
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/4B34CDD888EB11F09EC0EE50C4F9AE02.roa
File: 4B34CDD888EB11F09EC0EE50C4F9AE02.roa (raw, json)
Hash identifier: mcnL8lsesYFVf7+cGRszhKENi52W4KfHZx6RDabUMA8=
Subject key identifier: 49:35:79:B4:5A:99:0E:5A:17:E2:AC:05:2F:52:77:A3:77:EF:15:DE
Certificate issuer: /CN=A91982B6/serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Certificate serial: 011D
Authority key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/4B34CDD888EB11F09EC0EE50C4F9AE02.roa
Signing time: Sat 25 Apr 2026 06:36:11 +0000
ROA not before: Sat 25 Apr 2026 06:36:11 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 142615
IP address blocks: 160.250.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982B6, serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Validity
Not Before: Apr 25 06:36:11 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69ec60db-5b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:aa:60:ec:24:10:10:11:dc:5b:ff:87:3e:
d5:17:26:33:f3:d5:96:26:51:4c:95:5a:04:97:b0:
80:26:63:d1:81:1a:e2:74:ca:00:f2:35:55:7c:31:
52:cd:b6:80:73:98:4a:b7:79:ed:5c:67:61:e7:fe:
6b:e8:60:68:7d:a0:50:69:b6:78:93:14:9a:98:d8:
50:0e:f2:f0:65:27:31:d1:29:ce:dc:93:82:73:cb:
4d:7a:a3:e3:00:bb:e5:8e:e8:6d:73:7b:75:c1:df:
ae:8c:09:aa:96:60:3d:34:ab:e3:69:8e:37:99:d1:
91:ce:cc:06:0b:5d:e2:a4:8b:4f:14:5d:93:3b:40:
8a:8d:b0:be:a8:1a:74:22:9c:27:60:75:f7:e6:27:
ec:e5:b1:82:20:cd:34:29:af:11:8f:6b:55:e0:91:
fa:dc:5b:a2:d8:4f:e9:72:f7:b0:4c:2d:bc:c8:3c:
38:74:2d:6a:00:8a:87:27:ad:e9:00:79:b5:78:e6:
3f:b4:97:fa:f1:ae:34:e8:34:16:48:03:5b:45:82:
6b:d8:b6:46:b8:97:be:2b:73:71:fe:dc:1c:2b:0c:
4d:fc:fa:3b:30:e4:cb:de:7f:10:6e:68:74:8d:56:
8a:c4:22:fc:d6:be:ce:b8:70:b0:84:0d:06:0f:ff:
97:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:35:79:B4:5A:99:0E:5A:17:E2:AC:05:2F:52:77:A3:77:EF:15:DE
X509v3 Authority Key Identifier:
keyid:39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/4B34CDD888EB11F09EC0EE50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.240.0/24
Signature Algorithm: sha256WithRSAEncryption
07:07:9f:85:09:3b:b8:dd:27:c4:4e:f2:c4:8e:5f:33:86:46:
e9:a9:c9:d9:3a:3d:0c:52:6c:a6:23:a7:c0:33:18:67:f5:da:
8d:72:88:77:5f:71:88:c7:67:45:20:06:89:19:ae:3c:2c:d6:
51:d8:f3:d0:4d:2b:75:84:b2:4f:04:c9:a5:d8:00:3d:26:57:
0c:d3:c9:ac:21:01:9d:7b:41:cc:8f:ae:2f:d2:dd:2b:a0:ad:
c8:c7:05:25:88:82:26:fe:7e:65:0e:8f:ac:5c:0c:d2:c8:fc:
4f:8a:ab:28:25:19:78:93:aa:c8:09:92:a1:34:48:5d:82:0f:
73:43:ae:64:88:d8:9c:fe:47:4c:a3:37:1c:9e:d0:41:fb:f5:
bf:90:a7:0e:a3:a2:0f:96:12:45:2a:cb:50:01:24:d3:05:28:
b2:cb:ba:14:b2:64:dd:dc:e6:c1:e9:ff:6e:04:4a:a7:de:42:
3b:e9:0d:2e:fb:97:df:e1:b6:f7:3d:18:02:3d:e2:5e:92:9d:
97:6c:75:b3:8f:94:21:75:af:ae:10:21:10:6f:ec:67:89:85:
d7:6b:35:46:fe:ac:12:61:6c:e9:45:36:29:7c:c3:92:ea:23:
7e:ab:d5:ae:33:88:75:85:e5:35:c8:7d:73:c3:d8:18:30:a9:
c9:2e:e3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:16 2026 by rpki-client