn9D
RnsJvTxU94dwa1Iy5mqjMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE
NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc0QzMvNkY4QjUyQTAxRDcwMTFFMkJDMTFEQUI0MDhCMDJDRDIvRDk2RDQ2MTRC
MEY4MTFFNTk1RTBGNzYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAGzIiMA0GCSqGSIb3DQEBCwUAA4IBAQAVHzRN9XiygYRDyrU8ihoX
DPlJsrKBpBZKqAEyTyvrH+fP4/+tl5KPSGH09zPa/+WwMszLhJBFuv2yF0vGr+qc
b7XbxNqU3OwVDmc1GVxXd5pZ8v8Z5aD7AP0JsGxrFmHbt7nd6qPNKZY63TyINUpP
Lj1L2jsEgO4EGm/8hlPWo1H0HXihTmMPw31bQEImbtFs0tfQFsF9skAmz+1qEGpY
v9NmPlAZRdqFzxnDATcjIslmPtr7cSv8rLAlEc+918i2ZC58L5dQlGmPhNq8/Sux
LsObOV0w1qojtXIaXP5z2z2bHQ1V4Z2Lb0Ln6Rzk17wvWgqBASOxEwc6vJDY9QmC
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:05 2026 by rpki-client