
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/2A67700A9B4411EFA1772153C4F9AE02.roa
File: 2A67700A9B4411EFA1772153C4F9AE02.roa (raw, json)
Hash identifier: oLACDWn0TReutR+Ou0/yfjtsLmAW+XCNorvBY4a/yZc=
Subject key identifier: DB:AB:C8:C8:38:4B:14:05:2B:BE:11:6A:1B:22:77:DB:48:50:2A:DE
Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Certificate serial: 081D
Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/2A67700A9B4411EFA1772153C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:09:10 +0000
ROA not before: Sat 10 May 2025 21:39:49 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 23686
IP address blocks: 51.162.48.0/24 maxlen: 24
51.162.49.0/24 maxlen: 24
51.162.50.0/23 maxlen: 23
51.162.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 03:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077 (0x81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Validity
Not Before: May 10 21:39:49 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a44886-5e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:7f:c0:9e:38:df:1e:4d:42:fa:ee:1f:61:
80:0a:c4:61:aa:c6:25:98:00:1a:6d:f6:32:0f:3d:
8c:a6:4b:d5:46:7a:92:da:a6:d3:a5:b4:54:a9:c9:
59:79:4a:1e:26:d6:62:b2:93:6e:99:b7:9f:e9:c3:
8f:a6:dc:da:25:7a:4b:46:c5:f5:30:e4:5d:a6:f9:
e8:de:eb:f6:85:15:9b:f5:42:e4:a8:b4:94:ab:05:
71:57:6a:73:85:51:91:85:63:89:d2:ac:2d:4d:dd:
e5:2b:e5:6f:54:ad:9a:d2:f5:12:a1:00:cb:f7:b6:
57:1d:a2:ca:9e:c4:9b:44:43:fc:05:f7:eb:b6:10:
5a:8f:0e:bc:53:61:76:8f:76:7c:b9:12:de:4c:56:
de:9d:a1:2f:4f:49:68:c4:49:db:85:20:48:a1:dd:
c7:c9:a1:1c:65:52:dc:2d:89:28:4a:e7:70:7b:3d:
b7:a1:da:f1:1f:ee:16:35:bd:f0:3b:08:4f:03:d3:
70:c5:ee:4d:1a:2c:86:13:68:e1:03:96:f3:d8:b0:
1b:8b:bb:c6:30:38:90:b0:ad:d4:b4:e8:a1:a1:60:
d2:db:03:e5:ae:f6:1d:13:ec:36:49:6e:44:0d:d9:
bb:51:38:7f:7a:4b:5e:f7:6c:c9:a8:14:04:f0:62:
58:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AB:C8:C8:38:4B:14:05:2B:BE:11:6A:1B:22:77:DB:48:50:2A:DE
X509v3 Authority Key Identifier:
keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/2A67700A9B4411EFA1772153C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
51.162.48.0/22
51.162.71.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:db:79:4c:e7:3e:79:0e:75:ee:3d:2d:3f:25:cd:27:ce:e1:
bc:02:fb:a0:8b:80:7d:3e:d7:8a:43:79:5c:23:08:25:e1:8f:
ae:fc:4e:4e:fa:a7:bd:fc:47:0e:c2:84:5c:04:34:3d:6a:04:
1e:1e:71:2c:de:e2:d1:c9:44:28:ab:44:b5:25:21:b5:86:d3:
50:57:79:db:38:c4:d4:f5:32:19:23:a5:04:20:a8:a1:5b:85:
70:a5:b2:7e:54:ab:4d:8f:3a:ea:dc:a9:31:b8:b0:d3:98:e8:
67:29:2a:f2:6c:11:1e:86:f5:30:22:89:57:32:85:c3:36:90:
77:76:11:c0:9f:52:f4:4b:58:39:2a:26:61:bd:fa:c6:9d:7a:
a5:c1:55:a1:5e:20:20:dd:7d:5d:d6:bb:20:74:38:e9:1d:e8:
f4:4b:45:8a:55:3c:d1:e9:c5:e9:6b:14:3b:5b:e1:98:d8:4c:
4c:0b:4f:4f:78:e5:1b:f6:39:45:12:67:11:8f:79:e3:d2:0e:
ad:f9:a2:7e:3b:d1:5e:78:e8:86:a7:ec:e8:02:4d:45:25:39:
51:98:9c:5c:16:9d:a5:a6:aa:07:03:7d:30:25:48:b7:d4:96:
b1:d9:8f:94:58:53:ec:96:6f:eb:1f:90:cc:b0:93:c8:17:2a:
40:81:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 18:36:51 2026 by rpki-client