
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/46D8E036BED211F093382E71C4F9AE02.roa
File: 46D8E036BED211F093382E71C4F9AE02.roa (raw, json)
Hash identifier: gY7ktW7M2ychNUMmTz0Yp8V+96oZXWr94hCnEiAKvfs=
Subject key identifier: 06:9D:41:8D:A8:46:D9:58:50:AF:CC:CF:DA:DF:84:FD:16:F1:11:A3
Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial: 0911
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/46D8E036BED211F093382E71C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:09:05 +0000
ROA not before: Tue 11 Nov 2025 07:44:39 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 206283
IP address blocks: 116.0.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2321 (0x911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Validity
Not Before: Nov 11 07:44:39 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a480c1-e03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:8c:8d:9b:f5:6f:67:77:c9:e6:82:8e:74:
5b:12:d0:27:23:11:18:9b:9e:68:a1:ec:24:de:91:
d2:aa:80:d7:da:8c:f3:c9:22:e3:37:55:7d:28:e7:
a1:0a:05:0d:5d:ae:c8:61:81:26:bd:5d:0c:30:0b:
a0:a3:98:09:75:68:00:f0:f2:79:23:c1:01:9b:38:
fa:ea:6f:83:7c:00:d5:13:85:78:a3:d5:0e:87:d8:
83:f8:40:11:40:19:8f:ff:0a:3a:6c:e4:80:35:ec:
9f:bb:22:4c:9b:38:73:52:9f:ac:4b:13:07:39:fa:
5a:f7:61:1f:3e:7b:19:73:d4:81:c4:67:3f:73:d3:
4b:d0:ee:c4:60:47:e2:47:fd:6c:ba:96:e6:cb:b1:
45:6b:38:ef:ab:d8:b3:2c:9d:a8:00:74:bb:fe:86:
4d:3e:aa:93:3f:db:81:43:23:fc:78:7e:cd:4f:e4:
51:38:bf:a1:be:ba:06:ae:3d:6c:7d:d7:d3:11:a5:
cd:91:d9:2c:6f:4b:35:a1:81:c9:72:74:11:dc:f4:
14:b3:9e:d9:bb:e1:95:19:6a:03:36:0f:12:44:9d:
fd:8a:8b:31:5a:c4:64:59:01:3a:75:bb:d2:5f:5b:
94:d2:fb:0b:d6:09:26:38:b9:80:99:f0:13:3b:42:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9D:41:8D:A8:46:D9:58:50:AF:CC:CF:DA:DF:84:FD:16:F1:11:A3
X509v3 Authority Key Identifier:
keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/46D8E036BED211F093382E71C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.0.38.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7e:b5:1f:db:fc:8a:44:07:cb:41:76:ba:12:f0:d1:a7:4e:
ff:d8:1e:6f:f9:17:89:29:e6:da:d2:0f:b1:ef:93:de:b8:bf:
73:77:30:d0:a7:0c:91:ae:f9:0e:84:44:f7:02:9a:9c:28:c6:
c0:da:14:e3:2e:5a:24:d4:14:e8:7a:1f:d1:61:15:96:e1:83:
4f:eb:a9:38:a5:d6:76:9c:fb:30:1b:e2:a4:55:8d:42:8e:91:
32:cc:e8:58:44:2a:ad:58:92:b2:1d:3e:9e:c5:a9:d0:ef:8f:
66:6d:63:cd:0b:d2:fe:d9:88:95:ae:8b:71:95:d7:e3:f4:c3:
1c:b5:86:f8:85:f7:42:3d:22:93:ca:00:a9:91:cf:f6:ce:08:
1d:d6:ba:b1:b4:da:18:17:21:53:78:8b:4c:da:d8:8c:e3:cc:
ae:c3:21:05:17:98:66:68:7e:f4:36:7b:0d:49:44:bd:50:b8:
c6:d1:61:dd:40:0b:47:51:e6:4e:c9:7d:e1:a5:8d:19:9c:32:
e5:c6:d3:4f:54:67:9e:a7:68:28:fb:3b:28:e4:45:38:18:f3:
92:a1:ff:cd:22:40:a2:a7:6f:8e:26:da:66:87:9e:ce:23:06:
ea:08:7b:01:6d:1c:d2:4f:8b:8e:a9:0e:1e:b3:9b:98:91:c6:
7a:04:7e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:13:07 2026 by rpki-client