
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/68356576B0F311E5AB30F151C4F9AE02.roa
File: 68356576B0F311E5AB30F151C4F9AE02.roa (raw, json)
Hash identifier: YdRvCfWbMSCV8g9Rl5rj3jDrFMcbMYhwYG0c4TJGKSE=
Subject key identifier: AB:E2:4D:6D:AD:5E:A1:7E:1F:33:8A:CA:36:C6:2D:C3:BA:E2:44:2C
Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial: 2B21
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/68356576B0F311E5AB30F151C4F9AE02.roa
Signing time: Fri 14 Aug 2026 16:23:05 +0000
ROA not before: Fri 14 Aug 2026 16:23:05 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 132206
IP address blocks: 125.5.13.0/24 maxlen: 24
125.5.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11041 (0x2b21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Validity
Not Before: Aug 14 16:23:05 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a7f40e9-73e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:ae:72:55:5e:43:c8:f1:b0:10:6a:3d:13:
98:f8:14:a2:cf:91:48:ca:d6:42:0b:f6:d2:b6:05:
a0:11:cd:8b:48:38:e1:81:8d:2d:0e:48:75:04:e2:
06:df:52:56:1d:14:91:65:14:58:17:8b:f4:22:4e:
eb:53:37:1d:80:b4:a6:09:82:fd:17:8b:36:a8:4f:
b3:66:25:cd:09:a3:d9:a4:58:9c:5e:9e:ad:60:6f:
e3:2f:b9:2d:a3:13:7e:a0:7f:ee:8e:6e:6d:84:9c:
ca:58:21:4c:4e:e9:4a:ef:db:3f:b8:aa:ab:6b:7f:
29:cf:0b:a1:3f:cb:af:59:db:b9:03:0a:75:39:83:
69:71:1c:a2:96:34:6d:66:87:75:de:da:92:2d:31:
ad:22:b9:ff:96:9c:9c:7d:64:7e:9a:8a:bc:93:63:
5d:07:48:9d:6e:39:30:63:0a:64:7a:76:8c:1d:03:
59:4e:22:17:32:e9:6f:4e:8d:f1:db:af:83:e2:33:
8a:64:cf:ec:d6:4f:fb:5d:f8:d7:6a:2c:e7:5d:e1:
85:ce:67:8d:1c:7b:24:61:f0:86:84:cc:6a:3e:ac:
3f:e8:84:4d:27:19:ac:51:ae:e4:15:6c:d3:f3:3f:
67:16:c6:53:71:bf:32:62:80:b8:97:dd:f5:61:6a:
a5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E2:4D:6D:AD:5E:A1:7E:1F:33:8A:CA:36:C6:2D:C3:BA:E2:44:2C
X509v3 Authority Key Identifier:
keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/68356576B0F311E5AB30F151C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
125.5.13.0/24
125.5.176.0/24
Signature Algorithm: sha256WithRSAEncryption
51:0c:8d:c7:9d:8d:10:1d:ca:c6:29:4f:10:b6:a6:ee:85:f7:
2e:93:39:2e:f5:f7:cc:22:c6:0a:e9:a0:b7:17:c4:66:b1:6c:
88:d0:8a:27:f6:a4:64:36:21:b1:bd:0d:8b:5a:fe:7b:f2:ba:
5c:63:21:a4:e8:81:88:4a:ca:bb:34:6a:88:09:76:6b:d5:1f:
50:57:9c:47:77:da:a5:20:27:e0:d2:67:43:d5:53:4f:de:c8:
88:1f:60:34:96:6c:7e:46:f6:62:43:ec:aa:8d:d1:90:a7:44:
dd:02:b5:71:83:ca:a0:10:9d:1d:7e:0f:1e:f6:d6:ab:e8:84:
dc:99:e7:1b:a8:66:bb:af:54:29:f8:16:7e:6a:fc:a5:ce:7a:
a3:92:46:fa:04:cc:2b:62:aa:0f:51:85:a6:15:fc:90:4e:4a:
22:e0:b6:fd:55:42:78:48:7a:26:76:22:3f:9f:0d:28:9c:0d:
b1:9d:9f:d4:44:85:7f:e8:e4:82:55:6d:d3:ed:f1:bf:ef:8f:
1c:dd:29:1d:67:00:56:f0:55:64:81:43:ea:49:2d:d1:fc:83:
66:10:d3:a5:00:6b:e7:ed:01:64:00:4a:1f:02:22:d4:02:2c:
48:d2:dd:76:6b:81:3f:48:fe:3d:ce:85:da:16:b6:10:52:72:
92:6b:8a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:30:55 2026 by rpki-client