
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/24F4E436A10211EABCED8740C4F9AE02.roa
File: 24F4E436A10211EABCED8740C4F9AE02.roa (raw, json)
Hash identifier: H9NP/VYQvQD8I9QwYD5I5jN2r70DSUl3MHJ3J25IGvM=
Subject key identifier: 7B:23:D4:A1:35:05:0B:69:04:0B:53:2D:E2:70:51:55:29:08:77:D7
Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Certificate serial: 0AAC
Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/24F4E436A10211EABCED8740C4F9AE02.roa
Signing time: Sat 02 May 2026 16:20:56 +0000
ROA not before: Sat 02 May 2026 16:20:56 +0000
ROA not after: Wed 02 Sep 2026 00:00:00 +0000
asID: 9988
IP address blocks: 45.41.100.0/22 maxlen: 24
45.41.104.0/21 maxlen: 24
45.41.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2732 (0xaac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Validity
Not Before: May 2 16:20:56 2026 GMT
Not After : Sep 2 00:00:00 2026 GMT
Subject: CN=69f62468-6ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:07:f4:4f:24:b4:3d:48:72:c5:b4:57:db:
89:33:f2:55:e0:9f:fe:c1:9d:2b:38:2a:5a:94:aa:
03:55:70:2a:73:d2:9b:86:aa:4f:49:e4:bd:1b:9b:
76:2a:7d:cf:87:e6:97:96:44:de:1f:f1:1e:27:c7:
c0:72:78:a3:a4:be:58:90:7e:f0:9e:11:86:54:00:
9a:2f:06:98:4f:7c:89:03:8a:98:48:03:02:d4:b9:
67:9a:5b:78:e9:ec:e0:e1:41:54:13:52:bd:70:9e:
06:df:7c:3f:87:d1:d1:7f:c2:3b:d7:f6:c0:76:b3:
eb:28:51:f5:23:65:61:ad:56:18:8d:ce:58:08:cd:
4d:f7:22:de:e3:88:12:4d:27:9a:61:b2:d2:88:81:
33:f1:b5:2c:f8:97:82:32:15:5b:0c:ef:7c:21:9b:
83:79:ed:92:ad:6b:c3:7c:a4:4d:28:85:95:9b:a4:
d2:10:cc:07:da:1f:e0:5f:9f:f3:9a:d0:29:a1:da:
69:3a:b4:af:89:7f:1d:c1:35:0d:e5:3a:6f:5c:0a:
b0:49:f4:2f:2e:d5:c7:7e:c3:0a:0b:b1:56:50:05:
3f:e2:bd:60:5e:c9:c8:ab:d8:67:bc:d2:b8:b0:04:
3e:7b:6c:52:4c:af:d7:4e:8f:46:bd:b7:79:48:06:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:23:D4:A1:35:05:0B:69:04:0B:53:2D:E2:70:51:55:29:08:77:D7
X509v3 Authority Key Identifier:
keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/24F4E436A10211EABCED8740C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.41.100.0-45.41.127.255
Signature Algorithm: sha256WithRSAEncryption
73:c8:f0:b3:46:1a:ae:44:a3:d4:5a:17:fa:a6:2d:50:f0:ee:
72:8a:d4:47:87:c9:47:0a:b6:cf:69:b7:1f:e3:59:38:3c:ae:
00:b9:40:89:1f:df:ca:2c:9b:da:e4:a3:a0:3f:31:97:f8:0d:
f6:91:14:cc:37:aa:3d:15:87:0c:f2:3f:89:18:a4:a2:d0:e2:
68:10:23:3e:9e:56:3c:86:5d:bf:18:56:58:34:ea:a1:ba:d0:
ee:3f:12:a4:6d:f2:9e:d8:e2:a2:3e:52:2f:ff:01:cf:0d:d9:
3e:52:b7:a1:b3:e7:a6:47:5e:7a:42:b9:ce:2f:08:fe:19:2d:
58:08:46:2c:0e:21:3f:f6:49:5b:53:95:66:23:76:40:dd:ba:
07:79:7b:fa:31:5c:72:81:d3:6e:6b:96:9f:c6:8b:8a:ad:f4:
3f:d6:04:b2:0e:25:5e:e4:56:d4:e8:be:ba:cb:47:fe:5f:97:
f5:d9:e1:41:12:71:d6:23:7f:21:76:85:56:71:64:f3:d0:c5:
b6:04:d6:6f:cc:4b:2f:4b:9a:e2:d3:55:98:a5:ae:09:71:cc:
66:53:2a:74:e8:af:72:83:95:94:e8:bb:ad:ae:f9:61:83:a7:
63:c2:1b:7b:58:4e:5a:cb:47:44:74:25:fb:11:a0:73:bd:07:
3f:1b:a5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:13 2026 by rpki-client