
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/5AF3ECBEAFBA11EF91955453C4F9AE02.roa
File: 5AF3ECBEAFBA11EF91955453C4F9AE02.roa (raw, json)
Hash identifier: oDbq8aHQpmwpTVbKMN5yg6duwCoRhyPVojQ6jr19VtY=
Subject key identifier: C7:F5:6D:CC:FA:74:FC:45:23:7D:7B:23:AE:01:D8:41:10:A2:AA:40
Certificate issuer: /CN=A911E0B4/serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Certificate serial: F3
Authority key identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/5AF3ECBEAFBA11EF91955453C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:12:39 +0000
ROA not before: Wed 21 Jan 2026 05:24:51 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139043
IP address blocks: 160.250.50.0/24 maxlen: 24
160.250.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl
rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E0B4, serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Validity
Not Before: Jan 21 05:24:51 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a41f27-dd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:4c:e4:cd:9c:ca:69:10:8d:43:1d:68:51:
a7:6e:97:76:3e:ca:ff:a7:a2:b5:fb:45:35:b5:56:
c1:5e:13:e6:e9:b6:3a:72:c9:81:2b:45:83:ef:82:
ac:25:8c:7b:c5:77:4d:7c:fb:f3:a8:f4:3f:46:f7:
c6:02:5e:61:5c:7a:c3:9f:82:41:e9:50:fa:20:48:
e4:5e:7b:9d:7c:03:b4:3e:b2:f5:0e:22:a1:e1:cd:
5d:b1:16:1a:8c:5e:68:83:bb:e6:0e:d3:a8:ee:e1:
0b:c2:ef:5f:b5:a4:fe:e5:56:2f:a6:50:13:18:d4:
d5:f9:fd:55:23:16:76:b4:e6:69:22:9c:98:ec:f4:
e1:d1:c6:76:a8:70:b9:8d:1e:9a:b1:83:9a:46:6c:
09:28:86:39:f6:b4:6b:dd:31:b2:43:c1:1e:6f:2c:
3d:88:d4:67:43:81:ed:7a:eb:80:48:61:57:12:77:
ce:1e:08:c1:36:47:2a:f7:b2:bd:4a:02:e5:71:e0:
5e:c7:b6:65:28:18:0c:fe:79:76:bc:62:bd:7f:dc:
4b:dd:63:cc:53:77:22:dc:d9:54:93:05:39:a0:3b:
e3:20:3b:49:17:a1:5b:4b:09:69:58:32:32:dc:71:
fd:8d:94:aa:6f:e7:f1:87:28:0e:2b:c2:ec:bc:79:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F5:6D:CC:FA:74:FC:45:23:7D:7B:23:AE:01:D8:41:10:A2:AA:40
X509v3 Authority Key Identifier:
keyid:0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/5AF3ECBEAFBA11EF91955453C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.50.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:73:9c:b1:95:17:a7:02:60:87:4c:a3:e4:9d:46:b1:a8:9c:
44:c1:a2:02:5c:85:c3:f6:da:93:5d:ac:f6:88:48:1c:92:81:
ab:1d:2b:f6:90:0b:a4:71:96:2b:96:d5:1d:ea:5b:13:fc:20:
d2:6c:5c:c3:7c:61:fd:bd:e7:8d:cc:b2:4b:5f:08:ba:7e:75:
cb:6b:14:03:1b:18:be:b3:d1:15:98:99:a5:02:c8:de:14:65:
b2:ed:c2:0b:a5:43:74:26:41:9c:1e:55:95:4f:5f:6a:6e:c7:
6d:22:39:43:13:99:ba:fd:2c:84:0b:3a:f0:73:f7:61:d8:76:
82:05:a5:91:da:fe:46:0c:89:9b:64:60:99:9c:47:38:37:79:
82:21:49:e1:8e:51:e8:48:ee:9e:b3:c5:9f:30:75:60:0c:07:
84:34:3d:10:a6:e8:b5:d4:5b:14:f7:2d:2d:77:bb:13:40:d9:
8e:2e:17:a1:15:cf:85:81:95:84:70:ec:55:2f:99:f7:c2:ac:
56:1c:5b:c4:e3:54:47:73:33:f5:6e:2d:2e:43:2f:a6:5b:2c:
89:d1:ad:4e:f6:1f:9b:dd:20:e1:6e:83:f7:86:7b:a3:25:97:
0c:e6:de:4a:7d:93:e2:41:d2:63:fd:ce:fa:f5:9a:45:d1:d5:
44:ac:54:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:04 2026 by rpki-client