
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/4DA7A7766C6611F0883DC646C4F9AE02.roa
File: 4DA7A7766C6611F0883DC646C4F9AE02.roa (raw, json)
Hash identifier: eHQm9RZxCNcg7cwgpiIX3zQrXR39BEKT7FwPvpD+Hm8=
Subject key identifier: A3:B6:53:23:DE:B8:D3:19:71:62:EA:F1:EF:8B:9F:6B:E8:71:65:10
Certificate issuer: /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Certificate serial: 8D
Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/4DA7A7766C6611F0883DC646C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:53:49 +0000
ROA not before: Tue 25 Nov 2025 05:52:50 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 55501
IP address blocks: 160.250.96.0/24 maxlen: 24
160.250.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 06:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Validity
Not Before: Nov 25 05:52:50 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a5a47d-328a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:ce:1c:49:29:a3:0b:be:72:d6:9f:55:6c:
59:ec:35:12:e9:1f:6c:98:db:7d:e0:7b:7c:fb:97:
55:93:f2:3e:bd:b2:28:84:ee:96:9f:72:2a:3c:69:
18:4c:ed:dc:1f:6b:36:00:b8:fc:97:20:9a:df:d1:
1a:86:2b:62:08:81:1c:42:c3:1c:62:c0:38:7e:d9:
dd:bb:ea:60:7c:7c:8c:6b:29:0c:b0:aa:04:64:92:
29:95:60:d6:c8:62:70:a1:f9:30:c2:d9:ea:ee:88:
37:c4:ff:ab:a7:d2:27:4a:4a:95:b7:24:d2:e8:21:
9d:ac:14:e2:ff:5f:94:8e:ec:d5:51:55:d9:71:c1:
4e:01:f9:11:f7:38:0f:8c:ab:c4:5e:fb:01:22:7c:
12:19:a9:0c:13:66:50:a5:24:93:b6:42:9c:19:ca:
a5:df:10:ea:54:a4:92:9f:e0:b1:d0:94:73:9b:a4:
45:08:45:44:e2:90:e6:b2:bd:3a:8f:cb:91:41:e6:
81:da:7e:9e:cf:de:a3:9f:06:24:80:7d:25:ea:08:
b6:6d:2e:d6:e1:04:64:80:fe:36:66:80:16:e7:44:
9a:1c:50:ae:92:e9:a9:0f:11:44:95:4c:9d:de:71:
07:d8:90:86:b4:46:ee:4f:e1:17:b8:dd:8c:74:1d:
30:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B6:53:23:DE:B8:D3:19:71:62:EA:F1:EF:8B:9F:6B:E8:71:65:10
X509v3 Authority Key Identifier:
keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/4DA7A7766C6611F0883DC646C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.96.0/23
Signature Algorithm: sha256WithRSAEncryption
34:75:1a:0e:da:4d:57:cc:29:79:c2:63:c9:2c:e2:3b:40:d2:
c8:06:55:e1:d6:1e:74:da:8c:19:57:11:08:42:85:8c:03:e8:
6e:0b:ae:ed:ce:ac:ea:23:87:fa:49:6f:87:b0:d6:f3:e6:2c:
64:c2:90:6a:9a:36:33:76:59:2b:6a:d2:77:80:58:2e:2e:95:
af:74:1d:69:b7:89:71:05:0c:6c:3e:72:de:79:e4:52:c7:30:
35:99:72:71:10:ce:14:8f:10:3d:59:8c:94:12:68:d7:e3:0f:
dc:54:78:36:de:d1:e4:05:9e:a8:dd:cc:ff:22:89:41:b0:50:
14:70:26:69:6c:f8:cc:1b:fc:25:de:d8:f1:c8:91:9f:84:e0:
2f:d6:a2:b2:c8:2d:9d:64:78:51:33:d6:42:bf:9d:4b:c5:d6:
6c:00:ec:55:4c:0b:fe:21:83:8d:48:26:d9:6b:e1:04:f4:f4:
2e:0c:8b:a7:8a:7c:f4:bf:ed:a4:b3:8c:a7:ad:18:a7:ca:84:
ae:98:14:82:04:b8:61:25:7f:f7:64:46:a7:53:2a:25:86:3c:
b2:a7:08:20:70:dd:09:90:70:10:79:da:b7:a0:d3:cc:29:81:
37:08:9e:95:b4:9d:2e:37:1c:6b:c8:56:c6:54:b4:d8:01:a5:
ae:4c:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 01:48:04 2026 by rpki-client