
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4EE2265C1FBE11EF97E7974FC4F9AE02.roa
File: 4EE2265C1FBE11EF97E7974FC4F9AE02.roa (raw, json)
Hash identifier: 6h81rDDDYRNAtHPT45Wj+/AAi4xUiQm8u1XpAPh4F/I=
Subject key identifier: 9E:3A:B1:BB:03:05:CD:4D:54:98:F1:5F:BD:54:C4:C4:F1:AF:4E:F7
Certificate issuer: /CN=A9148D01/serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Certificate serial: 07AF
Authority key identifier: 7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4EE2265C1FBE11EF97E7974FC4F9AE02.roa
Signing time: Wed 08 Jul 2026 23:24:58 +0000
ROA not before: Wed 08 Jul 2026 23:24:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58608
IP address blocks: 49.248.70.0/24 maxlen: 24
49.248.71.0/24 maxlen: 24
49.248.125.0/24 maxlen: 24
49.248.217.0/24 maxlen: 24
49.248.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 22:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1967 (0x7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D01, serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Validity
Not Before: Jul 8 23:24:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4edc4a-553c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:56:4e:f3:52:81:34:17:ec:87:33:cb:a4:0e:
ef:6a:03:ce:ff:ff:6c:95:d0:4c:25:05:01:3c:b4:
32:19:0e:80:24:3b:67:85:8a:bf:0e:d5:24:7a:7d:
c4:d9:6e:a1:fe:1f:8d:08:58:1c:ff:28:93:88:de:
be:b6:14:fd:1f:61:ec:aa:fe:c8:6f:a4:99:13:b1:
99:71:7a:ea:aa:a9:d0:62:79:19:4a:2a:26:5f:7d:
40:25:a0:1c:08:43:9c:5a:fb:0a:93:65:e9:c7:e8:
60:71:75:a2:ac:64:d2:e1:a3:6f:6e:ea:07:3b:81:
53:b0:07:84:97:7a:bd:02:c5:6b:1f:87:d8:28:92:
71:0f:bf:0d:ac:7d:a8:b0:80:30:ff:61:66:a7:c9:
f6:8d:5e:89:b6:fd:f5:d7:d9:55:af:72:37:6b:54:
8c:a0:df:00:f7:83:30:70:3c:0f:f9:8c:a8:7c:e6:
ce:8f:5e:50:50:0f:9b:c8:76:50:34:41:58:2a:81:
8f:91:a2:82:56:5f:55:04:7e:d5:9b:57:7f:d6:36:
3d:8e:cb:75:8e:1a:0d:71:54:af:4f:07:10:54:a7:
4b:50:ee:54:9d:70:d5:1e:e4:13:bf:75:aa:61:a4:
a3:c7:e9:07:a0:0a:9d:2a:f8:ba:4d:58:84:92:fa:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:B1:BB:03:05:CD:4D:54:98:F1:5F:BD:54:C4:C4:F1:AF:4E:F7
X509v3 Authority Key Identifier:
keyid:7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4EE2265C1FBE11EF97E7974FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.248.70.0/23
49.248.125.0/24
49.248.217.0/24
49.248.220.0/24
Signature Algorithm: sha256WithRSAEncryption
db:ae:f1:ba:c5:de:78:79:91:40:15:c9:af:79:02:1a:df:7c:
ea:b8:9c:24:dd:54:78:26:a8:ce:3e:2a:21:6d:e7:e1:e5:6c:
1b:a7:f7:09:a2:08:33:6d:28:ce:86:02:5c:b9:69:c3:ea:d8:
47:ba:b9:1c:b9:8b:a5:58:c9:9f:5d:9b:d1:2b:48:b0:bd:67:
71:36:5c:54:e5:f7:44:e0:ac:a0:00:7e:d6:ab:31:aa:ff:a7:
9a:26:54:28:38:8f:e5:8e:bd:d3:88:1d:83:34:69:69:69:39:
6e:2b:d9:e5:8e:58:61:6d:6d:09:46:f8:f5:82:b4:71:8c:4a:
de:73:16:23:0a:10:cc:a6:b3:8c:9c:eb:70:25:64:d5:d2:8f:
be:b4:0e:50:fa:34:c0:ed:79:d8:bc:8e:92:e8:49:10:34:e3:
5d:86:70:2f:fa:a8:00:b8:10:5d:8d:6b:e2:03:c8:0f:09:ed:
51:41:2a:8a:a3:ae:1b:b5:16:af:c2:ae:2a:15:97:24:90:5e:
28:e2:31:e5:84:88:2f:b9:14:e3:b3:23:5a:6d:7b:2e:ec:7a:
64:91:c4:c8:3a:62:86:8e:78:bd:2d:72:d6:25:76:83:0d:62:
20:26:98:d0:01:71:81:a0:ff:42:67:2b:b7:3e:71:23:6a:98:
4e:81:68:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:45:56 2026 by rpki-client