
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/E9198B6E91E711F1BB1861D25611F970.roa
File: E9198B6E91E711F1BB1861D25611F970.roa (raw, json)
Hash identifier: xIMbuSgztSC9t/r1Ai4qyUdk1VhLozu7o1gIAnwugtA=
Subject key identifier: 5C:50:7B:29:EE:3D:41:FD:5D:4A:4E:F0:1A:17:B8:7C:67:90:69:3B
Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Certificate serial: 02AB
Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/E9198B6E91E711F1BB1861D25611F970.roa
Signing time: Thu 03 Sep 2026 02:51:23 +0000
ROA not before: Thu 03 Sep 2026 02:51:23 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 55853
IP address blocks: 49.50.192.0/21 maxlen: 21
49.50.192.0/23 maxlen: 23
49.50.194.0/23 maxlen: 23
49.50.196.0/23 maxlen: 23
49.50.198.0/23 maxlen: 23
49.50.200.0/21 maxlen: 21
49.50.200.0/23 maxlen: 23
49.50.202.0/23 maxlen: 23
49.50.204.0/23 maxlen: 23
49.50.206.0/23 maxlen: 23
49.50.208.0/21 maxlen: 21
49.50.208.0/23 maxlen: 23
49.50.210.0/23 maxlen: 23
49.50.212.0/23 maxlen: 23
49.50.214.0/23 maxlen: 23
49.50.216.0/22 maxlen: 23
49.50.220.0/22 maxlen: 23
49.50.224.0/21 maxlen: 21
103.241.36.0/24 maxlen: 24
103.241.37.0/24 maxlen: 24
103.241.38.0/24 maxlen: 24
103.241.39.0/24 maxlen: 24
2405:2200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683 (0x2ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Validity
Not Before: Sep 3 02:51:23 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98e0ab-c46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:96:55:f6:e2:10:67:61:92:64:55:e3:a8:
ee:e0:0e:d5:08:81:19:31:a1:50:45:05:a9:f2:b8:
5c:00:ba:08:58:6d:ff:3d:69:97:2c:19:9c:72:89:
68:3c:c1:24:91:b6:e8:44:47:78:f1:54:c1:05:bc:
cf:dc:c8:d0:73:04:ad:fb:72:46:ce:fc:8f:a9:1d:
91:3b:14:3d:72:b9:4f:9f:7d:9f:9d:1e:2e:87:3a:
f6:9b:d7:c0:82:f6:0e:e2:87:34:e9:94:d4:0e:0a:
d6:82:c6:80:9b:2c:c9:f4:f2:56:06:92:3e:d5:e7:
54:92:32:2d:a9:02:76:ec:19:56:57:43:52:e6:32:
c1:a3:c5:6f:67:76:41:bf:be:3e:c8:ba:98:c6:1d:
e3:aa:e1:32:17:58:85:e7:50:1a:9e:d1:b3:04:9e:
f5:31:b7:0c:cf:e6:69:d7:9e:13:f3:92:bc:c8:c6:
c9:0f:cc:99:d6:e8:bc:9f:15:ab:67:8d:64:6d:f9:
77:d2:fe:6b:92:40:f8:9b:42:8a:ca:34:83:49:31:
2b:c8:8f:4a:c0:de:c5:ab:aa:b8:71:20:e3:4c:37:
fd:f0:e3:be:e3:f3:64:45:69:55:a0:d4:8a:54:dd:
71:59:6c:ff:4f:19:2e:65:b1:dd:98:e5:d4:8d:ea:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:50:7B:29:EE:3D:41:FD:5D:4A:4E:F0:1A:17:B8:7C:67:90:69:3B
X509v3 Authority Key Identifier:
keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/E9198B6E91E711F1BB1861D25611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
49.50.192.0-49.50.231.255
103.241.36.0/22
IPv6:
2405:2200::/32
Signature Algorithm: sha256WithRSAEncryption
43:eb:68:c7:8d:d7:ff:1c:8e:31:c9:6b:71:b9:ab:bb:80:3a:
da:92:7c:70:86:ae:91:51:82:13:8b:91:ef:ae:14:59:0b:43:
db:35:ef:ca:20:1f:aa:91:95:72:be:04:52:13:10:a2:de:ff:
a1:08:9a:5a:6e:e6:38:08:7e:24:f0:2e:63:a1:d7:a8:91:38:
25:2b:ba:b7:50:dd:45:55:86:55:a0:69:0f:0d:bf:52:0a:69:
eb:b4:2b:58:17:32:17:f4:26:03:7e:ee:0c:6f:c6:ef:71:bc:
3c:61:1f:f4:35:6b:a8:ef:34:40:b7:0d:ab:57:52:b7:29:5e:
21:c9:0a:08:ff:94:ee:10:c0:ce:19:61:84:07:bd:74:ed:a8:
15:77:29:04:82:92:c4:91:45:e4:8c:8d:e0:10:d0:85:11:99:
40:ec:2c:4d:fb:b5:75:cb:0d:c3:c9:91:9e:1f:d9:ac:38:3e:
b0:e0:76:ba:b3:9f:59:2e:5a:7b:50:43:03:2d:ad:f8:0c:a6:
08:30:72:b5:cb:21:cb:df:9b:09:41:1c:bb:34:c8:82:18:8c:
b3:e6:7a:96:c0:3b:44:b2:b6:68:25:29:00:8c:7d:27:7e:e9:
cc:a9:df:26:d1:33:d6:17:34:93:f7:5e:39:9b:2b:52:f5:81:
b8:d1:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 18:14:22 2026 by rpki-client