
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/754A1888490D11ED95C7C86EC4F9AE02.roa
File: 754A1888490D11ED95C7C86EC4F9AE02.roa (raw, json)
Hash identifier: Qahj6ijZlV0ENHSi7W3OwZGiJhU6W6dxMtqWIMdxIl0=
Subject key identifier: EB:AB:64:E8:86:ED:49:C7:DE:99:08:51:FC:95:7D:98:4E:F6:14:0A
Certificate issuer: /CN=A91DC009/serialNumber=42275590934B31E39D81DDBC9C09856B7F4E5884
Certificate serial: 027F
Authority key identifier: 42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/754A1888490D11ED95C7C86EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:09:44 +0000
ROA not before: Wed 29 Oct 2025 01:46:00 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 55923
IP address blocks: 175.45.144.0/22 maxlen: 22
175.45.144.0/24 maxlen: 24
175.45.145.0/24 maxlen: 24
175.45.146.0/24 maxlen: 24
175.45.147.0/24 maxlen: 24
175.45.152.0/22 maxlen: 22
175.45.152.0/24 maxlen: 24
175.45.154.0/24 maxlen: 24
175.45.155.0/24 maxlen: 24
175.45.156.0/22 maxlen: 22
175.45.156.0/24 maxlen: 24
175.45.157.0/24 maxlen: 24
175.45.158.0/24 maxlen: 24
175.45.159.0/24 maxlen: 24
180.178.64.0/22 maxlen: 22
180.178.64.0/24 maxlen: 24
180.178.65.0/24 maxlen: 24
180.178.66.0/24 maxlen: 24
180.178.67.0/24 maxlen: 24
202.8.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.crl
rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:11:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC009, serialNumber=42275590934B31E39D81DDBC9C09856B7F4E5884
Validity
Not Before: Oct 29 01:46:00 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a42c88-1d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:df:35:eb:8b:b3:6e:c6:71:d6:c0:9c:7d:
9a:c1:50:d6:c6:c2:70:d2:f8:a1:be:40:25:d6:ce:
5d:e1:7e:42:b4:91:14:e1:b0:ea:b5:49:85:6b:81:
10:c9:f3:9a:72:1b:b2:26:ee:b2:92:44:c5:d5:cb:
5d:1b:e8:2a:39:63:61:3d:d3:c4:21:36:9d:47:3f:
0d:6d:e4:3d:9e:f0:77:ee:6c:27:e1:cb:f9:08:e3:
95:80:1f:f4:d8:0a:4a:78:79:cb:77:56:f0:6e:55:
4e:c5:c6:4c:99:85:67:6b:6e:56:a3:af:60:e9:af:
09:31:4b:a0:35:54:0f:21:6b:90:80:80:6f:b2:93:
21:a3:b0:e3:e2:7e:59:9d:ac:1e:2c:bc:4c:64:5b:
ed:db:d6:cd:a7:1d:a1:50:e1:c1:13:0b:dd:62:e8:
31:a2:75:92:7f:42:0d:26:3a:ad:e4:0a:99:44:30:
b9:b1:64:d7:2e:e7:30:7b:a9:4e:ae:d5:ea:79:1e:
51:b2:d6:50:0f:2b:16:b9:95:e4:ac:eb:e4:1e:7f:
f5:c7:a3:02:c5:77:c6:49:41:2a:47:25:a0:05:35:
4f:d3:4c:0b:db:77:d0:58:d4:9c:c6:f1:50:06:a7:
5d:a1:7d:01:66:80:97:13:ed:d2:33:fb:cb:cf:e2:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AB:64:E8:86:ED:49:C7:DE:99:08:51:FC:95:7D:98:4E:F6:14:0A
X509v3 Authority Key Identifier:
keyid:42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/754A1888490D11ED95C7C86EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
175.45.144.0/22
175.45.152.0/21
180.178.64.0/22
202.8.76.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:48:e2:5f:74:36:3d:73:61:06:d5:31:92:4e:bf:70:99:f5:
ce:35:3c:e3:3e:bf:e3:6b:7b:e2:82:ed:ab:fa:a7:30:c0:84:
96:45:ea:e5:d1:39:0f:df:0e:86:93:6d:de:28:32:da:a0:1c:
22:06:3e:16:52:d5:cf:f6:a8:bb:b0:21:b8:b6:6d:87:30:39:
f6:0c:ae:0e:77:77:d9:00:8a:41:9c:9b:09:bd:a7:1f:60:d8:
5d:06:41:1f:55:66:14:29:40:c2:be:1f:64:f5:c0:4b:78:89:
80:35:43:03:49:6f:d9:7f:8a:7f:35:c9:3a:8d:f0:6c:50:27:
55:66:55:9c:c4:b5:0f:e9:49:86:73:89:00:f8:dc:c1:a4:1e:
f3:6e:c2:8b:6d:ab:9d:ac:92:d7:eb:0b:62:1c:98:eb:3e:e6:
ad:a3:74:15:97:78:61:11:de:ae:71:5e:f8:8d:06:68:84:55:
e4:51:d8:65:55:09:59:90:7d:29:f5:c3:ca:de:ab:10:e5:84:
c0:00:1f:d1:13:8a:13:2e:90:65:60:80:9f:d2:67:86:8c:3c:
c8:84:52:bb:20:b9:b7:8a:c3:cc:ef:5d:de:7e:d1:38:18:98:
5d:81:ab:b2:21:e1:b0:4d:b0:8d:c2:e2:5b:3b:3f:84:08:62:
b2:83:91:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:18 2026 by rpki-client