
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/62258D42C93A11EEA1A4CA4FC4F9AE02.roa
File: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (raw, json)
Hash identifier: Pn3t7Q2xH1MHU013jHPh+VPRQQXIgRH1a2aFUOJ0g9I=
Subject key identifier: 0D:D6:CF:E9:36:FB:72:E7:4C:BB:31:A3:27:9B:B8:D9:37:D3:51:7B
Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Certificate serial: 021E
Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/62258D42C93A11EEA1A4CA4FC4F9AE02.roa
Signing time: Wed 15 Jul 2026 04:29:55 +0000
ROA not before: Wed 15 Jul 2026 04:29:55 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 201755
IP address blocks: 43.245.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 542 (0x21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Validity
Not Before: Jul 15 04:29:55 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a570cc3-9430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:54:25:16:69:92:c7:33:49:c2:85:89:04:
88:c7:6f:9a:ba:92:00:1f:ae:ab:5e:cc:ce:dd:1f:
05:69:34:43:f5:12:a0:7a:ba:34:95:b7:45:62:9d:
a2:4b:89:3d:dc:56:ed:36:43:94:60:0b:eb:8a:14:
b4:77:46:b6:c4:95:c3:c4:a7:c0:40:e9:62:26:aa:
cc:4b:76:09:0e:25:3e:25:10:e8:c8:a3:a2:51:34:
35:fa:e6:12:16:f6:a2:87:2d:95:3d:26:f8:ec:d7:
18:6f:19:3d:03:e2:e7:9f:fb:60:c8:be:79:e2:a9:
93:9e:64:c3:a1:7f:ee:98:d3:69:5c:f5:de:35:51:
27:38:f3:ff:f7:46:18:db:56:d5:62:70:23:ca:fc:
9b:b7:1d:fc:be:0b:c3:77:86:41:49:e7:02:61:a3:
5e:69:30:c5:4f:89:29:61:94:9a:71:c5:71:a4:81:
74:e9:8f:e2:96:58:61:be:22:6d:19:9c:55:9e:4a:
fd:f4:7f:03:55:99:b0:58:17:9a:88:95:15:24:3b:
1b:59:69:ac:a8:27:3a:0b:7b:ea:2e:0e:ff:39:71:
13:3d:4d:4e:99:9f:ce:74:3c:90:98:3d:5f:11:f9:
e0:38:aa:7f:c3:da:97:3b:64:e3:09:a2:c0:e4:63:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D6:CF:E9:36:FB:72:E7:4C:BB:31:A3:27:9B:B8:D9:37:D3:51:7B
X509v3 Authority Key Identifier:
keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/62258D42C93A11EEA1A4CA4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.245.43.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:23:ae:51:1b:1c:32:1a:00:34:ab:90:94:b5:52:ef:97:8f:
78:b1:b2:01:58:9f:db:30:4c:08:88:2c:92:6e:64:58:c9:54:
60:3f:7c:75:8c:99:3b:e2:81:e2:56:da:0a:c1:5f:16:34:dd:
bb:31:1f:ad:94:6f:70:36:b7:ee:42:fa:fb:7e:3a:d1:a7:12:
2a:7c:c7:96:b3:42:80:02:9a:35:94:9b:ba:83:a6:1a:52:91:
72:d4:98:8b:b8:e6:c0:ce:0f:98:e8:35:40:46:b8:2a:cf:c3:
86:59:55:4e:b3:70:62:d0:99:e3:82:c2:cb:96:34:ed:88:ba:
eb:2f:09:a1:00:da:1e:07:0a:ca:86:a7:6e:68:c7:87:a1:58:
cf:85:fd:c0:74:11:d1:9a:f0:d3:dd:ad:10:64:d2:88:ea:77:
21:b4:d9:67:d0:3c:74:03:9b:1b:d1:77:59:1a:6f:30:7e:e8:
85:74:cc:95:2d:3b:94:92:4b:d3:51:e1:9f:00:4b:4a:32:d7:
68:ec:83:11:49:a1:a0:00:70:81:47:b6:6a:c8:4c:95:1c:26:
4d:46:ca:03:84:fe:e3:83:f0:ef:97:5e:b9:11:c1:9e:03:1a:
0d:c6:69:a4:3a:d3:c0:26:75:c8:5b:15:b6:43:9c:d2:c3:6c:
fc:01:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:26 2026 by rpki-client