
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/4B3E4A0693DE11EE81D1045FC4F9AE02.roa
File: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (raw, json)
Hash identifier: JqhFhmjTQ7lTEerY4ZxrMkv0NK26Qh/GjDI/YArXFV4=
Subject key identifier: 48:9D:0A:EF:46:05:8F:F9:09:B9:1E:1D:E5:CC:92:52:DD:3E:2A:93
Certificate issuer: /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
Certificate serial: 01D1
Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/4B3E4A0693DE11EE81D1045FC4F9AE02.roa
Signing time: Tue 05 May 2026 04:35:16 +0000
ROA not before: Tue 05 May 2026 04:35:16 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 55785
IP address blocks: 202.37.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl
rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 03:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B20D, serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
Validity
Not Before: May 5 04:35:16 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f97384-a4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:84:28:05:48:86:1b:34:ec:25:e5:8d:22:
b2:06:8e:9a:0e:36:8e:6a:e2:c2:79:ef:10:13:aa:
a0:ab:e4:18:18:fb:81:01:29:af:37:5f:ad:63:b5:
9d:64:58:5b:99:a5:3e:2c:9f:a5:a8:85:49:0c:b1:
dd:9d:ca:e7:30:90:25:5e:36:e2:89:af:78:6b:72:
15:8b:9e:c2:ed:25:1a:38:11:36:1a:bb:93:3d:79:
07:ae:fe:c7:00:fd:4b:26:0a:a6:b8:32:e3:8a:4d:
1d:e4:6d:bb:27:01:48:db:39:b8:ca:32:d4:a9:e8:
03:ba:76:92:8f:e9:f8:e4:e5:bd:1e:25:cb:ca:53:
c0:d7:30:2f:0d:60:58:b6:94:80:a6:e3:80:f4:16:
c7:cd:27:67:46:d7:29:67:29:51:cf:96:5c:c9:82:
6d:3d:77:e9:95:fc:e8:f5:b7:4c:18:5e:2f:03:d6:
9f:c9:2c:1b:84:73:c7:59:14:4a:d8:00:8b:42:d9:
58:8d:a8:81:22:d8:60:61:5b:d5:5e:60:df:3b:47:
f9:9a:6a:70:54:fb:77:03:96:8c:34:85:d4:78:79:
08:ce:5e:9e:bf:c3:b9:d8:56:fb:bb:9d:7d:21:98:
a6:ce:30:b1:59:cd:3b:d8:fb:51:88:02:22:46:a2:
3c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9D:0A:EF:46:05:8F:F9:09:B9:1E:1D:E5:CC:92:52:DD:3E:2A:93
X509v3 Authority Key Identifier:
keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/4B3E4A0693DE11EE81D1045FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.37.198.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:3e:bb:16:d5:55:14:88:bb:33:92:19:31:8e:75:da:ff:7b:
68:c8:21:07:5d:01:b4:12:f8:b2:6c:3d:93:8a:c5:9c:27:7d:
0a:7b:0e:77:38:ad:23:ce:29:39:b6:bb:d2:ed:91:48:0d:db:
16:1c:be:c5:a1:44:a8:50:3c:4a:7a:58:da:06:41:ee:3f:aa:
bd:bc:f5:d8:49:d6:b6:12:7c:49:e8:b0:39:bb:d5:49:ad:1c:
40:c6:ef:34:e2:f9:d1:5d:87:21:04:f3:16:0e:da:d4:74:f4:
03:59:4b:dc:0a:ef:d1:0e:65:31:00:91:ec:46:bc:86:2a:76:
9c:18:d4:ee:39:74:8e:19:da:a3:61:e0:5e:74:8a:da:4a:10:
dd:b7:0e:95:b2:fe:f2:b3:2a:8c:e7:95:57:93:fe:c2:94:7a:
ca:f2:89:7c:5f:8a:b3:6c:5a:06:37:92:b5:28:23:3b:12:27:
8e:53:84:0d:c4:de:91:fb:37:6a:df:39:a9:ac:79:2d:6a:70:
63:bd:5d:9d:21:f8:7f:d3:83:3f:5b:0f:b0:47:2d:0f:ca:12:
71:f7:24:39:c4:93:c2:59:8c:2f:62:4c:c6:7a:a6:17:2e:b0:
d4:08:43:b2:1e:e6:82:27:ed:ae:be:3c:a9:27:fa:96:ee:85:
23:78:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:53 2026 by rpki-client