
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0A4D6250833411ECBB74C786C4F9AE02.roa
File: 0A4D6250833411ECBB74C786C4F9AE02.roa (raw, json)
Hash identifier: xdrSnpVE3zXqJoGIJJhroFkyoNiRkzk/JrlOXjml+YA=
Subject key identifier: 73:04:6A:62:95:07:F4:A2:8D:2D:BE:11:2E:2C:CA:31:B1:5B:2C:8D
Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Certificate serial: 0511
Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0A4D6250833411ECBB74C786C4F9AE02.roa
Signing time: Tue 03 Nov 2026 00:46:33 +0000
ROA not before: Tue 03 Nov 2026 00:46:33 +0000
ROA not after: Mon 01 Mar 2027 00:00:00 +0000
asID: 141435
IP address blocks: 149.234.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 23:29:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Validity
Not Before: Nov 3 00:46:33 2026 GMT
Not After : Mar 1 00:00:00 2027 GMT
Subject: CN=6ae92ee9-c5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:0a:30:1f:15:ae:d2:e8:1d:02:14:8b:b1:
00:dd:8a:e5:5e:4d:07:c8:7d:ff:5d:b0:cd:05:57:
31:78:08:13:0c:0e:f5:2d:53:22:bb:64:6e:b8:fc:
24:f6:d2:a1:1e:0a:96:a1:e2:7f:4a:f0:c1:33:89:
ef:81:37:81:dd:f3:3d:ed:87:5e:b8:c4:16:12:15:
5c:6e:49:f1:cf:96:b0:d3:e1:25:76:c6:d9:2c:b1:
fd:fe:27:7a:38:01:1e:8e:2a:b5:b2:9d:f3:ac:25:
4e:30:56:2c:1e:bb:0e:fb:f4:0b:d0:f4:ac:7f:60:
de:17:05:be:da:f5:46:40:5c:2f:07:8a:e8:f2:c7:
41:6e:0f:04:e9:e2:fa:99:e9:61:f6:9b:88:46:c1:
86:aa:5f:bd:72:6e:80:31:6a:ab:b8:c0:a6:b1:06:
b7:d7:82:6e:f9:5b:b4:73:e8:c6:82:f1:ef:fb:1e:
c1:cf:47:5b:20:4c:62:04:30:f9:9f:93:30:a4:bc:
ec:fe:b3:bd:3c:cc:bf:ed:7a:6d:27:75:b2:b1:aa:
e8:9e:8b:b3:41:ff:a3:ab:68:19:24:f3:5e:b7:b9:
2e:a8:2c:36:e2:fe:c5:fc:98:99:ce:3e:02:f7:57:
5b:08:66:e3:ef:58:fa:53:d7:18:a3:30:78:b9:68:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:04:6A:62:95:07:F4:A2:8D:2D:BE:11:2E:2C:CA:31:B1:5B:2C:8D
X509v3 Authority Key Identifier:
keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0A4D6250833411ECBB74C786C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
149.234.189.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:be:18:8c:3c:c2:1d:b1:e0:07:53:cb:12:d0:37:50:17:18:
8f:cf:ad:1b:60:37:41:57:42:4e:a5:2e:ab:6c:1f:8f:e8:71:
c1:d6:ce:38:b3:8a:64:27:a9:e9:c7:83:ea:c3:3a:51:78:e5:
74:e2:3a:34:64:34:98:5b:eb:f7:b9:a5:43:f9:1e:65:79:dd:
8e:a7:64:7d:b9:21:d3:02:98:4f:31:bc:9c:30:8f:35:57:a7:
88:33:54:a9:f0:4a:a4:83:ef:e3:5e:4a:29:04:47:13:a5:95:
9c:b0:15:7b:e0:da:d9:a7:4b:3e:a1:ee:9d:d6:9e:6f:6f:55:
07:8d:e7:8c:aa:da:f4:7b:96:f6:b7:8c:fc:90:3d:ec:16:5e:
d7:1c:40:c7:d7:87:3f:ed:13:43:1a:95:fe:8c:8a:7c:4d:1b:
e4:90:52:b5:23:07:0d:79:1c:15:62:1c:ce:0f:86:8d:b0:a8:
bc:00:07:1d:10:a9:e6:77:90:fe:f2:c5:50:80:8f:72:0e:1c:
c3:cd:43:7f:2e:5b:f0:63:6f:fa:14:89:6b:86:42:44:dd:d2:
9f:95:0d:93:4e:8b:e7:e7:85:38:e1:82:81:db:da:50:7c:45:
d4:ba:42:d3:3a:69:97:2d:fc:0a:c2:9f:68:15:8a:5b:0a:b9:
b0:88:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:08:15 2026 by rpki-client