
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/5280D466DDA311ECA6964F20C4F9AE02.roa
File: 5280D466DDA311ECA6964F20C4F9AE02.roa (raw, json)
Hash identifier: UWr4jClnskvEkH2pyPlCLtQv8iZhDdQZrPSFj3GjKQU=
Subject key identifier: 74:01:B7:78:B2:6B:B5:E8:84:FA:EB:72:65:E8:87:1C:EB:AE:8D:F0
Certificate issuer: /CN=A914A64F/serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Certificate serial: 099A
Authority key identifier: D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/5280D466DDA311ECA6964F20C4F9AE02.roa
Signing time: Wed 22 Jul 2026 21:21:10 +0000
ROA not before: Wed 22 Jul 2026 21:21:10 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 132952
IP address blocks: 45.249.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:21:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2458 (0x99a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A64F, serialNumber=D4D7DD25C713E7A9554CF352D932BF80DA652DE4
Validity
Not Before: Jul 22 21:21:10 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a613446-2339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:52:74:38:b4:06:39:fd:76:7f:29:a5:f5:
da:73:a6:c4:07:eb:28:64:da:4e:48:6c:43:e2:dc:
34:16:86:7d:f7:ea:a2:78:22:10:02:61:bb:23:0c:
e9:6e:47:c1:04:ab:52:dd:80:c0:fb:14:21:2b:42:
d2:82:cf:fa:18:79:a8:4a:6a:e6:3e:69:66:20:6d:
8e:db:6e:83:29:3c:7c:5c:c7:e9:9b:2e:56:24:25:
9e:36:4b:d6:77:82:3d:6d:71:76:d8:2c:74:0e:4b:
c1:32:98:aa:1b:9d:00:94:4d:d0:52:06:73:36:cf:
9c:92:29:17:7a:3a:13:ab:57:13:c8:5f:45:99:8d:
6e:e4:82:a1:d7:a0:13:f8:1a:25:e5:3e:23:aa:c8:
77:18:78:ef:7b:48:6c:46:fc:97:e8:e4:2e:7e:69:
d3:17:95:59:1a:41:72:8e:60:7a:c0:50:0b:7d:ce:
59:2a:69:96:2a:ba:72:d4:a8:b6:f8:99:d5:e3:f9:
10:86:35:29:87:a6:71:c3:3d:c5:dd:10:85:09:81:
97:28:cd:24:b2:d7:2d:73:00:87:90:a8:b7:a0:bd:
3c:66:b4:db:20:4d:ea:e6:db:18:3d:43:33:7b:62:
5b:bd:30:3d:fa:7d:33:fe:42:56:81:1f:08:d0:74:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:01:B7:78:B2:6B:B5:E8:84:FA:EB:72:65:E8:87:1C:EB:AE:8D:F0
X509v3 Authority Key Identifier:
keyid:D4:D7:DD:25:C7:13:E7:A9:55:4C:F3:52:D9:32:BF:80:DA:65:2D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/1NfdJccT56lVTPNS2TK_gNplLeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NfdJccT56lVTPNS2TK_gNplLeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A64F/3C9E2B5CC01411EA81689065C4F9AE02/5280D466DDA311ECA6964F20C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.249.52.0/23
Signature Algorithm: sha256WithRSAEncryption
53:1f:ea:e5:5b:9e:0f:1b:86:dc:6c:99:b9:dd:84:b4:77:a3:
d1:06:c5:85:c0:6d:dc:85:84:82:3a:15:b6:08:33:a7:cf:4c:
3a:c9:52:38:1d:81:21:0f:95:ca:d3:15:34:bc:37:12:2f:3f:
a2:4a:fc:83:27:74:05:41:bf:a6:e0:03:23:0b:02:c8:fb:9a:
95:ae:0c:74:59:c2:ef:dc:a1:24:30:c9:a2:e7:2a:24:fb:95:
c6:fc:1b:d4:aa:5a:3f:1e:31:47:29:6a:d5:f5:48:39:d6:ff:
f5:96:40:5f:ea:53:2e:ee:fb:c5:9a:43:13:fb:3e:cd:23:0e:
f3:48:73:1a:2e:4f:b1:3e:4f:44:b0:99:62:fc:88:f3:bf:25:
64:32:e1:f1:5c:0a:65:50:63:4d:07:69:3a:98:36:6f:2f:c9:
25:70:28:48:2e:75:ce:b1:0f:84:49:a5:9f:4f:25:cc:84:08:
73:88:79:39:80:2e:ae:c6:1d:c8:ed:1e:4b:fb:41:bf:84:69:
b6:fe:0e:96:18:5e:43:7d:73:40:2d:ca:25:02:58:3e:23:fa:
ed:3c:06:a6:cd:b1:78:8a:19:d6:d6:fb:18:7b:c1:90:36:c4:
22:4c:48:6e:05:63:4f:aa:be:28:e6:3e:80:4c:2d:34:63:12:
ec:70:bb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:23 2026 by rpki-client