
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/041C4116C47C11F0A98A0F0AC4F9AE02.roa
File: 041C4116C47C11F0A98A0F0AC4F9AE02.roa (raw, json)
Hash identifier: BPY9qoNeYWzlLwvoaoRX50Iw3DoG+I+GVeT0e2qxzvk=
Subject key identifier: 31:E3:F6:F5:05:FD:B9:D0:95:E3:E3:30:71:92:AB:52:D9:B4:9D:17
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 0D9B
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/041C4116C47C11F0A98A0F0AC4F9AE02.roa
Signing time: Wed 04 Nov 2026 23:48:58 +0000
ROA not before: Wed 04 Nov 2026 23:48:58 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 6453
IP address blocks: 124.247.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3483 (0xd9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Nov 4 23:48:58 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aebc46a-63e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:26:33:82:5a:dd:05:d5:e7:91:1e:ff:fd:
53:a0:da:b2:5a:f3:51:cb:0c:63:8e:48:7e:61:d4:
bb:aa:a1:f7:a5:b9:b2:5e:5b:74:21:d6:16:7b:55:
b1:f3:84:40:a9:48:bb:86:33:e4:7a:5e:8f:31:47:
3b:0c:ea:b6:22:b6:91:f9:8f:01:6a:40:b9:a9:05:
07:9e:d5:58:9f:52:fd:ae:c4:53:f4:a7:c7:55:ab:
60:2f:1e:97:27:76:ef:cb:cf:45:17:e3:e8:72:22:
0f:44:25:a8:a6:c8:62:13:78:11:0a:f5:eb:d3:56:
77:9a:17:33:81:b9:25:93:72:e5:f5:5b:27:38:36:
45:0b:fa:f4:d1:b9:5b:30:82:0e:47:28:dc:78:dd:
66:b0:31:95:05:5f:cd:63:3e:d5:e4:fe:e8:a9:4c:
b6:d3:1a:10:96:a6:53:e5:46:d9:f3:6a:26:b0:fe:
ae:16:7c:34:c9:eb:45:d6:e5:54:d1:01:67:4a:ab:
d3:42:b3:45:2f:f5:b0:13:d5:c3:a4:20:29:50:34:
4e:42:2e:79:40:ec:67:b9:59:08:6a:fb:9e:b8:bc:
33:fe:2f:22:46:5d:7d:f9:62:41:9b:07:c5:88:26:
6d:5e:a4:2e:5d:f8:af:3c:55:e9:25:d8:3b:a8:0d:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E3:F6:F5:05:FD:B9:D0:95:E3:E3:30:71:92:AB:52:D9:B4:9D:17
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/041C4116C47C11F0A98A0F0AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
124.247.242.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b1:a8:34:bf:73:19:30:52:82:87:4a:ef:d7:fe:eb:a6:96:
41:27:99:93:e1:35:3f:87:14:33:67:85:f9:f8:51:d8:1e:fe:
a2:21:47:bd:95:8e:b9:56:52:bf:22:46:ba:fa:15:db:5c:47:
26:63:5c:17:bb:a4:e2:af:50:f0:f0:9b:75:fe:1c:0b:04:66:
6f:db:d3:3d:d3:05:39:21:e6:eb:99:04:01:e3:b0:ed:76:04:
b5:5b:b9:e6:73:7a:33:56:ec:03:3e:80:d9:40:eb:8e:cf:b0:
0d:a5:2a:4a:dc:f1:77:4a:71:95:29:6a:00:f7:f3:01:61:ad:
1e:81:5e:87:cc:43:b8:d6:1d:e9:64:37:f7:b4:80:ad:3c:44:
ac:d9:73:df:cf:e0:44:a6:37:88:59:7f:5b:d9:61:78:23:4e:
2d:07:3f:4b:94:09:ba:5f:17:0d:6f:a4:3a:ac:d8:35:38:35:
bf:9d:f0:73:fd:47:67:b5:c9:1d:31:bb:44:3f:93:71:b6:11:
9e:f1:80:db:c1:b1:83:08:96:bc:2d:11:48:10:e3:8b:b0:51:
40:0a:66:b0:12:c8:c4:28:a5:a3:8b:d1:72:aa:98:64:be:72:
80:b1:5c:6d:72:ae:66:32:34:77:50:34:ec:43:40:7b:a1:d2:
01:98:58:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:29:12 2026 by rpki-client