
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/E29CD82EC58B11EFBA44DE34C4F9AE02.roa
File: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (raw, json)
Hash identifier: gk55dQC8eTI12/UHwkyE0xAYw726BD8sevAqReEeCXo=
Subject key identifier: AF:9D:AF:32:98:DB:14:84:8C:FC:DC:40:A2:AB:A0:67:04:E9:3B:22
Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Certificate serial: E7
Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/E29CD82EC58B11EFBA44DE34C4F9AE02.roa
Signing time: Mon 02 Mar 2026 04:59:37 +0000
ROA not before: Tue 27 Jan 2026 05:28:11 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 137943
IP address blocks: 161.248.50.0/23 maxlen: 23
161.248.50.0/24 maxlen: 24
161.248.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:36:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Validity
Not Before: Jan 27 05:28:11 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a51939-c977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:a8:a5:e9:46:c7:0e:48:21:f7:0f:4c:2c:
f9:3b:93:b7:87:ac:47:61:be:a9:3c:6d:7f:de:a1:
22:b3:bd:6c:3d:b4:e9:9e:b6:71:2c:29:8c:4b:f9:
1d:f5:0f:c6:66:4d:b4:be:81:3d:74:a1:b6:4c:ff:
9a:71:d9:f2:ce:28:6f:63:c6:af:af:0d:8b:22:1c:
2f:4d:e5:25:0f:8a:f8:62:26:a5:bd:0e:61:66:a6:
41:b3:44:f8:8a:29:36:6f:d9:1f:23:41:77:32:06:
5e:d9:64:ba:e9:00:b5:62:de:78:e0:13:1c:ec:7e:
28:1c:6d:cb:e1:b7:2d:c1:16:c5:39:1c:f9:7d:f8:
25:b8:58:32:d2:26:0f:5d:c9:b4:98:27:c0:e3:12:
53:24:e9:0d:00:cc:f9:fd:e2:bf:64:12:86:3f:cf:
cd:2e:ce:f7:8b:e7:31:9b:13:38:a4:e2:58:eb:c4:
b8:d9:41:c1:74:e4:2d:92:1f:7f:92:e5:a9:cb:5c:
9d:43:b4:a8:55:29:b1:41:9d:38:11:73:65:67:9f:
9a:17:cb:b0:93:b2:5c:54:51:ec:34:a3:2a:52:2f:
1e:36:1e:ca:66:40:65:ae:ba:eb:1d:bc:8e:b3:1e:
bc:78:fb:7d:37:07:78:47:80:70:d1:32:3c:c5:e6:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9D:AF:32:98:DB:14:84:8C:FC:DC:40:A2:AB:A0:67:04:E9:3B:22
X509v3 Authority Key Identifier:
keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/E29CD82EC58B11EFBA44DE34C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.50.0/23
Signature Algorithm: sha256WithRSAEncryption
48:bd:24:88:58:94:c9:fa:3f:1a:79:8e:52:41:cc:32:5d:8e:
7f:dc:e6:ec:f6:82:de:25:5f:17:66:81:d7:42:61:c7:ef:82:
78:f6:c6:9e:e8:a3:99:da:3c:30:16:5d:cc:62:06:cb:eb:1d:
a7:a9:e2:49:cf:99:8b:1d:7d:76:59:4e:1b:b9:fa:53:1d:8d:
d3:5b:89:e3:f0:94:19:ca:66:6e:70:78:52:e9:86:29:7a:48:
9c:f1:98:b5:7d:c6:c7:48:4b:be:ac:73:df:ef:b6:51:c3:c3:
05:ec:e3:fb:16:35:67:e3:fa:62:f8:37:27:38:63:52:95:4f:
57:dc:89:6f:d5:93:7a:63:8b:4c:35:cf:fd:94:f3:c7:1b:9b:
76:11:a3:85:2d:01:f0:a1:97:fb:ab:3b:5f:de:f0:2d:42:2a:
b7:a3:77:1c:83:98:c9:28:dc:86:a6:e1:6e:60:61:3a:ab:4d:
37:9e:a6:9f:f9:5f:55:54:29:8d:8e:9a:74:60:58:5d:77:7b:
f7:b9:86:91:32:cd:e2:72:9f:04:98:84:c9:88:5b:a1:9d:12:
78:46:e9:72:b5:cf:ba:45:b5:75:e5:84:f6:02:dc:c8:d8:42:
4f:3f:04:6c:32:ac:fa:21:f4:fb:e3:e4:da:b3:75:44:84:8e:
46:ca:bd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:46:19 2026 by rpki-client