
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/6690D57486FE11F194514C90ABEE528E.roa
File: 6690D57486FE11F194514C90ABEE528E.roa (raw, json)
Hash identifier: fV1SDM79oTlS83IQQaXNvbxSE2n0EcvqopvRbECAJVY=
Subject key identifier: D6:6E:E1:4D:FE:0F:58:BD:66:38:42:9A:98:25:A0:80:F8:C0:4F:57
Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Certificate serial: 25ED
Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/6690D57486FE11F194514C90ABEE528E.roa
Signing time: Thu 06 Aug 2026 16:23:21 +0000
ROA not before: Thu 06 Aug 2026 16:23:21 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 64047
IP address blocks: 45.125.112.0/22 maxlen: 22
45.125.112.0/23 maxlen: 23
45.125.112.0/24 maxlen: 24
45.125.113.0/24 maxlen: 24
45.125.114.0/23 maxlen: 23
45.125.114.0/24 maxlen: 24
45.125.115.0/24 maxlen: 24
103.193.248.0/22 maxlen: 22
103.193.248.0/23 maxlen: 24
103.193.250.0/23 maxlen: 24
2402:b780::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9709 (0x25ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Validity
Not Before: Aug 6 16:23:21 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a74b4f9-0469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:97:ef:ff:85:d5:a8:43:99:e4:4b:a3:60:
9e:25:09:ad:4d:a5:43:00:ae:a6:ba:40:e5:da:73:
03:0f:99:4c:8d:45:9c:85:7f:57:a6:82:fe:79:4a:
2e:02:02:e0:45:61:00:50:cd:49:bf:47:b1:12:4c:
85:a0:0d:e5:1f:8d:70:68:b0:25:ec:25:5a:86:3b:
88:04:71:35:b9:e8:ef:b8:9d:41:ce:a7:e2:ca:f8:
cf:5a:f1:8b:f9:5d:70:15:1d:cb:a3:d3:5e:a2:23:
62:8c:6f:d4:6a:9d:93:41:02:ce:5d:84:42:44:68:
71:e8:52:79:a2:17:1b:a3:f4:18:7c:33:8e:bd:c5:
c3:52:80:39:8f:4b:d0:b8:fb:8c:da:e2:1e:5e:d3:
8f:81:08:8f:4b:09:56:30:06:05:c4:0a:ae:d4:60:
54:84:3d:a7:cb:f9:8a:92:7d:c5:47:51:fd:c2:5a:
7c:34:35:4e:57:97:b5:7f:df:65:ff:b7:7c:d5:d9:
27:22:e5:ae:05:04:83:b1:b0:21:71:5d:66:0c:ed:
d9:bd:87:1b:c4:24:e4:3f:ed:0a:14:f4:7f:34:0d:
ff:79:b0:a1:ee:d7:44:be:3b:26:e6:f9:4b:e6:ff:
ca:7b:15:46:2c:4c:3f:b6:25:3d:af:fe:69:d5:17:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6E:E1:4D:FE:0F:58:BD:66:38:42:9A:98:25:A0:80:F8:C0:4F:57
X509v3 Authority Key Identifier:
keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/6690D57486FE11F194514C90ABEE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
45.125.112.0/22
103.193.248.0/22
IPv6:
2402:b780::/32
Signature Algorithm: sha256WithRSAEncryption
17:89:72:15:c3:64:86:6a:21:9b:19:f4:8a:16:f0:2d:36:95:
13:6c:48:10:a0:a1:a9:61:27:d5:08:d9:84:e7:b4:d2:0c:31:
c5:98:4a:27:13:80:51:27:d2:50:8d:b7:f7:17:21:2e:cb:c2:
d4:f1:3c:58:94:8d:f0:f8:40:02:61:24:ea:65:d5:44:fe:6c:
df:f1:dc:63:0e:23:34:a8:6b:0e:0b:23:b8:81:b1:1d:46:91:
0b:f9:e6:a5:36:5e:71:82:fd:05:90:2b:3a:c3:27:c8:c5:00:
f6:de:3e:7a:a6:e3:ee:86:01:7d:61:06:5e:bb:5e:47:0f:a6:
92:db:89:84:6e:78:ab:da:a9:d7:23:e2:e1:41:53:58:e0:5b:
a7:3e:3c:98:37:86:98:98:75:6b:da:5b:55:65:92:6d:c8:c0:
93:e8:5d:fb:44:bc:c2:15:4c:99:71:bd:4f:9d:0b:67:91:ba:
2a:62:a0:3c:a1:13:d5:4a:cc:99:6b:54:e2:d3:31:92:ec:8b:
3b:57:46:bd:03:c5:1c:e4:a0:1b:b6:aa:7f:a0:be:a9:ac:88:
36:a5:ac:74:db:79:8f:5a:e5:b8:21:21:e5:fc:aa:6e:ac:13:
88:32:37:f1:85:61:a5:70:9d:56:26:12:4f:8c:89:1e:e9:81:
35:ec:4a:a6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICJe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4
N0QyRDhGNTcwHhcNMjYwODA2MTYyMzIxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc0YjRmOS0wNDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzfiX7/+F1ahDmeRLo2CeJQmtTaVDAK6mukDl2nMDD5lMjUWchX9XpoL+eUou
AgLgRWEAUM1Jv0exEkyFoA3lH41waLAl7CVahjuIBHE1uejvuJ1BzqfiyvjPWvGL
+V1wFR3Lo9NeoiNijG/Uap2TQQLOXYRCRGhx6FJ5ohcbo/QYfDOOvcXDUoA5j0vQ
uPuM2uIeXtOPgQiPSwlWMAYFxAqu1GBUhD2ny/mKkn3FR1H9wlp8NDVOV5e1f99l
/7d81dknIuWuBQSDsbAhcV1mDO3ZvYcbxCTkP+0KFPR/NA3/ebCh7tdEvjsm5vlL
5v/KexVGLEw/tiU9r/5p1RfIuwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFNZu4U3+
D1i9ZjhCmpgloID4wE9XMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3
MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc0NTYvNjE1NEQxNjgzNzJFMTFFNTgxRjBGQjM5QzRGOUFFMDIvNjY5MEQ1NzQ4
NkZFMTFGMTk0NTE0QzkwQUJFRTUyOEUucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCLX1wAwQCZ8H4MA0EAgACMAcDBQAkAreAMA0GCSqGSIb3DQEBCwUA
A4IBAQAXiXIVw2SGaiGbGfSKFvAtNpUTbEgQoKGpYSfVCNmE57TSDDHFmEonE4BR
J9JQjbf3FyEuy8LU8TxYlI3w+EACYSTqZdVE/mzf8dxjDiM0qGsOCyO4gbEdRpEL
+ealNl5xgv0FkCs6wyfIxQD23j56puPuhgF9YQZeu15HD6aS24mEbnir2qnXI+Lh
QVNY4FunPjyYN4aYmHVr2ltVZZJtyMCT6F37RLzCFUyZcb1PnQtnkboqYqA8oRPV
SsyZa1Ti0zGS7Is7V0a9A8Uc5KAbtqp/oL6prIg2pax023mPWuW4ISHl/KpurBOI
MjfxhWGlcJ1WJhJPjIke6YE17Eqm
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:56:03 2026 by rpki-client