
$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/C699F452FDF711E8B5A6725EC4F9AE02.roa
File: C699F452FDF711E8B5A6725EC4F9AE02.roa (raw, json)
Hash identifier: 5RqWe8o0dfGTqf8ewpJNsz0dv3ajfZ+2bJ7T0SLCDaY=
Subject key identifier: F6:15:F8:47:F7:44:B9:8F:FF:0E:3C:14:C1:F6:52:F7:EB:B5:26:BB
Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial: 13D5
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/C699F452FDF711E8B5A6725EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:33:45 +0000
ROA not before: Thu 14 Aug 2025 17:26:49 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 45474
IP address blocks: 122.11.181.0/24 maxlen: 24
122.11.182.0/24 maxlen: 24
122.11.183.0/24 maxlen: 24
122.11.184.0/24 maxlen: 24
122.11.185.0/24 maxlen: 24
122.11.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5077 (0x13d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Validity
Not Before: Aug 14 17:26:49 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48689-9b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:71:7c:90:36:ea:ea:0c:d2:1d:0d:c7:5d:
a4:0d:fb:cf:3d:99:5c:8a:1b:75:6f:d8:62:84:7e:
26:84:15:0b:e4:63:2b:df:de:9b:e2:6c:e3:78:c7:
dd:f4:a9:08:cf:a1:7d:e0:7f:61:dc:3a:69:0b:95:
42:eb:fa:bc:bb:30:f4:09:b9:c6:c6:35:2f:19:7b:
98:f7:b3:f9:b7:3d:b5:65:14:f3:16:e8:62:67:d9:
c2:51:4a:f7:19:cd:c9:9e:af:f3:38:1b:31:5d:13:
13:7c:ce:de:f8:6d:34:ef:2b:cb:7a:ef:5e:31:12:
6c:e4:f5:e9:7f:90:64:8d:3e:75:f1:14:6b:99:a5:
b3:d4:d4:b5:6c:d8:3e:ca:a9:61:85:81:3e:3b:dd:
fa:1b:34:7f:14:49:8e:33:f6:40:01:ed:ab:e2:ed:
24:fc:fc:eb:ea:1f:2a:0a:96:c7:29:06:cb:d6:18:
bd:47:08:98:e1:c7:77:37:a8:5d:3d:9f:d4:62:b2:
3d:cc:e6:45:75:65:48:ab:fe:04:ca:57:3e:1e:d4:
1a:0b:11:27:53:a5:0a:21:e9:2c:ff:16:f7:e6:cb:
e1:f8:bc:d7:15:44:77:b0:c6:c3:d7:b1:6b:0e:9b:
ee:d7:91:45:b3:65:1a:53:cb:74:6e:82:80:c1:21:
e7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:15:F8:47:F7:44:B9:8F:FF:0E:3C:14:C1:F6:52:F7:EB:B5:26:BB
X509v3 Authority Key Identifier:
keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/C699F452FDF711E8B5A6725EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.11.181.0-122.11.186.255
Signature Algorithm: sha256WithRSAEncryption
57:42:1c:bc:b2:fe:1a:c2:eb:3a:dc:c3:fb:11:46:7b:91:ee:
3c:ef:ed:b5:db:31:4d:85:35:0f:b7:81:f4:1a:31:55:4d:fb:
ef:b3:71:71:8b:16:ad:64:e5:9d:7e:e1:85:de:6a:aa:c8:8e:
98:72:3a:28:83:21:99:5f:6e:0a:0c:10:05:b7:36:a5:8e:3c:
88:b7:6e:24:46:29:ae:85:4a:ea:66:96:46:4d:8e:d1:c2:a3:
71:d8:47:57:77:85:c4:80:c8:d5:92:40:88:9a:5a:f6:1f:7c:
12:07:ec:7b:f9:a8:ec:04:9c:0b:82:14:c9:a4:be:8a:ea:3d:
9a:de:13:92:a5:65:fd:aa:eb:e4:68:a3:9a:67:2c:93:9e:26:
4d:47:25:3f:36:cb:89:17:84:60:5d:98:a4:f0:fb:ba:54:95:
f5:5c:c8:6e:72:25:de:5c:9c:a0:00:2c:49:94:ea:4e:54:91:
e7:28:77:fe:a8:dc:91:aa:e3:2e:3d:d4:0e:ad:e5:94:11:23:
85:cc:8d:21:92:71:0f:b9:4b:57:16:2c:7c:45:30:b3:16:29:
72:12:1b:88:c2:bf:38:f5:2f:10:a7:77:a3:db:4d:61:d0:28:
89:bc:bd:3c:b7:3b:89:df:6f:3d:ff:08:eb:f9:1b:93:f2:47:
9d:8b:04:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 10:26:16 2026 by rpki-client