
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4EE2265C1FBE11EF97E7974FC4F9AE02.roa
File: 4EE2265C1FBE11EF97E7974FC4F9AE02.roa (raw, json)
Hash identifier: wJuIPWT/SxKs5gxJb1vqmdIdSLMh3euWKwuLCZSiROE=
Subject key identifier: E8:CE:CF:85:13:72:A5:91:CA:9E:C0:F9:D9:D8:1B:08:20:F4:51:04
Certificate issuer: /CN=A9148D01/serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Certificate serial: 0760
Authority key identifier: 7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4EE2265C1FBE11EF97E7974FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:56:53 +0000
ROA not before: Wed 14 May 2025 23:12:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58608
IP address blocks: 49.248.70.0/24 maxlen: 24
49.248.71.0/24 maxlen: 24
49.248.125.0/24 maxlen: 24
49.248.217.0/24 maxlen: 24
49.248.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888 (0x760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D01, serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Validity
Not Before: May 14 23:12:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a453b5-fee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:aa:e9:7b:e6:ab:23:1b:bd:bf:47:e1:2c:
f2:5a:0c:3e:3d:aa:81:b7:a0:50:99:9e:7f:25:69:
d2:5c:5c:af:b8:9b:0b:4d:9e:2e:9e:14:03:12:9e:
f0:61:f9:90:a0:fb:57:8e:42:2b:7e:96:d6:d0:29:
f5:5e:b5:8f:41:b4:d7:16:47:e1:a7:86:8a:6b:09:
28:d5:c7:4f:99:d7:ec:7b:7a:c9:84:61:66:e7:48:
4f:e6:a9:46:b4:1d:a9:3c:22:c0:12:7b:03:4e:8f:
93:94:46:54:4d:45:cf:a9:70:60:19:fb:2b:98:91:
4c:3c:a9:09:02:d2:0f:7d:27:93:0d:c5:3b:79:ed:
19:49:d4:6d:d4:72:55:43:66:eb:f3:3a:8d:ac:db:
44:24:e5:21:f6:80:b7:fc:70:1c:25:07:04:3a:8c:
3d:f4:cb:79:f9:89:3f:33:5f:22:ac:2c:7e:b6:c5:
d7:71:28:16:f4:a3:80:d6:1f:4d:99:53:03:fb:51:
10:8b:67:87:bf:2f:ed:4f:2f:27:aa:16:f5:6a:52:
41:42:bd:35:a1:0c:92:c0:ad:44:27:22:dc:e9:9d:
67:f5:d0:cf:ef:c0:ac:2c:02:a3:28:f4:4d:34:72:
6d:89:17:a6:94:74:86:9d:79:30:39:ef:4c:26:68:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CE:CF:85:13:72:A5:91:CA:9E:C0:F9:D9:D8:1B:08:20:F4:51:04
X509v3 Authority Key Identifier:
keyid:7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4EE2265C1FBE11EF97E7974FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.248.70.0/23
49.248.125.0/24
49.248.217.0/24
49.248.220.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:d0:21:94:1d:54:36:99:27:3c:02:0a:dc:4a:70:65:d0:82:
57:7c:87:c3:9b:2e:64:2d:7c:d4:3e:ef:0e:19:81:7f:df:2d:
8d:e1:af:e2:1e:b9:71:7c:c9:c2:26:14:8f:8a:fd:79:7c:24:
bb:42:f3:28:8a:05:72:68:26:f1:0c:ca:90:49:c6:98:f2:ed:
fb:10:7d:4e:86:a2:6a:5f:f0:cb:06:b2:6b:bf:9e:d4:a6:4f:
cf:bd:75:51:03:9b:c2:3d:1b:d5:c2:34:09:0a:b1:e0:c5:f9:
3b:2c:28:09:21:07:eb:4e:e7:9e:8b:de:6a:be:81:85:9f:6a:
f8:72:ef:86:8f:78:44:6a:b2:77:94:66:82:e1:cc:5e:c8:f4:
8e:ec:3f:07:91:4f:ff:c2:fd:39:40:b0:9c:f4:16:38:30:77:
e3:a1:b6:bb:70:13:02:56:b1:13:33:c0:24:ea:74:7e:61:ae:
98:ec:15:23:74:0a:65:ca:30:83:17:3e:94:2e:dd:ec:f2:c8:
ab:b7:e3:b9:f6:46:65:c0:52:43:6b:28:83:a4:d2:c7:86:f3:
0f:08:7a:f8:c5:98:b3:b1:b2:8b:b1:92:fd:37:35:24:7b:56:
d1:b1:78:48:66:8e:55:43:b1:8e:52:03:34:14:6d:54:e2:8b:
85:46:0c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:53 2026 by rpki-client