
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/05163DEADD8711EC9BF56E5BC4F9AE02.roa
File: 05163DEADD8711EC9BF56E5BC4F9AE02.roa (raw, json)
Hash identifier: 63cio2MUFm7vWLjvaTxI8FgoeyjASbbb5Aorm9U3n2I=
Subject key identifier: 98:39:BD:90:F9:B5:BF:D8:C0:FB:78:29:6E:46:3B:9E:F3:72:58:6B
Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial: 0520
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/05163DEADD8711EC9BF56E5BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:46:58 +0000
ROA not before: Wed 27 Aug 2025 01:05:27 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 142299
IP address blocks: 147.50.229.0/24 maxlen: 24
147.50.233.0/24 maxlen: 24
147.50.235.0/24 maxlen: 24
147.50.238.0/24 maxlen: 24
147.50.240.0/24 maxlen: 24
147.50.242.0/24 maxlen: 24
147.50.243.0/24 maxlen: 24
147.50.244.0/24 maxlen: 24
147.50.252.0/23 maxlen: 23
147.50.252.0/24 maxlen: 24
147.50.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1312 (0x520)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Validity
Not Before: Aug 27 01:05:27 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a586c2-d258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:94:ba:e9:03:be:f6:db:0b:57:d9:51:cd:
1c:76:66:2f:74:0b:e8:35:f1:5e:35:7f:da:db:74:
e0:35:eb:ec:46:80:78:b0:3a:ad:87:47:11:6e:49:
88:24:1c:de:ab:e2:5e:91:24:d7:ac:a7:60:92:40:
bd:b1:b2:11:ab:7f:0c:11:96:05:1d:09:a1:92:29:
47:5d:c0:09:51:a8:ee:f5:9f:b7:69:4f:18:c7:db:
29:5d:0e:46:2f:f4:de:f7:5e:b0:9e:33:0b:c0:cc:
e3:5c:8c:49:5f:e7:57:22:30:c4:6c:0e:da:94:3c:
7a:74:da:72:b8:bb:a3:4e:32:fe:08:2b:06:bf:9a:
a0:2e:82:4d:36:cf:de:43:f3:81:9f:cd:6e:3a:aa:
7a:02:0e:c9:cd:e8:ea:98:70:02:0d:ac:ba:66:52:
f3:b8:6c:5a:82:f4:67:d5:61:d6:22:ce:ae:16:c2:
72:61:40:9b:fa:9f:fa:7e:31:6e:0a:f4:dd:16:24:
aa:40:89:79:ed:67:52:b7:ea:6d:b9:8a:16:41:59:
e7:85:8a:9a:6f:ac:7f:af:9e:99:c3:e6:6f:44:08:
5e:d7:41:5c:5b:78:c2:96:0a:23:35:0d:48:36:d6:
a1:de:98:97:d6:70:2a:4a:d3:aa:fd:1d:48:f1:f3:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:39:BD:90:F9:B5:BF:D8:C0:FB:78:29:6E:46:3B:9E:F3:72:58:6B
X509v3 Authority Key Identifier:
keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/05163DEADD8711EC9BF56E5BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
147.50.229.0/24
147.50.233.0/24
147.50.235.0/24
147.50.238.0/24
147.50.240.0/24
147.50.242.0-147.50.244.255
147.50.252.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:e6:10:2d:c0:59:58:bc:94:bb:96:9f:11:7e:cd:42:46:49:
b7:20:52:4b:ab:c5:92:1c:43:32:f6:bb:7d:28:07:cf:7a:27:
04:e8:8d:ac:d8:94:69:11:27:69:3c:4c:45:99:f6:f4:c6:ee:
93:fe:36:3b:16:bf:f5:92:b4:86:8f:95:17:f4:6d:58:71:19:
78:96:7d:72:79:69:09:09:aa:3f:42:e6:9f:b8:f2:a6:e9:47:
d1:5c:d0:68:60:27:58:e8:08:6d:b2:a6:d6:d9:a4:41:e6:dc:
a6:99:91:88:3d:65:db:f7:f8:7e:73:c8:48:c5:38:bd:1c:9d:
b5:95:0b:53:b0:15:93:58:c1:a7:85:20:f5:7d:85:65:09:bd:
aa:b8:eb:4a:44:d5:74:ed:7c:43:7a:12:92:dc:38:7c:8a:dc:
a0:1d:00:42:66:7b:cd:6c:fa:73:48:22:9f:6a:f3:ed:90:57:
db:c9:7c:42:36:5e:50:2f:88:c3:ab:b0:25:17:36:da:be:b6:
5e:b7:f0:f4:77:e5:c0:67:85:07:10:62:ab:80:fd:9e:83:68:
79:10:ba:b4:b4:52:07:cc:dc:86:d7:3f:6c:e6:40:cc:ef:5a:
f2:88:12:90:48:c1:dd:4e:db:3e:2f:da:51:1e:bb:15:98:91:
e3:95:77:f3
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF
NjdCQTRCQTYwHhcNMjUwODI3MDEwNTI3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODZjMi1kMjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuqyUuukDvvbbC1fZUc0cdmYvdAvoNfFeNX/a23TgNevsRoB4sDqth0cRbkmI
JBzeq+JekSTXrKdgkkC9sbIRq38MEZYFHQmhkilHXcAJUaju9Z+3aU8Yx9spXQ5G
L/Te916wnjMLwMzjXIxJX+dXIjDEbA7alDx6dNpyuLujTjL+CCsGv5qgLoJNNs/e
Q/OBn81uOqp6Ag7JzejqmHACDay6ZlLzuGxagvRn1WHWIs6uFsJyYUCb+p/6fjFu
CvTdFiSqQIl57WdSt+ptuYoWQVnnhYqab6x/r56Zw+ZvRAhe10FcW3jClgojNQ1I
Ntah3piX1nAqStOq/R1I8fN92QIDAQABo4ICjDCCAogwHQYDVR0OBBYEFJg5vZD5
tb/YwPt4KW5GO57zclhrMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyQ0EvRUMxRUU2NTI4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvMDUxNjNERUFE
RDg3MTFFQzlCRjU2RTVCQzRGOUFFMDIucm9hMEsGCCsGAQUFBwEHAQH/BDwwOjA4
BAIAATAyAwQAkzLlAwQAkzLpAwQAkzLrAwQAkzLuAwQAkzLwMAwDBAGTMvIDBACT
MvQDBAGTMvwwDQYJKoZIhvcNAQELBQADggEBAA/mEC3AWVi8lLuWnxF+zUJGSbcg
UkurxZIcQzL2u30oB896JwTojazYlGkRJ2k8TEWZ9vTG7pP+NjsWv/WStIaPlRf0
bVhxGXiWfXJ5aQkJqj9C5p+48qbpR9Fc0GhgJ1joCG2yptbZpEHm3KaZkYg9Zdv3
+H5zyEjFOL0cnbWVC1OwFZNYwaeFIPV9hWUJvaq460pE1XTtfEN6EpLcOHyK3KAd
AEJme81s+nNIIp9q8+2QV9vJfEI2XlAviMOrsCUXNtq+tl638PR35cBnhQcQYquA
/Z6DaHkQurS0UgfM3IbXP2zmQMzvWvKIEpBIwd1O2z4v2lEeuxWYkeOVd/M=
-----END CERTIFICATE-----
Generated at Sun Mar 15 01:47:49 2026 by rpki-client