
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/A76B2A22CCD111F19EE8DE612E66CEF9.roa
File: A76B2A22CCD111F19EE8DE612E66CEF9.roa (raw, json)
Hash identifier: cUUd2KjLGHA+W3KxJnP+QMEumEv7RS6hQc5ZjO69Grw=
Subject key identifier: 1B:6A:DE:52:14:BB:74:89:B6:4F:3C:2B:C3:63:1B:98:DF:09:8E:E6
Certificate issuer: /CN=A912598D/serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
Certificate serial: BB
Authority key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/A76B2A22CCD111F19EE8DE612E66CEF9.roa
Signing time: Tue 20 Oct 2026 22:00:26 +0000
ROA not before: Tue 20 Oct 2026 22:00:26 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9931
IP address blocks: 45.157.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl
rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
Validity
Not Before: Oct 20 22:00:26 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6ad7e479-7ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:5f:47:3b:14:0f:42:b4:96:83:a2:f6:b1:
ec:2a:d7:b8:26:f0:da:43:f6:29:bd:0d:a9:23:57:
8b:e3:bf:9c:01:81:92:9b:af:d2:b7:b8:ad:cc:d3:
2e:31:17:28:5d:eb:22:b1:7b:7d:aa:6e:e2:f9:00:
d0:58:47:35:34:48:4c:fc:fe:a6:1e:31:8b:99:79:
c3:c0:b4:9b:d5:d1:99:1b:2b:82:ed:b7:7f:6e:2d:
66:16:78:29:99:e8:56:bb:00:43:26:75:bc:23:3e:
a9:67:92:af:88:4d:5b:47:68:a6:e3:93:c6:9a:9a:
94:05:a5:b2:4f:18:28:dd:1a:85:41:fd:2c:d0:64:
ac:d6:f5:f0:57:0d:dc:0f:e4:80:52:cf:42:ce:14:
8e:4a:fd:ae:ec:ab:9e:7a:a9:d0:b3:6c:a0:54:06:
7a:aa:bb:fc:2d:b5:e0:67:2c:aa:7f:d3:ee:bb:80:
fa:dd:ab:ec:fb:65:e4:64:df:d6:16:b0:41:aa:79:
4f:65:4c:1a:61:a3:63:16:b9:43:a3:7b:63:5d:6d:
af:ce:e5:25:96:c2:bc:cf:b4:53:23:c2:4f:e3:73:
dd:06:8f:9c:25:72:8d:9e:41:43:72:0a:aa:f0:d7:
c8:34:64:61:dd:05:09:f2:ca:e6:06:88:e9:7e:f7:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6A:DE:52:14:BB:74:89:B6:4F:3C:2B:C3:63:1B:98:DF:09:8E:E6
X509v3 Authority Key Identifier:
keyid:1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/A76B2A22CCD111F19EE8DE612E66CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
45.157.88.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:c8:af:02:81:7e:41:0a:7a:b0:15:bb:90:58:e2:b9:bf:63:
e0:b0:5a:96:86:94:0d:42:fd:66:d7:02:14:3d:bb:2b:48:7e:
c0:12:8a:cd:fd:e8:f8:01:17:94:94:67:55:b3:8b:63:53:a8:
af:01:a2:a7:72:87:aa:58:51:e4:03:98:22:33:86:d3:2e:81:
e1:46:cf:bd:19:7f:44:36:eb:b3:60:7c:d4:32:d5:5c:cd:96:
13:dd:2a:3a:75:ed:01:a9:ef:ef:31:86:ef:ad:c6:32:b0:97:
4b:2f:90:d0:44:9f:0a:12:22:6d:25:6d:e4:60:56:ba:36:fd:
80:e9:1d:0b:16:6b:f4:e7:35:ea:c9:f2:67:b1:39:d6:95:97:
59:6c:26:26:36:9f:21:41:ef:c4:70:97:28:2e:cf:33:21:9a:
8f:f3:a9:da:05:a7:1b:c8:e3:f0:7f:38:48:24:5f:09:ba:d9:
4b:4a:61:26:0b:a2:99:bc:8a:21:8d:c2:d7:7a:f8:29:ea:27:
d8:89:3c:9d:3c:bd:3c:b0:69:0c:6e:88:0e:2f:67:05:cf:5b:
ff:e9:ff:4d:d5:06:6a:65:6b:8c:16:7e:11:f5:a6:cf:60:0f:
64:b5:ba:c4:c7:51:9f:35:73:67:f2:c0:b3:b2:1f:55:8d:8d:
3f:76:aa:10
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU5OEQxMTAvBgNVBAUTKDFBNUIwMDU5N0M4RDdCNjFGQkJFRkVDNUI5NDRGRTZG
OUM2M0UyMjAwHhcNMjYxMDIwMjIwMDI2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQ3ZTQ3OS03ZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2JRfRzsUD0K0loOi9rHsKte4JvDaQ/YpvQ2pI1eL47+cAYGSm6/St7itzNMu
MRcoXesisXt9qm7i+QDQWEc1NEhM/P6mHjGLmXnDwLSb1dGZGyuC7bd/bi1mFngp
mehWuwBDJnW8Iz6pZ5KviE1bR2im45PGmpqUBaWyTxgo3RqFQf0s0GSs1vXwVw3c
D+SAUs9CzhSOSv2u7KueeqnQs2ygVAZ6qrv8LbXgZyyqf9Puu4D63avs+2XkZN/W
FrBBqnlPZUwaYaNjFrlDo3tjXW2vzuUllsK8z7RTI8JP43PdBo+cJXKNnkFDcgqq
8NfINGRh3QUJ8srmBojpfvdGLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBtq3lIU
u3SJtk88K8NjG5jfCY7mMB8GA1UdIwQYMBaAFBpbAFl8jXth+77+xblE/m+cY+Ig
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9BRTg4MzY2OEM4
RUMxMUYwOTlEOEFCNDVDNEY5QUUwMi9HbHNBV1h5TmUySDd2djdGdVVULWI1eGo0
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0dsc0FXWHlOZTJIN3Z2N0Z1VVQtYjV4ajRpQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjU5OEQvQUU4ODM2NjhDOEVDMTFGMDk5RDhBQjQ1QzRGOUFFMDIvQTc2QjJBMjJD
Q0QxMTFGMTlFRThERTYxMkU2NkNFRjkucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLZ1YMA0GCSqGSIb3DQEBCwUAA4IBAQBMyK8CgX5BCnqwFbuQWOK5
v2PgsFqWhpQNQv1m1wIUPbsrSH7AEorN/ej4AReUlGdVs4tjU6ivAaKncoeqWFHk
A5giM4bTLoHhRs+9GX9ENuuzYHzUMtVczZYT3So6de0Bqe/vMYbvrcYysJdLL5DQ
RJ8KEiJtJW3kYFa6Nv2A6R0LFmv05zXqyfJnsTnWlZdZbCYmNp8hQe/EcJcoLs8z
IZqP86naBacbyOPwfzhIJF8JutlLSmEmC6KZvIohjcLXevgp6ifYiTydPL08sGkM
bogOL2cFz1v/6f9N1QZqZWuMFn4R9abPYA9ktbrEx1GfNXNn8sCzsh9VjY0/dqoQ
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:28 2026 by rpki-client