
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/5E4A01CA941111EE84D37717C4F9AE02.roa
File: 5E4A01CA941111EE84D37717C4F9AE02.roa (raw, json)
Hash identifier: zxnU04Q4bb1lJGkT9VOzuX1RdTtK4DGbDTsvDe9EOa8=
Subject key identifier: DD:BD:5A:BE:AB:3B:E1:8C:B1:57:80:F6:3F:0A:3B:80:6D:D5:BE:DF
Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Certificate serial: 08D2
Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/5E4A01CA941111EE84D37717C4F9AE02.roa
Signing time: Mon 04 May 2026 21:25:04 +0000
ROA not before: Mon 04 May 2026 21:25:04 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 136506
IP address blocks: 157.119.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258 (0x8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Validity
Not Before: May 4 21:25:04 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f90eb0-1260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:41:ed:2f:46:a4:b1:f4:30:39:ac:8a:a2:
24:39:eb:d8:15:4b:82:3d:55:14:15:e8:8a:ad:cd:
2c:ad:28:78:30:de:69:e1:bd:d8:0f:7e:fb:e9:e2:
ec:39:73:76:02:0e:54:a6:25:fa:65:9c:88:b2:c2:
26:b6:5a:ec:19:57:ea:81:6c:ee:94:74:d5:d7:48:
f7:c2:42:04:c5:8c:67:46:5f:44:af:ef:dc:67:d1:
eb:26:9a:1a:6a:60:8b:e8:d5:5c:33:df:99:18:33:
47:da:9a:69:d2:bc:f4:d5:a8:0b:19:8e:98:e3:d3:
a5:38:81:a7:b2:d2:56:df:5e:70:ce:7d:a8:90:03:
48:20:7d:a6:7b:56:e8:11:39:d2:e7:7d:3d:8b:1f:
00:f5:41:ef:a5:ac:a2:a7:78:81:c0:8e:69:35:c5:
ac:9c:d0:52:61:a1:81:0b:dd:5d:87:06:1e:b9:d4:
c5:10:bf:43:ab:f3:af:c0:55:97:ba:63:0e:45:df:
60:c6:60:ea:a6:a6:20:70:4a:7b:59:e3:94:4d:2e:
ce:81:8c:38:94:53:60:0d:b2:d5:de:8d:9f:01:4e:
e9:d2:3f:56:b2:68:86:01:fa:fb:d5:43:cd:95:57:
56:05:f4:26:97:08:4b:ca:b3:5f:3e:1d:98:e0:55:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BD:5A:BE:AB:3B:E1:8C:B1:57:80:F6:3F:0A:3B:80:6D:D5:BE:DF
X509v3 Authority Key Identifier:
keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/5E4A01CA941111EE84D37717C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.119.52.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a5:a8:3b:fa:f4:a9:26:35:87:eb:70:78:4f:b4:a3:a1:cf:
c7:09:ea:79:56:f3:40:d3:59:c3:ed:85:71:eb:fb:f7:53:10:
79:e9:32:bb:77:28:de:e3:2d:61:bb:93:53:2f:b3:9a:75:99:
ae:83:9c:cd:3a:20:9d:57:60:b3:d8:88:ee:fe:01:07:a8:c1:
0d:4c:35:52:0c:c7:b3:fc:b9:30:15:6b:98:d2:6c:2d:5a:07:
bb:d3:1f:fc:64:33:9f:ea:3c:51:ef:bc:c6:7c:ba:2b:bb:5a:
09:f9:cf:b5:4c:27:6c:0e:da:d6:55:b0:c4:5d:5b:99:be:1f:
05:ca:6a:0b:c9:c9:f2:ff:7d:15:18:52:88:05:28:42:87:a5:
2b:7c:71:2b:49:76:a2:03:1f:82:3b:81:c1:f8:a9:86:b0:45:
44:db:70:ec:c7:45:b9:8e:9e:b7:b8:f7:24:ad:09:ad:57:0b:
20:89:2f:db:8f:54:f0:b1:c8:4b:84:c7:7c:20:62:06:16:7e:
7d:49:1f:5f:a6:92:9c:5d:89:4b:d3:77:81:96:e8:7e:8d:10:
90:df:a4:53:e9:cc:19:95:e4:65:a0:91:9c:7c:c6:2f:52:bc:
4a:ed:93:b6:08:dd:46:5b:18:2e:ec:7b:79:35:78:34:af:95:
f5:b7:ec:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:39:49 2026 by rpki-client