
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/46D8E036BED211F093382E71C4F9AE02.roa
File: 46D8E036BED211F093382E71C4F9AE02.roa (raw, json)
Hash identifier: rrPRNyU7rYRpdQExInvs7G7aezHKQdORadHVtvF/tGE=
Subject key identifier: 81:3E:C3:9A:53:AF:CF:AD:DB:3B:21:1B:4A:E5:2F:39:76:03:38:18
Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial: 098E
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/46D8E036BED211F093382E71C4F9AE02.roa
Signing time: Fri 16 Oct 2026 20:40:39 +0000
ROA not before: Fri 16 Oct 2026 20:40:39 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 206283
IP address blocks: 116.0.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 20:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2446 (0x98e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Validity
Not Before: Oct 16 20:40:39 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ad28bc7-b060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:4e:59:9e:1f:31:ff:bc:9c:7f:94:ca:e4:
3f:d0:a7:21:37:c0:10:29:6e:b2:d7:b8:c4:1d:19:
93:f3:83:1d:72:a1:cc:66:b1:ab:84:3b:69:1a:05:
8d:69:35:f5:15:61:74:c8:52:5c:58:7d:39:ac:ad:
61:0a:4a:03:64:7c:a6:a0:1a:46:58:4b:4b:d6:ca:
13:7d:5c:11:94:ef:d8:9b:96:b6:1a:2f:1d:80:d9:
ae:26:ce:6a:2e:bc:c7:61:a1:60:d7:d7:b3:32:1a:
9e:c8:47:3b:2a:00:74:5a:62:04:4c:92:0a:ad:e9:
78:9c:bf:bf:2d:26:08:30:04:32:18:db:58:0f:c0:
9b:2c:04:42:4e:6e:41:f6:ea:de:02:1e:d9:fd:fd:
f5:25:be:8e:08:47:c2:15:3d:44:87:3e:8e:f7:ca:
f2:a7:ee:6b:8f:f3:28:ae:a3:76:d3:60:bc:3e:2b:
d7:94:e1:c6:9c:0b:7c:54:56:3b:6c:4b:d4:f3:19:
a1:dd:43:12:90:f3:c6:64:32:8f:6c:96:21:4a:28:
06:6d:c1:6d:2a:80:d6:d1:8f:8d:2d:c8:c4:09:62:
eb:ca:ae:c0:66:e1:35:6f:ea:1a:58:58:8a:70:30:
66:b5:aa:79:a0:27:03:18:1c:a0:6d:02:9b:29:eb:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3E:C3:9A:53:AF:CF:AD:DB:3B:21:1B:4A:E5:2F:39:76:03:38:18
X509v3 Authority Key Identifier:
keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/46D8E036BED211F093382E71C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.0.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b4:f5:cb:c6:5e:ee:c9:06:a9:1d:08:e0:a2:e2:4b:7f:d3:
63:59:05:73:7f:99:fc:5f:e9:fb:08:43:00:23:4d:02:2d:c2:
7c:03:b0:8b:b8:a3:ec:8b:bf:17:05:fb:94:7c:c4:05:0f:0f:
c1:6c:bd:59:2b:d0:2f:77:ae:d5:ba:e7:3d:10:79:dc:6e:a1:
95:8b:84:2a:1d:f1:64:d4:eb:39:c6:98:ca:96:80:db:03:1e:
35:7e:ab:54:ec:05:f5:5e:27:0f:2b:0e:1d:70:ff:8d:96:ba:
59:7f:40:bc:e7:23:5b:3d:b0:d9:e1:d6:42:7d:75:a6:aa:51:
e3:15:cb:ab:1d:09:3f:98:94:84:3e:a1:6f:4f:e9:bb:40:2c:
40:dc:30:d7:2d:1c:43:f7:95:c4:a7:12:38:a1:ee:f1:f8:58:
06:e2:0f:79:fb:43:41:c0:eb:a6:1b:e1:49:ae:51:f8:0d:23:
af:6f:0b:b8:e3:a1:d5:9c:6a:e6:a2:42:c5:30:ff:26:23:d7:
28:d3:03:3d:f5:64:c2:c0:5d:d2:4b:40:96:b5:b2:6e:0e:e4:
19:5d:70:d0:43:be:6a:1b:61:81:5d:2b:63:d7:0c:8c:e1:64:
0b:06:81:7b:91:84:0f:46:30:4e:62:78:f4:aa:27:4b:80:56:
3a:bd:6f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:49:54 2026 by rpki-client