
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/75D91256B2F311EBB8A53526C4F9AE02.roa
File: 75D91256B2F311EBB8A53526C4F9AE02.roa (raw, json)
Hash identifier: 1ODBDIzmi7SobQEAchEIzRuNrlYcJERwh0/ZlLEoL8s=
Subject key identifier: BD:41:F4:60:F1:25:ED:7B:0E:65:39:D1:4C:17:B2:5E:F6:1B:73:01
Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Certificate serial: 0A45
Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/75D91256B2F311EBB8A53526C4F9AE02.roa
Signing time: Tue 22 Sep 2026 03:23:27 +0000
ROA not before: Tue 22 Sep 2026 03:23:27 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139750
IP address blocks: 49.128.64.0/24 maxlen: 24
49.128.66.0/24 maxlen: 24
49.128.68.0/24 maxlen: 24
49.128.81.0/24 maxlen: 24
49.128.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2629 (0xa45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Validity
Not Before: Sep 22 03:23:27 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6ab1f4af-bcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:41:d8:f2:22:0e:37:fc:3b:47:47:14:ec:cb:
3d:a2:e9:07:c9:79:28:6f:9e:5f:2d:3d:b7:84:b3:
fe:ac:e6:0c:30:70:c5:d1:5f:75:eb:a3:f0:11:6f:
63:04:25:16:d9:71:c2:8e:5f:d7:0e:04:f5:26:93:
56:c1:b0:ba:13:fe:cf:9b:fd:45:a9:7d:aa:b4:48:
04:32:b4:08:cd:ac:10:d3:70:ab:05:54:f2:03:b1:
06:8e:d9:aa:53:a4:7d:16:5c:c4:3e:f7:90:b8:10:
89:85:89:0d:04:fc:70:6b:bc:47:df:28:3b:01:e7:
22:8d:aa:cf:bd:09:d7:a4:43:18:e2:93:61:a1:0c:
41:79:93:99:70:51:2e:5f:80:30:04:82:ba:21:4b:
74:25:84:15:b3:f6:a3:c4:56:7c:bb:bc:5b:7f:4a:
43:1d:73:18:1e:26:6a:7e:dd:e2:f0:bf:e7:8a:97:
ad:9a:ac:a6:34:e5:ec:a0:7c:1a:23:6e:26:88:d6:
42:db:90:a7:2e:dc:6f:1b:6a:f0:3d:64:5a:87:4a:
a8:42:ce:90:5d:04:c4:b3:e7:f9:18:5b:bd:6c:72:
84:93:ff:38:14:16:42:38:5d:4e:0c:b1:3d:40:64:
47:e5:27:c9:21:1c:ae:4d:1d:b3:47:04:af:9b:2a:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:41:F4:60:F1:25:ED:7B:0E:65:39:D1:4C:17:B2:5E:F6:1B:73:01
X509v3 Authority Key Identifier:
keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/75D91256B2F311EBB8A53526C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.128.64.0/24
49.128.66.0/24
49.128.68.0/24
49.128.81.0/24
49.128.91.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e2:07:3b:a2:4e:99:92:e4:13:8c:21:25:03:74:d7:55:e8:
d7:d0:0c:7c:35:4d:2c:a2:13:e8:88:65:e0:7a:c7:c2:fe:ab:
c3:09:75:dd:1e:d4:fb:49:7f:b6:79:ff:7a:8f:d2:d2:a3:dd:
50:26:d9:a3:1e:19:26:bf:9a:9c:37:17:07:42:9d:0a:18:8d:
90:19:95:08:3a:93:c9:0c:82:f8:81:88:c7:3e:23:26:3b:3b:
97:88:e5:e2:97:40:68:f1:ac:92:d9:1b:a7:bb:f3:b0:47:0b:
ee:69:65:c2:89:e0:3b:59:d3:73:84:45:d3:ae:f5:5c:0c:f6:
a2:58:13:b8:21:80:22:40:72:fa:a4:9b:42:ad:fc:66:c7:16:
2c:7a:7b:a9:13:05:e3:96:b5:c0:45:37:0f:f8:c6:7b:48:e6:
ca:4d:c9:ef:3a:e2:ef:68:2f:f6:8d:63:ff:12:d0:ba:99:60:
eb:a9:e7:68:68:35:d1:a7:33:d4:25:7c:58:16:b4:41:ed:20:
1d:ce:94:bd:65:43:75:3e:fa:54:18:c0:3e:64:d9:73:0c:0e:
11:f9:22:17:d7:d3:70:13:d2:e6:31:72:3b:5d:32:cb:aa:5a:
52:7b:b6:f1:a3:54:62:26:3d:e9:f8:57:96:31:8b:bf:ef:6a:
8e:83:e8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:33:41 2026 by rpki-client