
$ rpki-client -vvf rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/9BD4B85894D611EE85EDE844C4F9AE02.roa
File: 9BD4B85894D611EE85EDE844C4F9AE02.roa (raw, json)
Hash identifier: VJzdJO1/Wt2J0Hm+mjH2h7xfG3svuVrItd0zXJyOv4s=
Subject key identifier: F8:28:D6:06:31:59:CA:9B:C5:81:D2:C4:DB:A5:EC:27:1C:43:DD:42
Certificate issuer: /CN=A91237A2/serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD
Certificate serial: 01AB
Authority key identifier: 43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/9BD4B85894D611EE85EDE844C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:20:52 +0000
ROA not before: Tue 25 Nov 2025 02:19:42 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 151986
IP address blocks: 43.248.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl
rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91237A2, serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD
Validity
Not Before: Nov 25 02:19:42 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a59cc4-3fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:55:25:b9:6c:51:1c:a3:93:5c:9e:58:d2:
49:b6:6a:3d:a7:de:62:01:ba:b9:ee:69:1a:db:9a:
52:d5:03:dc:92:e0:c1:d4:e7:9b:c3:fa:f5:f6:c1:
3c:28:9d:7f:c0:cd:15:11:4a:12:5f:f4:4f:28:ba:
19:6b:d9:6c:8b:f8:fa:63:a1:cd:f3:6c:16:25:95:
dd:b6:5b:e9:c4:24:33:11:45:c2:91:70:9a:d4:b6:
0a:06:c0:49:0e:b9:cf:42:d2:9d:11:90:62:a6:eb:
7f:8f:12:1c:17:17:59:b6:15:c3:37:a0:a9:ee:40:
32:0a:8f:1b:fa:33:d6:f0:a3:2b:47:99:d7:96:95:
cd:c8:ac:b6:3e:43:e4:a7:7d:d8:fc:f1:4a:68:c2:
a1:63:55:1a:ae:31:98:fc:80:76:3a:54:3e:56:32:
89:25:d9:df:b9:60:84:b4:3d:93:3e:98:ac:7f:47:
0a:80:7f:af:b4:ad:d3:d1:52:9b:86:92:d3:e6:da:
5e:51:67:de:65:59:4a:58:78:7a:1e:23:31:a3:4d:
48:45:57:15:70:57:2a:be:79:de:b1:4b:2a:c4:2f:
59:33:7a:51:88:a1:98:6d:ca:ce:ad:ba:44:8b:ff:
98:0b:06:0e:15:4a:ae:e0:1b:1d:3a:3c:40:21:ea:
d4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:28:D6:06:31:59:CA:9B:C5:81:D2:C4:DB:A5:EC:27:1C:43:DD:42
X509v3 Authority Key Identifier:
keyid:43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/9BD4B85894D611EE85EDE844C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.248.56.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:35:4e:ad:9b:56:68:c3:fc:4c:2a:c1:d3:01:23:73:1f:43:
6b:84:59:94:56:b2:2f:45:2e:74:88:ef:37:3b:e9:f0:8e:ea:
10:6d:96:19:a7:b2:da:7e:e4:2d:46:3a:c0:99:40:cd:d7:84:
2a:78:90:24:69:38:19:8c:6e:58:38:15:dc:9e:5e:ae:fe:eb:
a7:9c:86:2e:8c:df:0e:9b:86:6f:d0:b2:25:37:60:ae:66:a7:
a6:cb:ee:2c:3e:32:f5:65:de:c6:de:6a:54:d6:f6:86:5c:a7:
55:fb:ef:e3:0f:2e:5b:df:14:35:68:79:a6:eb:00:2e:07:95:
e5:d2:8a:ea:5c:c7:ea:81:9f:b6:96:cc:64:09:f4:cc:9f:3d:
2a:3b:24:35:08:34:f9:c0:cc:5d:e8:9a:ac:c6:33:fb:0d:14:
1b:01:4f:a0:91:4a:50:d4:3e:53:51:06:d8:85:8d:98:ee:73:
30:fd:59:db:91:2a:29:04:8f:53:6e:b4:d2:84:b8:d7:bf:da:
f6:fa:73:11:2b:d8:86:cc:f2:4a:4d:c4:ef:9c:11:8b:3e:5b:
4b:b9:eb:64:27:92:2a:3d:be:7c:15:6c:82:75:94:e9:fe:ad:
a1:23:96:ea:73:52:ee:29:cc:03:c0:c7:91:96:a9:5e:fe:65:
49:a1:be:77
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM3QTIxMTAvBgNVBAUTKDQzODJGOUFBMzAxNkZDQkYzMUY5MjRDRjEzMkU5NUJG
OTI3MDlBREQwHhcNMjUxMTI1MDIxOTQyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWNjNC0zZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAutBVJblsURyjk1yeWNJJtmo9p95iAbq57mka25pS1QPckuDB1Oebw/r19sE8
KJ1/wM0VEUoSX/RPKLoZa9lsi/j6Y6HN82wWJZXdtlvpxCQzEUXCkXCa1LYKBsBJ
DrnPQtKdEZBiput/jxIcFxdZthXDN6Cp7kAyCo8b+jPW8KMrR5nXlpXNyKy2PkPk
p33Y/PFKaMKhY1UarjGY/IB2OlQ+VjKJJdnfuWCEtD2TPpisf0cKgH+vtK3T0VKb
hpLT5tpeUWfeZVlKWHh6HiMxo01IRVcVcFcqvnnesUsqxC9ZM3pRiKGYbcrOrbpE
i/+YCwYOFUqu4BsdOjxAIerUowIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPgo1gYx
WcqbxYHSxNul7CccQ91CMB8GA1UdIwQYMBaAFEOC+aowFvy/MfkkzxMulb+ScJrd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzdBMi80OUU2RTNENjkz
M0MxMUVFQjQyMTBGMjlDNEY5QUUwMi9RNEw1cWpBV19MOHgtU1RQRXk2VnY1Sndt
dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1E0TDVxakFXX0w4eC1TVFBFeTZWdjVKd210MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjM3QTIvNDlFNkUzRDY5MzNDMTFFRUI0MjEwRjI5QzRGOUFFMDIvOUJENEI4NTg5
NEQ2MTFFRTg1RURFODQ0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAK/g4MA0GCSqGSIb3DQEBCwUAA4IBAQBMNU6tm1Zow/xMKsHTASNz
H0NrhFmUVrIvRS50iO83O+nwjuoQbZYZp7LafuQtRjrAmUDN14QqeJAkaTgZjG5Y
OBXcnl6u/uunnIYujN8Om4Zv0LIlN2CuZqemy+4sPjL1Zd7G3mpU1vaGXKdV++/j
Dy5b3xQ1aHmm6wAuB5Xl0orqXMfqgZ+2lsxkCfTMnz0qOyQ1CDT5wMxd6JqsxjP7
DRQbAU+gkUpQ1D5TUQbYhY2Y7nMw/VnbkSopBI9TbrTShLjXv9r2+nMRK9iGzPJK
TcTvnBGLPltLuetkJ5IqPb58FWyCdZTp/q2hI5bqc1LuKcwDwMeRlqle/mVJob53
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:11 2026 by rpki-client