
$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/95D40AE2497311EAB4873B63C4F9AE02.roa
File: 95D40AE2497311EAB4873B63C4F9AE02.roa (raw, json)
Hash identifier: wz+94DPGZY+ZVglM8IK7IgXcRuSuHNYaIile9ykwYR8=
Subject key identifier: 14:FE:1B:E9:35:0B:3B:B2:71:A5:88:A1:EA:D9:08:84:5C:0C:7B:15
Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
Certificate serial: 1236
Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/95D40AE2497311EAB4873B63C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:34:06 +0000
ROA not before: Fri 06 Jun 2025 17:30:01 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 45.119.6.0/23 maxlen: 23
45.119.6.0/24 maxlen: 24
45.119.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl
rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4662 (0x1236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00
Validity
Not Before: Jun 6 17:30:01 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a4788e-c57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5a:d2:49:33:15:29:b9:8e:18:e5:d2:ff:4b:
43:10:32:94:f3:c0:9e:42:8d:34:5e:74:dc:28:ad:
96:7d:e9:7d:21:35:5b:9d:77:b3:7a:e8:11:32:f4:
a3:ba:f2:07:16:6c:b2:2d:85:17:b7:59:fa:62:78:
07:ce:eb:e5:19:97:18:3f:94:5e:76:18:17:ba:96:
d2:dc:b3:60:2e:e9:57:84:46:50:8d:87:6b:9f:0a:
41:f0:f7:e6:de:48:93:f1:8f:dd:d4:36:d3:82:2f:
b1:10:8b:64:31:56:c6:b9:93:47:72:4a:a8:bb:5e:
18:6f:dc:70:29:b1:1b:e9:a0:6f:d0:bc:84:a5:1b:
24:4c:6f:5f:37:02:4c:6f:5f:28:b7:9c:b7:38:2f:
66:00:96:b4:57:be:89:9a:bb:2a:f4:ad:e8:ed:7a:
88:3a:61:e0:dd:60:ad:64:5a:ad:ed:b9:3f:59:21:
9e:5f:b1:74:cf:17:c3:1b:7f:7d:fa:62:90:ff:15:
b3:1d:64:25:83:c9:7e:2e:59:0d:fa:ba:a0:94:c2:
bc:10:1b:15:d5:6f:a4:09:38:ba:4a:57:3e:48:8b:
63:c8:64:3c:b9:f5:23:0b:41:e4:e8:01:4b:70:51:
04:60:0d:46:d2:96:99:48:dd:5b:d8:fd:b9:98:c3:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FE:1B:E9:35:0B:3B:B2:71:A5:88:A1:EA:D9:08:84:5C:0C:7B:15
X509v3 Authority Key Identifier:
keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/95D40AE2497311EAB4873B63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.119.6.0/23
Signature Algorithm: sha256WithRSAEncryption
10:78:03:bf:29:25:96:83:42:76:f9:dc:ed:11:9a:47:c2:a8:
f7:c6:e7:54:8a:84:0e:32:c9:e9:fb:86:71:eb:58:e9:6c:f5:
ac:91:b3:81:52:25:89:b4:d1:b1:2f:56:3c:dc:dd:95:f8:72:
92:18:bb:32:d4:43:1f:85:d6:2b:15:81:cb:14:9b:48:16:ba:
fd:10:a3:11:6b:90:9c:62:5d:25:8d:4e:80:ee:87:bc:a1:2f:
d5:ea:cf:de:f1:32:4b:d3:55:20:bb:15:49:b0:d5:2d:b3:68:
db:2a:1c:4b:fd:8c:55:19:eb:0b:b5:23:cf:ab:9d:6d:e5:23:
84:ac:e4:bf:86:2c:0e:3d:c1:e4:18:c3:14:f5:b3:3d:ed:a2:
53:39:fe:4e:4c:fc:4d:ca:90:85:87:cf:55:ba:62:62:16:e1:
91:22:0b:59:d3:fb:5b:4e:ab:1b:2c:8d:7a:63:5e:17:55:ad:
c2:d6:ad:0a:a3:4b:26:a9:2d:62:df:a5:22:5c:7d:9c:75:7e:
6e:6b:b2:33:a7:bc:ad:36:1b:a4:97:12:1b:c6:2c:9a:aa:cf:
95:ad:71:2c:09:b7:28:57:f4:e2:91:6c:29:eb:25:49:33:d0:
36:de:c0:a5:df:a4:01:de:09:79:51:5a:91:86:3c:d2:6a:84:
6a:f9:ab:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:38:39 2026 by rpki-client