
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4EE2265C1FBE11EF97E7974FC4F9AE02.roa
File: 4EE2265C1FBE11EF97E7974FC4F9AE02.roa (raw, json)
Hash identifier: uCPMLS/ct630qYfyRJMXFxbkx14NwxKjUh6mBdLZak4=
Subject key identifier: 58:11:18:26:0D:5C:C9:CF:F9:9C:4B:A6:95:21:86:F7:7D:B9:00:35
Certificate issuer: /CN=A9148D01/serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Certificate serial: 0796
Authority key identifier: 7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4EE2265C1FBE11EF97E7974FC4F9AE02.roa
Signing time: Sun 31 May 2026 23:27:33 +0000
ROA not before: Sun 31 May 2026 23:27:33 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 58608
IP address blocks: 49.248.70.0/24 maxlen: 24
49.248.71.0/24 maxlen: 24
49.248.125.0/24 maxlen: 24
49.248.217.0/24 maxlen: 24
49.248.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 23:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1942 (0x796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D01, serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Validity
Not Before: May 31 23:27:33 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1cc3e5-6486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:cc:34:8a:10:60:a8:bc:f2:2a:30:c0:1a:
c3:c2:3c:df:ce:36:ff:c8:b1:87:cf:a8:82:d1:59:
cd:1a:1d:64:fb:a7:63:d5:a3:70:b9:75:b0:ec:f8:
47:3f:05:3b:45:c3:66:58:3d:f5:33:33:05:5a:e3:
d9:4d:62:8b:75:25:f1:65:61:24:b4:fe:69:70:df:
98:fb:61:26:4f:94:05:fa:fb:59:dc:a4:63:86:71:
4a:2a:1a:a5:a0:d2:d4:40:ed:35:64:00:67:83:dc:
6b:92:62:cb:f1:db:66:e3:c3:8e:b1:74:a3:c5:5d:
ae:23:a5:15:a5:b3:ce:12:11:b6:a9:6e:60:7a:88:
9c:22:f8:61:51:65:9c:ec:ea:39:f6:fe:ec:bd:71:
05:ed:37:da:3d:9f:f4:59:ab:19:84:2a:47:7f:13:
96:91:cf:64:b9:8a:ae:46:95:fb:2f:46:e3:eb:99:
a2:6f:d4:24:13:0c:3c:41:47:55:f1:24:a5:f5:6c:
a5:19:33:10:3e:e3:40:6f:9f:41:db:c3:92:b4:b7:
86:25:d6:49:f2:13:02:3a:b6:cd:dc:c7:bf:2f:a5:
e7:37:73:22:98:de:20:3a:b0:7f:35:8c:5b:9a:1f:
ff:61:10:f1:50:c8:88:d8:17:bf:06:85:f4:c2:c8:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:11:18:26:0D:5C:C9:CF:F9:9C:4B:A6:95:21:86:F7:7D:B9:00:35
X509v3 Authority Key Identifier:
keyid:7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4EE2265C1FBE11EF97E7974FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.248.70.0/23
49.248.125.0/24
49.248.217.0/24
49.248.220.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2f:bd:de:b2:26:9d:66:78:a5:f8:10:fe:a0:46:5a:71:0b:
d0:da:9d:05:f5:e5:d4:41:47:b5:92:e7:a7:8c:cc:73:5e:38:
d0:43:d3:1a:8f:23:d9:10:78:d1:a2:17:2d:07:1e:f6:f6:cb:
33:69:2a:76:35:d6:34:67:b7:ff:7f:b8:9d:0c:8c:de:af:2a:
97:5e:c2:95:98:ec:3f:bd:47:97:05:e3:1b:8a:60:33:c1:cd:
f5:e2:3c:a6:8e:5e:be:f5:d6:b3:42:39:04:b1:00:f2:20:6d:
b8:39:83:5b:97:de:a1:69:5f:72:38:b4:71:7a:0d:60:55:c2:
ef:45:9f:6e:be:b5:09:4a:fd:2c:af:61:f9:a2:4b:48:f7:2d:
36:91:c4:e5:82:dd:60:f9:1d:b7:21:92:73:95:4d:aa:59:09:
71:10:c0:27:9b:3c:47:32:18:1b:82:01:9b:16:33:1c:c3:44:
7e:6e:e5:f3:81:e8:11:4b:f0:08:98:9c:d1:60:a8:a3:a6:68:
33:99:83:f1:e0:d8:9e:48:08:cb:41:35:91:34:dc:32:a8:a1:
f5:c8:56:57:2c:7e:5f:ee:6d:28:ec:93:ab:ac:ef:17:83:34:
4f:56:3b:7e:8d:44:9a:d6:71:35:d8:73:d9:78:14:ca:9e:9b:
ef:dd:06:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:41:03 2026 by rpki-client