
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/F5FB1528251811F19BF603D3C0833773.roa
File: F5FB1528251811F19BF603D3C0833773.roa (raw, json)
Hash identifier: 8JF1Xwm4ghBxpQhLmUBlUSU0yke5/SmVI3FtoYK94Ho=
Subject key identifier: 58:50:7F:5C:91:39:A3:E3:57:A2:4C:27:54:38:E5:02:4B:40:6F:82
Certificate issuer: /CN=A9145CAB/serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98
Certificate serial: 09
Authority key identifier: 89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/F5FB1528251811F19BF603D3C0833773.roa
Signing time: Sat 21 Mar 2026 11:28:33 +0000
ROA not before: Sat 21 Mar 2026 11:28:33 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133139
IP address blocks: 43.246.184.0/24 maxlen: 24
43.246.185.0/24 maxlen: 24
43.246.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl
rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145CAB, serialNumber=8963AA8A1B5F9487E226D246F0E44C960C8F2A98
Validity
Not Before: Mar 21 11:28:33 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69be80e1-e447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:7f:f8:30:2a:02:d0:2e:12:bc:a7:e6:94:
43:1b:d2:23:4b:3a:0c:c4:44:04:1c:e9:e7:99:34:
66:b7:d1:83:21:66:ce:73:53:e2:b6:64:1c:29:86:
e8:69:ab:ef:a8:70:e6:65:d1:0b:d7:49:b8:5a:4e:
0f:d0:0f:47:e4:ac:78:6a:f3:56:db:2a:9d:94:66:
7e:99:ef:da:1c:04:cb:fb:1f:2b:58:c2:cf:63:68:
5a:76:35:88:d5:d3:1d:71:fc:78:01:0a:0b:c0:53:
73:19:d4:87:fe:d7:16:6a:07:66:01:ae:0e:61:79:
55:26:08:d5:97:d0:50:85:46:b8:09:b2:ad:1e:62:
ca:ee:6b:d3:b4:01:2c:e5:d3:f6:e0:41:93:bd:38:
f2:f5:78:83:97:ea:ef:75:11:ce:aa:02:c8:b8:f1:
d0:b0:d1:19:39:b0:b6:b6:9a:6d:e3:86:81:92:8f:
a1:7e:05:59:43:61:a2:ca:28:68:69:97:92:74:20:
f2:51:43:b0:2e:29:65:6a:af:12:5a:1a:d1:96:73:
6f:e5:95:f6:df:06:5d:e9:86:8a:02:0e:9d:0e:ea:
51:79:cd:a8:a6:51:0e:60:37:fe:cc:8d:59:04:a3:
c0:45:2a:ad:98:83:f2:db:6b:fa:ec:1f:68:ad:31:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:50:7F:5C:91:39:A3:E3:57:A2:4C:27:54:38:E5:02:4B:40:6F:82
X509v3 Authority Key Identifier:
keyid:89:63:AA:8A:1B:5F:94:87:E2:26:D2:46:F0:E4:4C:96:0C:8F:2A:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/iWOqihtflIfiJtJG8ORMlgyPKpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWOqihtflIfiJtJG8ORMlgyPKpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CAB/2E5C45C424CC11F19ADBA405A8833773/F5FB1528251811F19BF603D3C0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.246.184.0-43.246.186.255
Signature Algorithm: sha256WithRSAEncryption
93:ec:9a:3b:0f:7a:7a:6a:ec:8f:be:71:fb:1c:07:3f:8b:6e:
1a:b2:ef:26:71:01:52:50:53:0c:61:c6:05:cb:82:4c:6e:38:
23:f4:dd:b4:0b:9b:7d:cc:21:d6:c6:4e:79:26:26:b4:b6:2e:
2a:5c:de:d3:5a:f8:11:fa:f1:dd:45:c9:19:19:87:dd:52:e5:
50:93:6d:13:d7:22:27:45:37:ab:8a:8f:a4:a1:04:50:1f:d4:
e5:d1:25:1a:91:57:44:15:28:96:64:41:77:4a:7d:58:5e:f2:
7d:d4:bd:68:aa:ee:09:48:a3:e6:c2:38:6c:c8:1e:13:93:1a:
63:74:d0:32:94:91:5c:0e:a2:72:83:50:93:ab:51:95:a4:cd:
cd:62:4d:bd:e1:18:22:73:44:f0:98:e5:98:65:6e:1b:27:fe:
9a:67:ce:a4:c2:55:15:1b:b8:5f:b0:d0:ca:67:ec:7d:3d:00:
f8:76:f2:04:3e:44:a5:a2:2a:d6:f4:09:d6:a7:25:e8:92:43:
67:48:e7:6e:63:d6:7c:1f:38:95:80:3d:a2:bf:f2:65:a9:54:
bc:0e:b5:4a:07:9a:f9:cf:28:e7:33:16:c9:55:db:8c:33:d8:
86:36:a3:4d:36:f1:cc:82:5f:4a:54:78:7a:f0:05:f2:eb:fe:
12:78:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:35:48 2026 by rpki-client