
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4495856A8DB811E98ACC9F7EC4F9AE02.roa
File: 4495856A8DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier: /+QRen7Io05J4Xucot84AqX64nbfLZG1ouY7NxOjV3s=
Subject key identifier: BA:D1:58:29:D7:62:9C:D0:8C:66:3E:27:7F:85:C7:2B:2D:EA:0E:DA
Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial: 3687
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4495856A8DB811E98ACC9F7EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:48:06 +0000
ROA not before: Thu 24 Jul 2025 14:50:31 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 24465
IP address blocks: 202.149.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 14:22:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13959 (0x3687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Validity
Not Before: Jul 24 14:50:31 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a489e6-d01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:2c:22:72:80:53:a8:13:5e:aa:0d:1f:e8:
50:6b:29:9f:8b:38:23:a4:0a:0f:12:41:25:d9:a4:
93:bd:32:30:26:59:e5:17:1a:af:89:98:90:85:eb:
84:b7:c7:4a:f3:6f:cd:f3:71:af:4d:4c:a8:86:d5:
75:2f:1e:ec:4e:92:27:b4:ab:62:41:7d:c6:1e:46:
1c:66:46:a5:8c:ae:3f:c8:ef:21:c1:4d:56:5d:b6:
b1:6c:4a:7e:f4:39:84:08:4a:d1:a7:d6:79:5f:f0:
5f:f2:b5:72:a4:68:1d:c2:36:68:55:7d:21:81:14:
62:7a:0c:19:bc:ac:95:5b:8a:49:e4:55:46:ba:27:
60:aa:7d:8c:47:37:64:cd:c1:5d:5a:2c:00:7f:20:
f4:a4:e8:9b:c0:f0:fc:b5:15:aa:50:04:b4:b6:0a:
d9:90:e8:77:e3:3d:35:50:83:c5:37:01:0b:1e:6b:
fa:7a:08:90:5c:57:fa:ee:49:dc:f1:15:ee:49:75:
b0:4f:cd:75:3d:be:0b:62:ae:ad:fa:9b:4a:94:f7:
cf:b7:4a:b8:4c:d4:f1:71:9c:11:a5:5b:18:b0:63:
94:76:97:3d:65:ed:83:86:5e:f4:85:6a:d1:b3:14:
c9:b0:96:3d:dc:ed:66:ec:a8:e2:18:f4:61:a1:49:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D1:58:29:D7:62:9C:D0:8C:66:3E:27:7F:85:C7:2B:2D:EA:0E:DA
X509v3 Authority Key Identifier:
keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4495856A8DB811E98ACC9F7EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.149.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:11:ae:7a:13:bc:92:7c:e1:d3:d2:e4:eb:35:12:f8:8c:6a:
cc:4f:fd:85:41:2f:5f:f9:b2:bd:57:4c:5b:dd:6c:28:48:87:
0c:4f:af:29:46:a7:0d:18:4c:84:81:8f:e6:6c:87:7f:22:10:
ec:21:d0:f7:56:7f:23:01:a8:b1:0b:3a:28:c6:0a:87:dd:16:
b9:47:5e:13:ef:a7:e7:26:e7:09:4c:28:a2:dc:4f:2d:41:61:
40:2a:0d:bd:44:ff:50:13:c4:e6:84:7b:26:c2:52:c6:b3:d6:
69:98:db:ce:b1:f3:d3:28:9a:eb:2a:a0:dd:a9:12:48:a4:8e:
c2:b7:38:01:7a:1a:24:38:e6:bd:84:46:0f:9d:4d:64:a8:36:
ea:71:60:9c:80:51:b5:1e:15:98:5e:3f:a6:9c:b4:6c:23:57:
33:05:4d:4c:4c:6d:44:83:e0:0e:d2:90:90:ed:25:3c:b1:00:
19:36:ac:0a:bb:2f:61:d0:c1:c1:71:cb:56:62:10:13:52:18:
da:be:b0:77:1c:a9:14:a0:a6:5f:53:ff:3c:a7:a3:20:cd:82:
5b:3c:7b:4d:ac:4a:72:cd:f8:e6:24:1d:8e:94:93:2e:ec:c8:
cc:fe:55:75:8e:4b:df:f4:cc:2a:3e:d0:d6:c7:6a:53:42:3a:
c6:e2:33:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 03:29:42 2026 by rpki-client