
$ rpki-client -vvf rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/45CED05E2D2511EBAA63DE82C4F9AE02.roa
File: 45CED05E2D2511EBAA63DE82C4F9AE02.roa (raw, json)
Hash identifier: sWItZVAsoO/9NQlv0a6tFISakAe8J+H+LJW2vp4Rwhk=
Subject key identifier: B2:6C:B4:56:D3:C5:2F:56:56:53:95:94:F6:F6:21:2D:5D:22:AC:9F
Certificate issuer: /CN=A914287F/serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Certificate serial: 07E4
Authority key identifier: E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/45CED05E2D2511EBAA63DE82C4F9AE02.roa
Signing time: Fri 06 Mar 2026 21:28:18 +0000
ROA not before: Fri 06 Mar 2026 21:28:18 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 4637
IP address blocks: 203.28.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2020 (0x7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914287F, serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Validity
Not Before: Mar 6 21:28:18 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69ab46f2-c5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:f5:10:f6:26:a3:2a:ce:48:04:76:56:06:
2b:23:ec:b1:a2:c3:e3:b8:16:86:24:f5:72:3f:a2:
13:9b:80:cc:65:d4:e4:89:6e:c2:92:43:07:2b:d4:
06:1e:b9:e1:ab:e4:25:97:9b:91:0e:f3:45:28:74:
c5:66:50:66:d7:3b:22:56:be:9c:a8:eb:49:9e:6d:
d4:a5:9e:a8:34:18:6d:f2:ce:87:0a:21:22:76:66:
4b:c0:4a:cb:6a:61:b3:c7:6d:d7:65:d7:df:cf:df:
8c:f1:03:a3:cd:e5:2e:15:9c:04:01:c0:3f:8f:3d:
4d:8a:d3:bc:f5:cd:01:93:19:cc:97:29:17:73:82:
93:8f:c9:58:ad:2d:45:c0:d5:6c:fc:37:28:ff:c1:
6a:25:64:8b:19:f1:52:2c:91:48:1d:5a:9f:87:45:
84:c5:b9:6a:f0:46:e0:2f:7f:55:7c:b5:fe:af:3c:
e9:34:7b:e6:78:95:6e:ac:08:c4:73:ba:11:e0:2d:
d1:d6:f5:3c:10:34:c7:d8:26:c6:6d:55:4d:af:e3:
aa:4b:79:4d:92:39:d4:eb:20:7e:ef:98:a3:fc:fc:
06:08:d3:a1:56:49:81:9a:c6:9f:cd:4d:d1:14:f1:
e4:50:63:73:e9:52:29:5e:3c:80:39:c8:5e:87:2f:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6C:B4:56:D3:C5:2F:56:56:53:95:94:F6:F6:21:2D:5D:22:AC:9F
X509v3 Authority Key Identifier:
keyid:E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/45CED05E2D2511EBAA63DE82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.28.106.0/24
Signature Algorithm: sha256WithRSAEncryption
73:9a:ea:97:6d:20:d9:4c:80:61:09:21:c7:a7:8b:5a:3b:6d:
3a:87:3d:bf:01:f0:2f:db:da:f2:aa:7f:96:2c:08:3f:14:f6:
09:4f:ff:70:36:45:95:3b:51:a1:51:24:c6:11:4d:fb:c6:f1:
ee:cc:ea:0e:cc:d9:75:98:0d:55:2b:35:6c:c6:fb:7a:5b:34:
36:98:03:0c:ad:ce:73:81:d7:8b:1f:90:29:9a:7f:4f:aa:fa:
83:22:ce:f3:8c:f6:9a:79:de:e9:5c:ca:c0:e0:ca:a0:be:9b:
81:51:b3:ca:46:0c:a9:47:b3:b6:d8:1c:f5:c3:12:92:19:ad:
28:e2:2b:72:87:b2:90:12:8e:bb:41:61:83:93:b8:1a:5e:e9:
ae:d1:4d:12:fa:54:6d:9f:fd:ad:10:2d:36:0f:bb:d6:66:0b:
b8:be:48:1f:3b:6a:c9:e3:52:6b:c4:57:99:bf:14:26:6b:56:
45:6f:00:10:cd:4d:93:c5:9e:2e:14:1f:f9:67:e8:6a:2d:4e:
44:ff:57:4c:70:be:5b:0e:69:da:21:c0:69:f0:5a:84:cb:80:
46:48:8b:6f:74:d8:51:bf:84:ba:07:73:88:b2:24:24:27:24:
de:f8:d8:3d:e2:a4:47:da:0a:f5:8d:ea:48:d9:d2:2a:2f:3d:
f8:c5:0c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:21:42 2026 by rpki-client