
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/E45745342AC411F0B2B1822CC4F9AE02.roa
File: E45745342AC411F0B2B1822CC4F9AE02.roa (raw, json)
Hash identifier: AxsziP8QjIclSmRwmt7vqxm15JXGVRYiuCuUDTs5Jf0=
Subject key identifier: 2A:58:82:73:2D:3A:23:7A:AE:C4:39:3C:63:66:B3:0F:A4:6E:47:EA
Certificate issuer: /CN=A914CDF9/serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE
Certificate serial: C5
Authority key identifier: AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/E45745342AC411F0B2B1822CC4F9AE02.roa
Signing time: Tue 19 May 2026 07:40:01 +0000
ROA not before: Tue 19 May 2026 07:40:01 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 45189
IP address blocks: 122.99.124.0/22 maxlen: 24
203.175.176.0/24 maxlen: 24
203.185.191.0/24 maxlen: 24
223.26.32.0/20 maxlen: 24
2407:3400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl
rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CDF9, serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE
Validity
Not Before: May 19 07:40:01 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a0c13d1-bdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7d:e9:ca:0e:d8:68:f8:17:71:7d:30:87:a2:
c2:8a:9a:8b:0b:3e:a5:b1:4e:f9:b6:84:0f:08:51:
bc:44:f2:80:86:bd:41:a7:2d:11:5e:bc:ed:cd:34:
93:42:05:e5:f0:d9:4d:7c:c9:e3:ba:95:66:b6:2f:
fc:a1:0d:a9:27:ce:40:6b:7e:09:d9:38:48:a5:b0:
2a:33:fe:ee:54:7b:bd:8d:be:8f:5f:7a:bc:6f:2a:
72:00:29:dc:2e:61:17:9a:48:1f:ea:d1:78:65:ef:
ec:34:27:da:3f:79:70:0a:12:74:96:dd:f5:ef:85:
e9:ef:a3:61:02:8b:8e:fd:61:70:cc:62:02:66:54:
52:64:f5:21:96:be:f6:58:70:8e:dc:11:db:20:9f:
cb:f9:19:9c:98:3d:7e:e9:00:dd:2f:4b:31:be:a8:
f7:64:a8:46:bb:e0:c9:2a:43:87:9b:b5:25:e5:ca:
ef:b7:e2:aa:2d:e4:1d:84:53:43:eb:f0:96:37:72:
75:13:b0:d2:09:7b:e0:88:03:9c:d9:c7:ca:8e:85:
3d:cc:a4:1e:bb:c7:9e:c8:8a:eb:3d:6a:29:c4:04:
59:80:a2:71:c5:65:fa:86:0d:0a:c8:29:22:85:48:
51:85:4f:2e:69:55:80:5d:6b:01:6d:69:93:8d:0e:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:58:82:73:2D:3A:23:7A:AE:C4:39:3C:63:66:B3:0F:A4:6E:47:EA
X509v3 Authority Key Identifier:
keyid:AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/E45745342AC411F0B2B1822CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.99.124.0/22
203.175.176.0/24
203.185.191.0/24
223.26.32.0/20
IPv6:
2407:3400::/32
Signature Algorithm: sha256WithRSAEncryption
72:3c:42:ca:7b:bc:ff:79:d4:f5:17:6b:cd:1b:57:de:a9:15:
f8:95:76:48:e8:f9:c8:e3:dc:e6:30:32:af:83:68:b7:3a:0d:
1c:6e:18:72:59:ca:6e:46:3d:8e:48:44:55:8b:56:39:c8:e6:
26:61:98:67:46:9d:b5:a1:18:17:94:3e:7f:1d:66:48:43:29:
32:19:66:16:08:a3:9b:5a:4a:ec:e6:37:9e:26:22:ea:6b:aa:
ae:73:08:fb:0d:c2:b6:2c:b9:96:a3:42:77:ca:15:94:df:8b:
15:53:8f:fe:3b:86:f4:83:9e:bd:c5:98:37:c3:38:0f:eb:2c:
d5:26:ca:7a:48:22:b7:42:01:3b:4c:06:74:07:6a:1c:a9:26:
1a:c1:30:36:db:f2:5e:ed:03:88:c1:a1:b1:ed:1b:b6:c2:54:
aa:b7:53:93:22:04:d2:5d:e3:b8:f6:b0:9d:34:4b:8f:65:6a:
03:f5:be:15:ac:21:1b:c7:30:e5:4e:8e:c8:bd:3c:b5:6b:2d:
ea:aa:c6:fe:2c:be:33:ca:72:aa:fe:4f:07:d0:c9:68:5c:db:
29:b6:b8:a6:11:ef:f7:f3:d2:75:a6:a0:ba:38:ca:c5:8a:c0:
1d:34:c4:f5:0b:7f:b8:d3:e3:91:2e:8f:3c:3d:4c:c6:10:98:
9e:75:c5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:18 2026 by rpki-client