
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/FFFC26F0A51C11EC8394365BC4F9AE02.roa
File: FFFC26F0A51C11EC8394365BC4F9AE02.roa (raw, json)
Hash identifier: azSQvrLGixSL3oYOq7/u81UYo4j8paDDRGJYii7YcF0=
Subject key identifier: A4:03:B2:E7:6B:09:EF:A0:CB:AC:A4:53:71:28:CA:89:BE:01:07:D6
Certificate issuer: /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Certificate serial: 041D
Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/FFFC26F0A51C11EC8394365BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:03:36 +0000
ROA not before: Tue 07 Oct 2025 00:58:31 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 38182
IP address blocks: 45.126.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:52:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1053 (0x41d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Validity
Not Before: Oct 7 00:58:31 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45548-1456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:7d:20:06:6e:05:70:d5:ac:67:db:a8:a4:
a1:e1:6f:b8:3c:0c:3a:b8:2d:d7:60:af:67:15:02:
f5:08:be:25:4e:32:81:11:bb:4d:22:3a:df:01:97:
d3:27:ce:d9:d3:94:56:d7:b3:3c:ee:38:73:be:43:
fc:88:04:af:9d:7a:8d:a4:f2:ec:d3:d4:e2:78:0f:
f3:08:4a:24:a4:25:f6:2a:3c:24:b8:3b:f3:8e:7f:
70:82:a1:64:de:f9:d1:82:56:ce:a0:03:30:11:95:
0a:91:98:34:b7:3b:31:bb:7c:1a:3f:1c:bb:33:46:
c6:c2:b1:5b:e0:08:7f:dc:73:8a:32:b8:ed:cc:7a:
b5:1b:f1:68:af:78:20:95:c9:bc:c4:ff:70:c9:93:
c4:4d:d6:0d:3f:bb:03:3a:3a:2a:04:b4:85:ec:68:
da:31:b6:e9:31:8c:9f:fa:be:7d:21:df:e2:39:7a:
95:aa:70:15:47:9d:0d:9e:d6:e5:b7:3e:ea:6b:68:
4d:37:50:5a:25:61:b3:7c:7f:cb:fd:7f:cd:8b:6b:
bf:00:fa:9a:09:28:e9:27:01:c1:c9:4d:92:1b:92:
9c:9e:b3:18:d4:54:a3:e9:87:84:ed:17:47:e8:10:
52:18:bb:e0:f1:d6:69:36:7b:4b:0b:a2:c7:fc:9c:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:03:B2:E7:6B:09:EF:A0:CB:AC:A4:53:71:28:CA:89:BE:01:07:D6
X509v3 Authority Key Identifier:
keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/FFFC26F0A51C11EC8394365BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.126.88.0/23
Signature Algorithm: sha256WithRSAEncryption
87:50:cf:23:63:c9:4c:4a:52:a2:e4:42:18:fc:82:d2:f3:8b:
08:d7:74:0c:ad:cc:67:1e:18:77:d1:d1:ce:4e:aa:c5:8a:48:
55:03:36:ed:ce:24:da:6c:6c:4b:6f:17:c2:3e:d4:e3:04:e1:
dd:c7:5b:d3:9e:78:39:a8:9e:c2:06:09:69:55:61:38:9e:06:
57:74:b8:d8:56:50:86:50:2d:c3:b0:ec:43:f6:c5:c6:b3:89:
32:b2:87:e6:61:74:39:a5:cf:05:9e:9e:c3:4c:88:54:6e:fb:
d3:e3:16:62:9f:1a:ec:e0:23:20:5b:18:37:5f:e3:27:51:b2:
fa:13:f8:1d:45:a6:3e:b9:c1:a0:6d:ea:a4:fa:0e:cd:07:ba:
6f:f4:96:5a:48:c4:0e:a3:9a:b9:9a:12:2a:4c:6b:30:c7:b5:
27:d9:28:e4:06:40:c0:08:01:f9:ee:db:43:0a:22:c2:fc:2d:
16:30:e7:c4:ae:e6:16:64:96:93:8a:36:5c:4b:8a:8f:07:c2:
c3:01:03:fa:63:d4:27:4d:42:3a:cd:db:c5:76:92:c2:7a:63:
0f:54:27:df:81:f4:2f:af:f4:2a:2a:5a:bd:36:34:7d:68:83:
db:22:e3:3e:5b:9b:e1:35:42:75:c4:86:a6:d7:9c:56:68:c9:
0d:5f:58:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:26 2026 by rpki-client