
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/4D144B780DFE11F09C46E054C4F9AE02.roa
File: 4D144B780DFE11F09C46E054C4F9AE02.roa (raw, json)
Hash identifier: ZgPtES9Kb7/bZDuku74P3oPXELpqML+BgkqSggVYIcY=
Subject key identifier: B7:3D:87:51:5E:D9:C1:55:4D:F2:69:DA:1E:50:7B:67:A2:46:C2:E7
Certificate issuer: /CN=A91E85F1/serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Certificate serial: B6
Authority key identifier: C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/4D144B780DFE11F09C46E054C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:56:06 +0000
ROA not before: Fri 31 Oct 2025 07:21:17 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 153322
IP address blocks: 2001:df4:3ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E85F1, serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Validity
Not Before: Oct 31 07:21:17 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a588e6-961a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a7:5a:9e:8f:8a:12:05:63:8b:81:7e:d5:32:
1b:3c:58:d9:d5:5a:75:8f:1e:2c:46:8e:e0:82:f0:
d8:a7:02:ee:86:c0:d2:42:d4:33:40:30:be:1e:1d:
58:d5:c8:4a:69:87:8a:01:bf:c8:fc:1d:a7:83:ae:
7c:37:ee:49:c1:b5:e1:95:81:48:2d:93:f6:20:58:
d0:3b:9e:71:ce:6f:80:fa:f1:e3:98:e7:34:9d:16:
a0:d1:79:6c:c5:00:67:db:4b:2a:de:70:c8:06:e5:
d9:c9:f1:91:50:bc:e0:e2:c3:65:b1:e7:17:dc:13:
04:60:d0:0b:4e:4a:f1:21:90:6a:16:b4:5e:a4:1e:
9f:84:c6:1e:22:cd:e0:1e:7a:33:ff:49:d4:ff:66:
a7:69:c3:99:b4:e5:23:32:ca:0f:3c:d0:c5:70:32:
0e:7a:3b:11:8e:79:99:6b:2f:c4:3f:09:d2:4f:b5:
e9:e4:8a:74:b7:c8:08:f1:3d:d2:2a:a1:af:10:d7:
65:46:77:1d:c7:1a:08:a2:1b:34:6d:b4:41:ce:f6:
bc:93:46:d7:5e:21:bd:a8:5b:e1:cd:45:d3:df:65:
83:db:d7:d3:b3:cc:c4:57:f9:9c:ec:60:2b:4c:34:
3b:a7:b8:64:a2:1e:ae:68:1c:e8:3b:f9:6e:6c:57:
e3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3D:87:51:5E:D9:C1:55:4D:F2:69:DA:1E:50:7B:67:A2:46:C2:E7
X509v3 Authority Key Identifier:
keyid:C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/4D144B780DFE11F09C46E054C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:3ec0::/48
Signature Algorithm: sha256WithRSAEncryption
2c:99:0a:74:30:2c:85:f8:ed:0c:d9:4c:b6:29:d2:d1:8e:5d:
b5:b2:fb:f0:dc:ee:7e:7c:18:22:83:b4:78:a8:e3:18:a1:b9:
12:71:55:76:d3:be:c8:f3:a9:73:c8:12:a2:9d:82:d6:cd:1a:
e5:b9:4c:4a:f9:72:24:43:79:e9:4f:aa:89:61:9c:cc:94:1c:
ad:94:cf:a5:f2:ea:34:c8:5c:3a:21:90:52:b9:01:73:fc:2c:
dd:42:8d:c8:bb:cb:95:d2:d1:68:9c:88:68:2c:4c:cd:41:79:
0b:f9:c3:1e:96:68:49:06:00:bb:17:51:44:57:b9:69:60:81:
63:74:fb:98:55:6f:37:f8:47:70:9c:6b:2a:40:93:d6:aa:01:
6c:8b:97:d5:97:64:64:3c:30:5c:3e:21:f3:ff:bd:b5:ed:ce:
a2:1a:de:6f:6a:06:a6:27:a2:f8:17:97:9b:0f:5c:87:e2:77:
67:c1:d8:e1:68:64:1b:e4:e4:68:ce:93:5f:bc:0e:c4:e5:91:
ec:bc:fd:1c:d5:1d:e6:31:5e:39:e4:3c:55:f8:e0:4c:83:ba:
07:c1:5b:83:14:77:d7:05:2a:d1:d5:8e:82:ff:e1:5f:40:92:
e5:1b:df:b5:5a:76:1c:5a:dc:45:dc:fc:20:a8:73:46:4d:4a:
44:4c:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:40 2026 by rpki-client