
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/D42F5C768D6C11F18EE805546F11F970.roa
File: D42F5C768D6C11F18EE805546F11F970.roa (raw, json)
Hash identifier: Sz/65WULpY02tU1/WSVRdUsQAN8B0cHXUocGj84jNV8=
Subject key identifier: C3:8F:A7:67:89:01:80:74:1C:7E:55:04:34:9F:D5:6A:50:B0:C9:B9
Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Certificate serial: 0256
Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/D42F5C768D6C11F18EE805546F11F970.roa
Signing time: Sat 01 Aug 2026 05:49:58 +0000
ROA not before: Sat 01 Aug 2026 05:49:58 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 151633
IP address blocks: 45.249.226.0/24 maxlen: 29
2401:e560::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl
rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Validity
Not Before: Aug 1 05:49:58 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a6d8906-1238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b9:02:45:5b:91:58:bb:17:e0:a1:12:3b:f6:
73:b3:f6:6f:dc:ce:84:a6:77:16:f5:de:14:a5:b6:
94:39:b9:51:ed:ea:09:2d:b3:ba:48:71:71:7f:53:
ea:d5:c7:d9:ae:9b:2a:e6:17:25:9e:bc:b0:c3:a4:
31:05:6f:90:0e:e0:62:94:30:eb:a6:9b:87:04:24:
72:11:b9:51:4f:90:d8:34:3c:6f:82:bf:98:0e:97:
b0:8f:b9:3d:02:71:ee:1e:73:01:7c:e9:9d:60:1d:
4b:e7:f9:76:f5:ce:06:65:59:75:c9:3f:6b:de:58:
2e:fe:c3:73:d7:2e:52:86:d2:84:a0:c6:71:e8:e7:
27:fa:3e:9c:98:7f:8c:ff:1a:56:30:4b:8c:67:c1:
17:b9:be:11:58:27:50:30:a6:9f:9e:22:1a:31:24:
ef:25:bc:b9:fe:f5:e9:e6:98:59:02:57:ba:40:05:
7a:b0:4a:f3:f3:54:ad:ad:d1:61:4f:06:44:aa:61:
a4:30:db:2c:43:7d:bf:7a:4d:ee:16:97:79:e2:6a:
49:f6:76:34:8e:dc:9d:41:54:42:50:7b:40:fe:95:
a3:52:17:b9:01:21:e5:c4:7f:e6:e0:c9:5a:bf:12:
ff:78:f2:f1:40:8c:62:c9:e1:ef:21:dc:b1:e3:72:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8F:A7:67:89:01:80:74:1C:7E:55:04:34:9F:D5:6A:50:B0:C9:B9
X509v3 Authority Key Identifier:
keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/D42F5C768D6C11F18EE805546F11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
45.249.226.0/24
IPv6:
2401:e560::/32
Signature Algorithm: sha256WithRSAEncryption
ad:08:e5:99:a5:28:60:80:2b:60:77:ea:b0:c4:50:2a:6b:f4:
ce:0c:c5:c9:5d:76:24:00:ee:50:ab:f0:49:75:7e:b3:11:3f:
5d:b9:1d:cd:0d:76:9e:02:a7:06:2c:bc:7b:32:68:42:bc:95:
06:d3:38:1a:b3:3b:0a:1f:23:ef:d3:b4:95:8d:9d:f8:cb:5b:
97:a7:0d:de:20:8d:07:36:f6:57:c0:1c:fb:6d:08:fd:a1:5f:
44:42:5b:3a:5d:95:56:c1:8a:ac:57:93:f8:64:02:6f:56:b7:
3e:60:bf:ce:10:8f:a1:33:83:1b:d1:2d:ec:ea:63:dd:8a:86:
c7:25:ca:09:d1:fe:55:81:27:51:be:30:fd:d5:1a:8c:65:cf:
df:7c:23:3d:7b:5f:3d:d3:0d:a1:a5:5e:f2:82:b8:01:db:5b:
e2:ec:54:30:46:f6:48:4f:ee:7d:65:1c:d7:a4:b7:e7:1f:81:
78:7a:ea:e8:e5:ec:d4:8a:da:26:9b:7a:8c:d4:8d:cb:a8:9d:
f0:c1:b4:fe:69:c9:9e:c4:a3:95:fc:4f:f9:87:ba:d2:ec:5b:
23:00:64:a8:ca:d9:f1:7f:72:12:1a:7c:f4:8f:e3:ec:c5:5b:
48:b0:92:40:f8:8b:0d:c0:aa:f7:0b:2e:4e:0b:47:9e:8a:5e:
aa:a7:d1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:36:15 2026 by rpki-client