
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9C9D/EB2E9024BC0E11F1A2EF3CB23911F970/9056918ABC1111F1B83DABAE3B11F970.roa
File: 9056918ABC1111F1B83DABAE3B11F970.roa (raw, json)
Hash identifier: RCbmMea+Mc0/qqo6HCikL4raHsxNMQqbHxpTb7zKAyo=
Subject key identifier: 38:E3:75:79:66:9A:8D:B7:FE:80:9D:25:62:B7:ED:1C:12:EC:8F:B2
Certificate issuer: /CN=A91B9C9D/serialNumber=57E257FEE73E8E7B04DF29CBC18F732B34CE2CA3
Certificate serial: 03
Authority key identifier: 57:E2:57:FE:E7:3E:8E:7B:04:DF:29:CB:C1:8F:73:2B:34:CE:2C:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-JX_uc-jnsE3ynLwY9zKzTOLKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C9D/EB2E9024BC0E11F1A2EF3CB23911F970/9056918ABC1111F1B83DABAE3B11F970.roa
Signing time: Tue 29 Sep 2026 14:25:05 +0000
ROA not before: Tue 29 Sep 2026 14:25:05 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 137047
IP address blocks: 45.121.140.0/24 maxlen: 24
45.121.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9C9D/EB2E9024BC0E11F1A2EF3CB23911F970/V-JX_uc-jnsE3ynLwY9zKzTOLKM.crl
rsync://rpki.apnic.net/member_repository/A91B9C9D/EB2E9024BC0E11F1A2EF3CB23911F970/V-JX_uc-jnsE3ynLwY9zKzTOLKM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-JX_uc-jnsE3ynLwY9zKzTOLKM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 10:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9C9D, serialNumber=57E257FEE73E8E7B04DF29CBC18F732B34CE2CA3
Validity
Not Before: Sep 29 14:25:05 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6abbca41-158e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:15:c0:a6:5a:1a:51:9f:f2:fd:a0:77:9d:2e:
26:92:e8:b7:88:75:cc:fb:07:85:f3:5f:be:8f:55:
9c:d4:98:0c:cc:79:87:1c:f4:95:44:cf:77:6a:0d:
e7:36:c4:28:0c:01:41:1a:04:c6:fe:42:93:a2:85:
5a:af:e9:80:0d:ec:a7:f1:b1:24:ec:f7:b0:04:2b:
ba:01:a4:a4:2f:0a:9a:c0:4a:89:4c:3a:81:84:b3:
aa:8b:6e:a1:0f:de:e3:f4:6b:29:65:38:91:08:4b:
1c:e9:a9:25:ea:9d:7a:65:0b:f4:46:12:98:d2:c0:
33:2d:6c:81:2c:b4:5b:ed:15:0b:ca:c2:87:b4:12:
ed:f6:26:32:52:a8:e2:e7:d9:dc:04:ce:3a:7d:f7:
15:7a:d0:ee:69:5a:95:6a:4b:38:3c:ad:c0:21:95:
56:6a:8e:6a:ec:f3:46:c0:db:86:5d:d6:67:11:2f:
68:ec:94:89:1a:d7:0d:da:83:c5:45:cf:9c:bd:7b:
ea:8c:5e:ec:af:53:00:79:e9:61:d6:e1:7e:01:b4:
54:27:dd:b1:1a:da:53:9f:17:d4:75:bf:02:c7:b7:
df:66:38:0c:41:f5:49:84:8d:b2:bd:f6:1f:8b:f2:
d8:6a:38:b3:42:b9:8b:57:0e:78:24:df:82:28:79:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E3:75:79:66:9A:8D:B7:FE:80:9D:25:62:B7:ED:1C:12:EC:8F:B2
X509v3 Authority Key Identifier:
keyid:57:E2:57:FE:E7:3E:8E:7B:04:DF:29:CB:C1:8F:73:2B:34:CE:2C:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9C9D/EB2E9024BC0E11F1A2EF3CB23911F970/V-JX_uc-jnsE3ynLwY9zKzTOLKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-JX_uc-jnsE3ynLwY9zKzTOLKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C9D/EB2E9024BC0E11F1A2EF3CB23911F970/9056918ABC1111F1B83DABAE3B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
45.121.140.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:bc:d1:dc:a8:82:df:14:37:2a:93:37:7a:d1:81:97:5b:77:
04:25:5b:26:f4:32:07:a3:d6:f0:80:f1:6d:8e:53:83:32:99:
40:14:6b:ee:2d:4d:fb:91:b6:36:a4:57:30:35:f6:33:df:82:
8a:88:43:23:4c:cc:e0:28:e9:ae:5e:fe:45:dd:8e:34:fa:2f:
4f:be:11:13:ec:30:d7:b5:59:27:b1:de:df:8b:80:21:ee:5e:
d0:20:1c:22:e0:28:65:a0:5b:cf:b2:bd:46:68:72:5f:28:8f:
cb:d2:65:5e:dc:32:ad:8f:44:90:ec:b3:32:36:54:c8:09:2e:
1a:2a:9d:e8:d5:63:ea:93:8e:2f:98:6b:57:ab:78:6f:e4:d3:
63:3a:11:98:ab:10:04:64:5f:07:3e:90:5a:a8:b8:85:19:48:
73:bc:43:17:bd:cb:cc:4a:80:43:c3:05:9e:2d:da:02:11:8e:
d3:c0:17:b7:1b:e1:cb:9d:ce:54:8a:e1:a0:0d:1f:22:de:5d:
d3:0d:9f:d9:05:e3:f6:93:67:d2:31:c7:8a:99:d1:d6:72:e7:
06:ba:e7:bb:e0:52:d0:46:11:7e:e2:33:5f:93:3c:8b:db:7e:
5a:99:c3:62:81:3a:d8:57:00:40:f0:dc:dc:5e:32:fd:97:a3:
aa:c4:57:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:32:25 2026 by rpki-client