
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa
File: 6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa (raw, json)
Hash identifier: RwcLbhPNncbctra9BJj47907e1FtaKD2ImyIJgGExWo=
Subject key identifier: B5:A8:FB:ED:30:F7:7D:76:20:4C:34:4A:A9:C9:2E:24:3D:7B:28:3C
Certificate issuer: /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E
Certificate serial: 0214
Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:14:40 +0000
ROA not before: Sat 07 Jun 2025 03:43:28 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 134134
IP address blocks: 45.65.58.0/24 maxlen: 24
45.65.59.0/24 maxlen: 24
45.126.253.0/24 maxlen: 24
103.53.24.0/24 maxlen: 24
103.53.25.0/24 maxlen: 24
103.53.26.0/24 maxlen: 24
103.53.27.0/24 maxlen: 24
103.212.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl
rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110321, serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E
Validity
Not Before: Jun 7 03:43:28 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4118f-e45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:6c:60:cc:3e:e3:8e:73:03:ae:58:92:9a:
b4:e6:32:3a:5d:a5:bd:ae:e7:ed:15:77:eb:1d:ce:
3b:2c:e1:9f:93:48:15:49:ac:86:45:2e:a3:a9:dc:
61:60:54:62:28:2b:a3:7d:c9:92:a5:a5:54:4b:11:
12:a7:73:31:df:6f:45:57:79:9e:1b:d3:b3:78:e2:
1d:e9:5e:c6:98:c1:36:97:09:82:68:10:81:4b:54:
0e:d2:4e:38:1e:96:c1:05:e1:39:3f:bd:cb:b1:94:
96:9d:49:7b:32:fe:53:ea:f4:3f:23:2d:13:93:2b:
8a:b2:b1:e5:7c:5f:68:62:fd:b3:d8:03:10:bd:1a:
6b:8b:2b:fa:0b:9c:d0:e6:47:57:9d:7b:1a:10:5c:
84:2e:61:c5:82:e4:d1:34:b2:2b:ff:0b:53:7a:3e:
e1:ef:54:b2:98:db:66:f5:b1:b9:b0:28:70:8a:1d:
00:28:fc:3b:3d:06:e8:9f:5f:fe:4b:e6:9e:3b:9f:
e9:3f:3f:12:00:04:b2:71:51:b4:aa:3f:74:45:f8:
6f:b6:2a:8b:49:91:45:ed:fe:c9:18:d0:61:17:e5:
ce:9c:60:16:d2:89:df:a1:ca:e7:10:1b:cc:ea:70:
14:b4:17:e0:71:11:8d:bb:d9:50:db:9e:96:19:4d:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A8:FB:ED:30:F7:7D:76:20:4C:34:4A:A9:C9:2E:24:3D:7B:28:3C
X509v3 Authority Key Identifier:
keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.65.58.0/23
45.126.253.0/24
103.53.24.0/22
103.212.160.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e7:f9:12:32:d9:71:3a:83:a1:bd:2a:d7:c3:b5:d1:e3:fd:
21:b0:f7:bc:74:f1:e5:7a:b7:0c:ee:61:4a:14:a9:41:b1:df:
4d:e8:73:77:61:20:2b:47:3e:ad:d4:72:c4:77:8a:29:5b:be:
fd:f9:4c:59:3e:da:76:de:70:09:64:ee:98:1e:f4:d3:0b:92:
c2:ca:1b:03:13:22:e5:ba:9a:6e:5e:13:db:e0:82:a9:ef:c9:
44:84:b2:a5:6d:6f:7c:d4:69:cc:3a:4d:4f:15:56:bd:13:b0:
9f:83:af:c9:14:a7:16:5e:8b:ce:f6:04:28:33:1e:2a:b4:f6:
9b:3f:2e:ec:1f:2d:fb:9c:9f:19:2a:67:3e:e4:f8:d9:c9:26:
a9:bf:ca:77:8e:0d:2f:1f:7b:77:85:ed:a0:8a:05:34:72:ff:
f9:40:ed:58:6b:86:45:5b:71:96:3e:ac:8a:5b:7c:d3:89:b0:
54:7a:cf:d1:b2:b4:6a:73:aa:09:0a:dc:dc:b1:07:e0:a1:7d:
a1:f1:e0:11:04:ba:d6:46:0a:85:d7:bb:cf:5a:39:91:fb:8f:
c5:81:a1:4a:f0:e0:13:35:3c:b1:4b:ab:5a:0c:d3:c9:68:8d:
32:9d:1d:73:b3:3b:4e:d3:2a:1b:90:a1:ce:40:29:ec:c1:de:
71:ff:9c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:21:39 2026 by rpki-client