
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0F0DB8A2C80411ECBA7BB174C4F9AE02.roa
File: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (raw, json)
Hash identifier: MvvBMJL+ARU0EoVAzOHVsomLSG69M9mjf1RtpPa9ecA=
Subject key identifier: BA:23:58:56:51:20:ED:B9:2F:1F:59:09:80:41:BB:18:B6:F4:39:C1
Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial: 0404
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0F0DB8A2C80411ECBA7BB174C4F9AE02.roa
Signing time: Tue 05 May 2026 01:31:00 +0000
ROA not before: Tue 05 May 2026 01:31:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134451
IP address blocks: 45.114.118.0/24 maxlen: 24
2402:2f80:5::/48 maxlen: 48
2402:2f80:6::/48 maxlen: 48
2402:2f80:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028 (0x404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Validity
Not Before: May 5 01:31:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f94854-dce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:18:15:66:22:2e:60:14:f8:e3:d5:9b:22:
e6:c9:34:49:38:e9:7f:3e:96:56:dc:34:b1:e4:f0:
e9:e8:ec:5e:4e:ee:3f:1c:84:5d:2d:5c:29:b8:77:
58:a5:8d:1f:87:51:3b:b7:80:b9:1d:f2:38:28:44:
39:9d:ea:cc:b5:1b:e5:2d:29:70:ee:cb:d1:74:4e:
04:7b:78:d6:4a:aa:c7:4e:66:41:3e:d0:9d:53:e4:
c3:f5:6c:3b:c1:bf:b8:45:1e:4d:1e:0e:35:34:ae:
9d:f3:4f:b3:b5:97:63:ee:58:46:3f:74:b4:21:c8:
7c:7a:a2:a9:6e:c3:ad:87:e6:53:bf:b8:b6:4c:02:
4f:ef:1b:4d:01:e6:f9:b8:07:91:f0:fd:8b:63:08:
10:0d:11:67:64:bd:2e:71:85:30:ad:5e:3f:03:b6:
e7:12:51:db:a2:4c:1b:f9:fd:c0:39:14:ab:66:95:
34:0d:23:e2:15:69:8f:c4:7d:76:ad:9f:ff:a2:83:
3c:44:43:45:a9:fe:64:6e:4b:a0:70:1e:fe:58:33:
2b:8f:54:a4:fd:e3:0e:02:8e:5a:5e:72:76:79:d6:
17:51:7d:d7:c4:67:b9:9e:b8:31:e9:f2:40:1f:76:
ee:9c:ee:07:4d:a2:37:4d:76:ab:05:04:ca:1c:0f:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:23:58:56:51:20:ED:B9:2F:1F:59:09:80:41:BB:18:B6:F4:39:C1
X509v3 Authority Key Identifier:
keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/0F0DB8A2C80411ECBA7BB174C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.114.118.0/24
IPv6:
2402:2f80:5::-2402:2f80:7:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
74:e2:39:3c:cc:b2:cf:29:bb:94:d0:7d:00:bb:b0:ec:3e:84:
36:2e:58:29:af:01:2b:6f:01:43:9f:1d:41:67:72:51:46:1e:
b2:86:90:a3:77:a3:59:49:23:26:e5:92:84:1b:fb:7b:6e:8b:
e7:17:27:c4:62:04:0d:ad:a6:9a:00:6a:70:47:40:49:98:a9:
5d:37:c0:1a:8d:3b:6f:4e:bd:df:03:47:ca:3e:4b:1b:ac:47:
bd:c3:3a:17:b5:2e:0a:a4:73:53:90:60:83:77:bd:9a:ba:29:
2d:34:dd:8f:a1:b0:f9:4e:80:7c:2a:b6:dd:26:78:b4:c3:b3:
35:f3:d9:e8:a5:4a:0e:ea:d9:2a:46:ca:d6:21:fb:4a:45:31:
3b:4c:35:3d:e6:92:85:15:e1:df:2d:91:66:e8:cd:c7:ce:7b:
6b:1e:42:de:cf:6c:31:31:bc:46:54:19:4b:36:eb:db:44:49:
54:d1:2e:39:96:c1:75:bd:09:ff:1c:d5:4e:a9:fa:2c:d7:3f:
ea:31:8a:09:64:59:c0:2a:34:f9:6c:49:44:07:2e:9a:a0:a6:
a2:2f:d8:90:24:48:a8:fa:89:13:68:83:77:a4:90:65:6e:3a:
a5:0f:76:67:5b:39:10:aa:23:6e:4f:eb:5c:ae:b1:ba:dc:1a:
52:27:67:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:57:46 2026 by rpki-client