
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/4BC4F6A614DF11EEAB46A86DC4F9AE02.roa
File: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (raw, json)
Hash identifier: mZyDlGWu2FdiAPaQ9OzWowqY9YzGB4LKNt3/3VxufRs=
Subject key identifier: 93:36:A8:13:50:E2:B6:28:62:DE:72:7C:33:DC:24:53:57:70:74:59
Certificate issuer: /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial: 0271
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/4BC4F6A614DF11EEAB46A86DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:28:35 +0000
ROA not before: Fri 12 Dec 2025 16:13:28 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 173
IP address blocks: 192.47.168.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Validity
Not Before: Dec 12 16:13:28 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a45b23-8119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f3:26:9c:f0:61:e7:e2:ed:d5:3c:ee:5d:99:
39:c5:dd:6d:73:ae:aa:18:4d:ae:61:be:7a:4e:d3:
cf:eb:fa:b9:b2:6e:c2:b6:b8:d7:bd:f5:62:ff:47:
90:1f:52:fb:01:04:8c:a1:b7:4d:87:6d:33:bd:16:
a0:53:5c:d7:ac:10:77:5e:fa:72:c7:e1:e5:ea:c4:
d0:62:7b:97:9a:de:51:87:d0:18:ea:cd:cc:22:2b:
4a:ab:eb:11:a3:5c:1c:a7:68:1b:8b:49:fe:c2:75:
18:1e:52:db:ab:ef:69:f9:23:96:03:e6:47:05:60:
fd:2f:74:cf:cc:bf:5f:7d:b9:83:16:14:63:88:d4:
ba:88:e8:cb:b5:23:24:d2:2e:4a:c2:a5:ad:aa:04:
aa:ab:14:87:8f:57:97:ce:bd:c6:85:0c:56:ca:d3:
1e:09:0e:af:5d:6f:2d:c5:db:51:b4:4b:eb:aa:02:
20:10:b5:56:cb:12:3d:d8:53:0f:29:70:93:55:f2:
4b:2e:90:ed:00:d1:4f:04:a9:35:06:76:bf:0a:07:
c8:77:53:97:6b:85:63:c0:6d:71:7f:1b:2c:df:9f:
66:0e:f0:d1:24:09:80:30:12:31:44:04:05:2e:f7:
ce:dc:6a:19:43:9f:83:e1:93:e1:a9:63:b5:9e:08:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:36:A8:13:50:E2:B6:28:62:DE:72:7C:33:DC:24:53:57:70:74:59
X509v3 Authority Key Identifier:
keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/4BC4F6A614DF11EEAB46A86DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.47.168.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:fc:98:0d:e4:bc:73:4e:f2:1a:3f:83:93:17:3d:be:0d:a4:
73:b5:ba:0e:1d:30:7c:58:6e:20:0a:51:6c:77:fa:f1:18:f3:
73:9f:01:24:25:11:db:c2:95:fc:89:7c:bb:a7:8f:ee:1d:99:
90:7d:7c:0d:f8:85:43:95:07:bf:1b:aa:f2:19:8e:b8:ac:65:
e1:a5:ba:07:70:e7:2e:15:e1:f4:04:56:3e:b7:c1:d8:10:e5:
3f:9c:d2:90:8c:7a:c9:00:98:24:1a:85:87:f9:08:25:de:3d:
ee:b1:54:4a:29:1e:f3:46:2b:57:2b:5d:9e:c9:14:be:18:e5:
7f:66:42:23:10:1e:c6:df:ea:8d:92:fd:82:5f:fc:d6:e3:b0:
2c:a8:fd:5d:8f:a2:cf:ed:23:33:3e:e2:30:27:91:3c:c9:3c:
a7:eb:10:a5:92:59:fc:6d:fa:6d:f0:d3:6b:e8:cf:5e:60:5d:
74:a8:2e:29:92:dd:f5:d6:b0:da:d6:3a:11:28:5c:37:1f:1e:
50:21:cc:bc:2f:65:a0:2e:44:b2:df:be:f4:9b:c9:df:fc:46:
5c:15:12:bc:56:9b:7b:da:a9:16:fb:a9:f0:0e:8e:4c:a6:6e:
8e:1e:35:4f:36:b9:5c:8b:73:63:58:ca:a9:d1:45:84:92:82:
62:25:f4:c6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMUExMTAvBgNVBAUTKDk4NThDRTRCNEJDNzJFNzZFNjY4QzQ3RDQ0ODk4QzA5
MDg5NkFCRUIwHhcNMjUxMjEyMTYxMzI4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWIyMy04MTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmfMmnPBh5+Lt1TzuXZk5xd1tc66qGE2uYb56TtPP6/q5sm7CtrjXvfVi/0eQ
H1L7AQSMobdNh20zvRagU1zXrBB3Xvpyx+Hl6sTQYnuXmt5Rh9AY6s3MIitKq+sR
o1wcp2gbi0n+wnUYHlLbq+9p+SOWA+ZHBWD9L3TPzL9ffbmDFhRjiNS6iOjLtSMk
0i5KwqWtqgSqqxSHj1eXzr3GhQxWytMeCQ6vXW8txdtRtEvrqgIgELVWyxI92FMP
KXCTVfJLLpDtANFPBKk1Bna/CgfId1OXa4VjwG1xfxss359mDvDRJAmAMBIxRAQF
LvfO3GoZQ5+D4ZPhqWO1ngjRFQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJM2qBNQ
4rYoYt5yfDPcJFNXcHRZMB8GA1UdIwQYMBaAFJhYzktLxy525mjEfUSJjAkIlqvr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS9CNDVGM0ZDNDgx
OUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExuYm1hTVI5UkltTUNRaVdx
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21Gak9TMHZITG5ibWFNUjlSSW1NQ1FpV3Etcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTRCMUEvQjQ1RjNGQzQ4MTlBMTFFRDhENjFCQTJCQzRGOUFFMDIvNEJDNEY2QTYx
NERGMTFFRUFCNDZBODZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBwC+oMA0GCSqGSIb3DQEBCwUAA4IBAQB+/JgN5LxzTvIaP4OTFz2+
DaRztboOHTB8WG4gClFsd/rxGPNznwEkJRHbwpX8iXy7p4/uHZmQfXwN+IVDlQe/
G6ryGY64rGXhpboHcOcuFeH0BFY+t8HYEOU/nNKQjHrJAJgkGoWH+Qgl3j3usVRK
KR7zRitXK12eyRS+GOV/ZkIjEB7G3+qNkv2CX/zW47AsqP1dj6LP7SMzPuIwJ5E8
yTyn6xClkln8bfpt8NNr6M9eYF10qC4pkt311rDa1joRKFw3Hx5QIcy8L2WgLkSy
3770m8nf/EZcFRK8Vpt72qkW+6nwDo5Mpm6OHjVPNrlci3NjWMqp0UWEkoJiJfTG
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:20 2026 by rpki-client