
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/F91F0C028A2E11EC98A2702CC4F9AE02.roa
File: F91F0C028A2E11EC98A2702CC4F9AE02.roa (raw, json)
Hash identifier: bjkkedoEzbUfC4GQvKwdaQZgxgq0YTl5qOigfpRvGaU=
Subject key identifier: 57:5A:C7:FB:18:70:09:7F:B1:E9:3F:AC:C1:C6:A9:74:57:F3:50:79
Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D
Certificate serial: 0502
Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/F91F0C028A2E11EC98A2702CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:14:24 +0000
ROA not before: Sat 20 Dec 2025 17:14:43 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 135134
IP address blocks: 45.129.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl
rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 16:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1282 (0x502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D
Validity
Not Before: Dec 20 17:14:43 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a58d2f-6e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:60:99:6a:bb:44:da:19:91:c9:b2:87:88:
2f:bd:4d:a6:7e:2e:8e:dc:58:33:01:ca:aa:b0:f0:
54:1d:ed:35:47:68:b6:04:58:1f:40:62:aa:4c:0a:
ba:91:73:66:65:6c:1f:b2:3a:66:95:29:ad:ae:11:
8e:a0:18:87:be:da:12:60:d2:9b:46:ed:b6:a9:68:
de:6b:0a:8d:6f:78:d5:1d:70:75:1e:99:a2:d8:a4:
0d:2f:e7:9e:4d:68:e5:c4:f0:c9:ef:62:96:f7:39:
af:a2:6c:15:93:17:fe:23:a1:35:63:c2:da:bc:b0:
1b:4d:37:ab:26:04:de:b1:c4:74:8f:5c:20:b4:b4:
09:4e:3d:dd:3e:5d:36:3c:6c:ad:2b:ee:4c:1b:4d:
fe:3e:79:a4:82:d3:0c:8e:4c:c8:8b:1b:21:9f:c1:
df:81:85:75:e6:1f:36:6d:8a:ed:51:b2:99:f8:e8:
95:d1:2e:22:0f:53:47:a3:7d:c6:35:a7:64:42:82:
2f:6a:03:a4:84:6d:1e:c9:a5:f8:3e:93:f5:8d:e9:
f7:40:a8:91:c6:1a:87:d9:f5:ca:ea:13:55:63:cf:
df:2f:ad:05:c9:f8:bf:d0:1a:27:ff:e5:24:1d:76:
72:c6:c3:22:43:ab:b6:cc:c2:71:a6:78:41:38:44:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5A:C7:FB:18:70:09:7F:B1:E9:3F:AC:C1:C6:A9:74:57:F3:50:79
X509v3 Authority Key Identifier:
keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/F91F0C028A2E11EC98A2702CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.129.228.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b6:d9:9d:75:4f:18:a0:a8:74:a4:43:12:d7:fa:bf:ef:1f:
1e:93:e3:71:71:d0:9a:e3:9b:7d:2a:10:bf:d0:dc:68:81:a1:
73:76:13:ff:f2:42:0a:36:06:cd:ec:2c:c5:f0:f2:b3:06:0e:
7a:f8:03:30:05:cb:c4:90:cc:6d:fa:84:73:b7:9b:08:9d:7b:
ce:82:0b:3b:1d:92:d3:e9:9c:0e:72:5c:43:41:c3:fa:46:eb:
99:10:0b:a1:3f:6a:f9:ad:c6:84:90:fd:2d:f0:8c:0d:29:2c:
96:a3:a1:e2:f3:7f:7b:22:b6:c1:54:8c:fa:28:52:dc:be:45:
6a:5c:4e:d8:ac:d1:0b:27:6c:71:f8:9a:61:34:bf:87:b1:54:
74:25:fa:65:b3:20:f1:1b:de:32:3c:18:f6:05:13:9d:1f:4a:
bd:de:9c:29:77:e0:1d:57:cf:ba:7a:22:0f:70:3c:eb:ea:d1:
fe:e5:ba:8a:ea:ba:2b:b7:2f:74:a6:6d:88:75:70:7c:e0:f7:
b3:c5:82:26:33:d9:d4:d5:94:5a:3a:e2:a8:3c:94:4a:21:86:
58:b7:a1:de:b1:60:16:8b:7f:89:ea:f7:b5:b1:f1:5d:54:cc:
58:77:f5:39:59:98:c0:85:c1:70:1e:16:1a:4c:59:11:98:46:
2a:b7:34:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:00:29 2026 by rpki-client