
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/40E8489ED94411E98E28CD85C4F9AE02.roa
File: 40E8489ED94411E98E28CD85C4F9AE02.roa (raw, json)
Hash identifier: IGqsj2S5MFPo+sMtzxor83kzXwSyYSdo4rKvaE65ctE=
Subject key identifier: D2:39:91:D9:65:1D:8F:88:F9:2D:41:54:24:EB:52:64:E6:49:D6:59
Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial: 2B33
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/40E8489ED94411E98E28CD85C4F9AE02.roa
Signing time: Fri 14 Aug 2026 16:23:46 +0000
ROA not before: Fri 14 Aug 2026 16:23:46 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 9256
IP address blocks: 125.5.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11059 (0x2b33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Validity
Not Before: Aug 14 16:23:46 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a7f4112-fdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:53:d2:16:6c:af:03:50:43:25:48:2e:3b:
db:13:12:99:b1:6c:e9:eb:aa:26:70:c5:45:03:09:
c7:20:bc:00:9d:5e:cc:84:5c:44:ad:93:0e:48:1f:
6c:78:20:c8:85:83:a0:5c:c7:95:4c:95:c6:10:cf:
1f:fb:2d:d6:47:10:15:30:fe:f8:5e:63:f8:88:a8:
e6:04:22:0c:33:8e:31:39:81:e8:6d:db:f1:aa:98:
94:72:e2:09:f4:b7:75:46:05:a0:3f:c3:83:0e:73:
52:f5:4e:8c:ce:f2:02:68:80:47:63:94:ce:35:37:
7b:9f:9a:d2:ed:60:c6:98:54:fb:f2:d1:5a:9f:5f:
05:49:f6:b0:76:30:d4:d3:57:56:fb:54:e9:08:a5:
18:e1:85:f6:37:0f:d9:57:00:ea:7c:5d:43:73:09:
52:83:22:28:f0:36:b2:fd:dc:d4:cf:47:50:b0:cc:
27:f4:9a:59:a3:41:05:f7:c6:98:1d:9e:9b:ac:e7:
d3:8a:8d:2d:52:7a:47:a5:a1:ba:69:62:3a:0d:2f:
3f:66:f0:cd:b3:9d:77:cc:b9:e7:ba:08:fe:12:97:
7a:3e:c6:07:2a:9d:68:92:fc:86:e9:2f:38:60:34:
1e:b5:63:f3:cb:bd:9d:1b:03:bb:8c:21:95:a5:7f:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:39:91:D9:65:1D:8F:88:F9:2D:41:54:24:EB:52:64:E6:49:D6:59
X509v3 Authority Key Identifier:
keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/40E8489ED94411E98E28CD85C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
125.5.99.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:5e:59:40:d2:28:77:b1:f3:7f:d2:be:96:0d:3d:d6:17:14:
31:6e:57:8d:e9:8b:7f:0d:96:35:cc:c3:84:c7:f3:5d:3e:6f:
30:53:e6:46:c1:f8:5b:ce:12:61:d7:40:c9:78:43:68:f6:8e:
fd:63:19:86:99:c0:99:79:46:fc:4a:cc:72:18:43:55:89:bd:
9a:35:fe:25:be:28:2c:ed:96:6e:34:cb:ba:3c:c3:cf:31:da:
79:59:ca:8e:03:35:e5:2f:8b:03:b5:18:5d:12:fa:67:f4:fe:
85:ae:88:29:13:23:cb:01:fd:87:63:2e:e5:66:df:21:49:ff:
94:7c:41:fd:62:11:ae:90:a9:84:0f:8b:02:3c:7e:7e:ce:96:
3d:cd:00:05:e2:a7:a0:a5:0f:22:d5:5e:8f:8e:49:77:2e:84:
80:60:49:63:c5:cc:07:c7:76:d8:df:16:2a:7a:85:6a:a2:0f:
34:47:30:27:b3:3b:4b:eb:b0:7a:8c:19:91:8f:83:3c:68:5e:
3e:d7:7a:36:d9:e8:1e:a5:24:e4:cd:88:2d:04:fb:b1:0c:24:
e6:b9:3b:8d:b4:cd:89:be:a4:71:a5:4c:dd:73:5e:52:b6:45:
c5:82:a4:36:7b:74:4d:0e:64:a3:4b:49:28:1a:f1:67:3b:ab:
76:b4:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:31:03 2026 by rpki-client