
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/FFFC26F0A51C11EC8394365BC4F9AE02.roa
File: FFFC26F0A51C11EC8394365BC4F9AE02.roa (raw, json)
Hash identifier: BEChvm3jclLlQ2tvmKbCnWz1n1OFjO+ZCS7wnOQrZK4=
Subject key identifier: AB:25:B5:90:8F:C1:C4:BB:31:B5:7A:06:5B:3C:56:DF:C3:31:81:7B
Certificate issuer: /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Certificate serial: 0491
Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/FFFC26F0A51C11EC8394365BC4F9AE02.roa
Signing time: Mon 05 Oct 2026 00:48:33 +0000
ROA not before: Mon 05 Oct 2026 00:48:33 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 38182
IP address blocks: 45.126.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 00:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1169 (0x491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Validity
Not Before: Oct 5 00:48:33 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac2f3e1-6d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:74:bf:90:b9:93:29:99:11:b4:78:34:ce:2d:
f1:5f:b3:44:c7:1c:65:ee:c0:5d:36:97:53:02:51:
a6:cf:11:e2:7c:a8:6d:ff:74:9c:91:4f:71:c6:95:
4d:a2:43:03:3b:8a:3a:ef:04:4f:d9:dd:45:65:db:
93:c5:a9:6e:ab:ad:5a:21:01:f1:2c:7a:5d:1d:be:
4c:46:d7:e5:6c:11:bb:80:aa:42:33:2f:27:ae:db:
a8:86:5a:8f:bd:bd:64:ec:28:3b:cc:91:24:a3:2e:
c2:3f:e8:19:04:2f:e3:ea:2d:5f:14:ce:7d:a9:8d:
b3:d3:d9:b7:d8:42:a0:e6:da:70:7a:8f:9d:cf:8d:
4f:48:be:20:23:1b:4a:c5:da:95:d4:6f:1d:05:33:
1a:f9:94:65:87:f4:5e:09:2a:12:0e:89:44:78:d3:
b0:f5:94:d0:c7:fd:5a:29:19:29:08:bb:60:d8:a7:
dd:1b:49:16:ee:6a:12:35:47:0f:6a:99:8b:62:ae:
63:fd:60:6f:ad:d8:b9:5a:c7:5e:1f:4c:f6:5e:e6:
96:58:86:6d:89:72:fb:a9:a4:64:e5:a7:6d:c2:b0:
fe:2f:ed:8f:fb:0e:f6:a2:4b:e4:e4:1c:ff:f3:df:
12:fc:3c:fc:26:ff:90:f0:d2:70:27:d1:38:8a:1f:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:25:B5:90:8F:C1:C4:BB:31:B5:7A:06:5B:3C:56:DF:C3:31:81:7B
X509v3 Authority Key Identifier:
keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/FFFC26F0A51C11EC8394365BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.126.88.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:7c:05:49:99:a1:33:aa:c8:2a:dd:45:85:48:ea:79:63:4e:
c3:d7:11:ff:1c:6d:72:92:1b:ca:0a:58:41:55:13:d9:05:60:
27:88:51:a9:e4:56:66:3f:d6:5f:cb:9b:bb:2c:8d:03:f6:a2:
d8:fe:af:f4:b7:97:2b:e8:0f:35:f3:0a:64:17:c2:73:90:8f:
85:30:cb:b5:de:2a:34:cd:13:96:d3:c8:63:ad:39:77:20:38:
2e:82:f3:9a:47:ca:c8:47:9f:ca:e0:50:09:f3:b5:ab:38:5f:
b2:6f:bc:55:7b:bb:1f:83:5c:c2:d1:4d:20:a8:f6:35:f5:68:
f0:e3:e8:ed:7b:74:c0:5c:0b:df:c0:3b:30:25:a9:35:1f:96:
3c:e1:6c:16:6f:b9:72:e2:07:1f:f4:f7:84:77:6f:6f:50:f9:
06:b4:03:8d:27:69:11:84:e6:b2:75:a7:25:92:18:e9:c9:62:
94:9f:19:3a:f3:06:ad:d2:fa:50:8e:06:c6:15:06:3e:41:c7:
f7:d0:be:a8:ce:86:5a:b9:a4:0b:f4:0c:83:bc:86:0b:8e:a2:
e1:29:69:cc:fb:8a:3a:bf:45:26:ba:61:c8:e2:92:9d:50:85:
2b:0c:bf:d6:3a:da:e3:e3:f8:bd:87:03:96:4e:8f:7f:8e:ea:
ba:ac:07:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:25:34 2026 by rpki-client