
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/75D91256B2F311EBB8A53526C4F9AE02.roa
File: 75D91256B2F311EBB8A53526C4F9AE02.roa (raw, json)
Hash identifier: 61z0KuT36nUVuAoy7v3bsXZ/PxDyaJ+n/vqrzGvGZYM=
Subject key identifier: EE:D6:77:3F:18:B3:02:AF:5C:69:BF:40:A8:D0:C0:A5:0E:08:70:65
Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Certificate serial: 09D6
Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/75D91256B2F311EBB8A53526C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:02:49 +0000
ROA not before: Sun 16 Nov 2025 19:39:41 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139750
IP address blocks: 49.128.64.0/24 maxlen: 24
49.128.66.0/24 maxlen: 24
49.128.68.0/24 maxlen: 24
49.128.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2518 (0x9d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Validity
Not Before: Nov 16 19:39:41 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a47138-43a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:00:ca:3c:0e:fa:af:9c:64:73:b6:0a:ff:ba:
b4:39:d2:4f:0e:84:8b:92:63:d4:d7:3d:04:c3:3a:
4d:65:51:fd:10:62:ee:7e:ab:f7:f1:77:c3:f0:64:
9d:b6:05:32:53:9e:83:cb:1e:83:c8:65:6d:18:e6:
cf:7e:f8:0c:ae:ae:ab:a5:10:44:e2:f1:5c:b5:b5:
c2:7b:9b:fe:48:67:1a:bc:dd:29:57:e4:0f:91:4c:
08:95:53:f2:c7:fa:b1:ef:77:f7:c3:3b:ad:38:6a:
53:31:b5:5f:64:91:94:82:d8:bb:81:c2:ce:25:00:
a5:97:4b:32:22:a2:a7:65:0b:0a:6b:c3:b2:b2:6e:
84:b2:3d:d4:12:36:d9:ef:f8:5f:31:99:8c:95:d7:
3a:78:08:36:fc:f5:01:0b:50:a5:84:1c:04:31:06:
09:3e:cb:92:2f:0a:82:99:d0:28:7d:19:9c:a5:f3:
4b:75:d5:3b:48:2c:6a:2d:14:e6:50:1d:92:57:b2:
0d:51:34:0b:34:4d:48:fd:c8:10:8b:56:56:c5:64:
08:d5:39:1c:f2:5d:9d:03:bd:60:cd:78:b0:cc:1f:
40:68:08:5d:3b:27:f7:9c:50:7b:4e:51:9a:93:0e:
e3:ab:da:cc:c6:6f:67:75:dd:dc:b3:b5:71:cf:64:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D6:77:3F:18:B3:02:AF:5C:69:BF:40:A8:D0:C0:A5:0E:08:70:65
X509v3 Authority Key Identifier:
keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/75D91256B2F311EBB8A53526C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.128.64.0/24
49.128.66.0/24
49.128.68.0/24
49.128.81.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:5b:a1:a8:83:c0:00:94:ee:ae:c5:fe:ee:ef:f3:7b:bd:27:
c6:87:58:db:d9:42:94:3e:6a:0d:30:76:d0:60:ad:06:63:15:
f4:26:33:5b:31:f6:e9:a0:2f:23:2c:b9:04:75:83:6c:78:14:
46:d2:54:bf:b6:36:52:23:52:5a:c6:78:b3:36:1b:d5:36:ee:
61:30:66:bb:51:24:24:53:0c:00:24:7e:45:db:75:93:25:99:
10:41:a0:a5:b4:55:c8:6c:d4:8a:6b:32:67:b8:4e:9b:c0:18:
2b:83:89:d9:9b:d8:ab:03:8b:25:0c:22:75:f0:b3:c2:08:c6:
5c:5f:07:7a:15:56:b6:57:18:fb:31:a2:10:88:7c:fc:12:9c:
fd:bd:81:23:ec:14:42:76:dc:20:4d:e6:4b:cc:95:23:d7:69:
bb:46:3b:9c:54:68:67:97:e2:12:c1:16:7d:b6:e1:79:bf:66:
e2:1c:be:0f:45:c4:5e:2f:35:e3:be:c9:53:c1:41:d7:de:31:
5b:29:f7:da:14:83:6a:64:0a:66:4d:12:2d:19:02:e7:28:a8:
cf:d2:b1:4a:9f:28:d2:e4:16:6f:80:5a:d9:10:14:5b:08:a2:
4e:cc:4a:51:12:22:48:31:0b:60:18:11:8c:15:53:fb:9e:e6:
3b:c7:df:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:59 2026 by rpki-client