
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/46BE2FE6837B11EEB7855E0FC4F9AE02.roa
File: 46BE2FE6837B11EEB7855E0FC4F9AE02.roa (raw, json)
Hash identifier: ejhIquAUjT62Z1WbAXp5NxAiPY7nh5eUHh7ylfUgH9U=
Subject key identifier: D4:EF:3F:1D:14:4D:10:5C:4E:09:90:9F:FC:3C:33:C3:11:C1:35:22
Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial: 07EA
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/46BE2FE6837B11EEB7855E0FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:25:14 +0000
ROA not before: Wed 27 Aug 2025 00:04:46 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 147027
IP address blocks: 110.164.234.0/24 maxlen: 24
110.164.235.0/24 maxlen: 24
2403:6200:7928::/48 maxlen: 48
2403:6200:7929::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 22:39:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026 (0x7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Validity
Not Before: Aug 27 00:04:46 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4aeba-b4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:b4:a2:4f:91:a5:c3:ff:ac:97:3d:df:48:
55:31:19:14:f6:03:d4:a8:4f:48:7f:e2:db:2f:32:
62:cf:64:e6:97:56:01:4f:0a:2f:95:4b:dd:ac:96:
35:7a:2d:ab:e4:a3:37:ee:47:32:51:4c:57:27:0d:
35:c5:6c:d2:f7:b0:ff:29:f0:0c:ba:3b:3b:c2:e0:
e3:21:72:b5:43:f5:bb:6e:69:28:d3:0a:5b:42:7e:
04:49:b6:d2:72:fa:ad:a9:20:f7:c8:e2:04:ec:1f:
a0:7e:10:c8:5f:90:09:60:c9:89:f8:1d:d3:17:c3:
2a:18:de:f9:68:f6:27:77:fc:85:39:ff:a8:14:a9:
87:fb:49:b6:1a:26:ad:3a:e9:09:b4:bc:2a:96:6c:
99:01:99:52:4f:69:de:e1:f8:2d:47:e2:6a:cb:29:
f5:64:ad:6e:aa:9d:9f:73:1c:a0:a2:09:8f:4b:20:
fa:3a:c8:92:5c:d5:dd:76:4b:bb:ba:03:29:54:6a:
62:86:40:71:79:fb:17:10:a3:27:41:81:97:87:fc:
bb:9d:3a:2e:79:28:ad:94:5d:8f:48:c7:27:19:ce:
67:b3:2c:50:e8:42:71:9d:33:3c:bf:93:b1:b6:bf:
f5:84:c1:d1:0b:ba:cf:b2:2f:bb:d5:74:dd:05:19:
80:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EF:3F:1D:14:4D:10:5C:4E:09:90:9F:FC:3C:33:C3:11:C1:35:22
X509v3 Authority Key Identifier:
keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/46BE2FE6837B11EEB7855E0FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
110.164.234.0/23
IPv6:
2403:6200:7928::/47
Signature Algorithm: sha256WithRSAEncryption
32:0e:3f:65:e3:69:81:50:96:56:b8:8b:1e:39:91:90:06:fe:
e0:7e:fe:42:1b:56:f4:c1:69:57:f7:f3:44:a6:70:d9:c3:d0:
7c:12:4e:96:e9:57:bb:e4:2a:d2:28:b4:1d:98:d3:a2:4c:a6:
ff:02:3d:3d:02:11:2d:73:d1:ad:c8:63:d5:b5:78:bf:c8:82:
23:8b:51:a2:e8:44:97:95:49:bd:4b:f6:89:9e:2c:08:64:63:
69:e1:92:f8:af:62:6e:56:96:76:a6:4a:3f:e1:57:67:11:38:
ee:ea:b6:51:ea:f9:89:2a:18:6b:90:6d:c2:98:be:27:c9:28:
d7:e0:bd:0f:9c:61:53:74:4c:7e:4e:56:f1:eb:27:5d:02:1c:
81:96:a8:1f:17:a7:95:3a:40:ec:7e:d8:1e:c9:9c:18:c0:8c:
d8:75:e5:13:77:bc:c0:59:fa:00:72:09:f5:ef:a3:ec:78:aa:
1c:df:3d:34:b7:ae:51:78:4a:61:46:e5:2c:0b:da:9c:83:89:
14:32:9a:4a:fa:06:cc:8a:94:2f:4c:a3:06:7b:95:6d:d0:51:
87:c6:8f:50:0c:e3:38:8d:af:1d:02:35:c9:4f:54:f5:c9:8b:
29:91:4b:82:6e:f9:5b:c7:18:05:b3:c2:64:1f:1e:9c:0b:a9:
d4:47:38:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 12:51:52 2026 by rpki-client