
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/48FECFBC912511F1A8E8FFC05A11F970.roa
File: 48FECFBC912511F1A8E8FFC05A11F970.roa (raw, json)
Hash identifier: D4+TvfPm3wAXw9U6+KaqFuoaVRMCsZmap8tPANSh1c8=
Subject key identifier: 26:1F:B3:D8:9D:EB:6C:1D:45:81:F2:5D:C4:89:BE:AA:74:26:3F:58
Certificate issuer: /CN=A91DF69B/serialNumber=A77310BCFDFA03CE3866B0AACC98C92A443CEDD3
Certificate serial: 02
Authority key identifier: A7:73:10:BC:FD:FA:03:CE:38:66:B0:AA:CC:98:C9:2A:44:3C:ED:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3MQvP36A844ZrCqzJjJKkQ87dM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/48FECFBC912511F1A8E8FFC05A11F970.roa
Signing time: Wed 05 Aug 2026 23:27:55 +0000
ROA not before: Wed 05 Aug 2026 23:27:55 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154100
IP address blocks: 202.1.22.0/23 maxlen: 23
2402:1de0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/p3MQvP36A844ZrCqzJjJKkQ87dM.crl
rsync://rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/p3MQvP36A844ZrCqzJjJKkQ87dM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3MQvP36A844ZrCqzJjJKkQ87dM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF69B, serialNumber=A77310BCFDFA03CE3866B0AACC98C92A443CEDD3
Validity
Not Before: Aug 5 23:27:55 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a73c6fb-f159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:7c:ab:56:b9:2c:66:fc:00:46:97:ef:24:
6a:00:26:a8:c0:3d:05:ea:39:39:be:13:70:ce:96:
78:dd:87:bc:c4:26:52:e6:1f:41:fa:db:b6:3e:4c:
4d:3c:bd:4b:fb:ff:ec:16:75:ef:f3:74:7f:7f:96:
a6:29:c3:56:44:67:aa:65:aa:1d:06:17:06:57:18:
10:db:de:95:7c:62:25:30:af:15:6b:a2:de:29:0d:
ee:4e:09:88:eb:b5:42:97:ee:61:15:34:2f:74:bd:
5e:d8:2e:31:fd:68:75:f2:ba:a1:48:7d:88:2e:1a:
60:ae:5b:df:7e:0e:9b:a8:3d:38:54:3f:ce:9b:6a:
97:4c:fb:1e:c7:5c:3d:01:34:c9:e7:d5:f5:9d:4c:
e2:09:a1:24:09:f7:8f:21:4e:b5:7d:78:50:e0:d2:
a5:19:b5:0b:2b:f1:61:e8:8a:e4:da:7b:64:b9:39:
7d:41:a3:e6:4f:a4:72:d7:8e:52:c5:b0:08:fa:3f:
c6:cb:92:80:7c:5e:34:e7:9d:8b:6b:49:af:0b:e4:
cf:f5:94:c7:73:47:56:98:d2:c0:a3:1c:27:10:bc:
ea:43:5b:c3:fe:5d:3d:db:eb:0d:da:00:17:9c:49:
b9:1d:a9:7c:27:f0:17:4e:45:56:37:37:35:1f:80:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1F:B3:D8:9D:EB:6C:1D:45:81:F2:5D:C4:89:BE:AA:74:26:3F:58
X509v3 Authority Key Identifier:
keyid:A7:73:10:BC:FD:FA:03:CE:38:66:B0:AA:CC:98:C9:2A:44:3C:ED:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/p3MQvP36A844ZrCqzJjJKkQ87dM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3MQvP36A844ZrCqzJjJKkQ87dM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF69B/D0A6D604912411F1A0E4B4A95A11F970/48FECFBC912511F1A8E8FFC05A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
202.1.22.0/23
IPv6:
2402:1de0::/32
Signature Algorithm: sha256WithRSAEncryption
b6:3a:65:d4:0f:3f:31:75:fc:78:56:ff:5a:9d:31:83:02:fa:
d0:e9:10:9b:db:58:8e:ca:08:51:48:e0:7c:07:c2:ec:ae:43:
db:5e:81:75:c3:01:86:5a:78:aa:73:a3:09:12:88:ef:a4:e5:
36:88:4a:ee:12:25:3d:8c:5f:fa:41:c6:42:d1:de:45:bd:76:
8f:52:ed:c1:aa:20:93:b6:83:04:22:fd:d7:34:69:c3:1e:74:
b0:5d:19:d1:3e:36:a9:32:60:48:3a:63:05:d5:26:55:82:12:
1a:54:a6:21:b8:f5:03:4a:3f:f5:94:97:9b:95:90:9a:8a:79:
7e:f3:74:59:e3:5c:76:b9:4f:52:17:1f:ff:2c:3b:18:cd:94:
50:8e:c7:b2:b6:b2:c2:07:21:55:81:e2:cd:7d:2f:cf:f6:b4:
4a:2c:cc:99:52:56:c9:a2:97:16:5e:78:6f:4c:11:00:8b:36:
ac:0c:f1:4e:57:02:64:4f:b0:46:76:54:f7:6f:f0:e4:06:ed:
5e:e9:a2:17:36:3e:9e:67:78:ce:5d:16:fb:9c:67:a6:98:b5:
39:51:b3:43:95:05:c2:17:14:16:de:e7:dd:5a:28:a7:f1:3f:
dc:1e:7d:45:30:dc:67:a5:6f:da:ab:57:d7:a1:56:a0:08:b1:
0f:b3:2c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:43:53 2026 by rpki-client