
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/746BB148B2CC11F090B61F0FC4F9AE02.roa
File: 746BB148B2CC11F090B61F0FC4F9AE02.roa (raw, json)
Hash identifier: lQ2KqXxx9uSPjCkCGpoqpsDx0acUQkXXBdaMXx4sCpQ=
Subject key identifier: 66:B7:F7:A1:D4:45:C5:B3:DB:AC:0D:D5:4E:23:7A:C0:FB:07:36:B4
Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA
Certificate serial: 022A
Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/746BB148B2CC11F090B61F0FC4F9AE02.roa
Signing time: Mon 27 Oct 2025 00:32:45 +0000
ROA not before: Mon 27 Oct 2025 00:32:45 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 4826
IP address blocks: 45.117.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:14:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA
Validity
Not Before: Oct 27 00:32:45 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68febdac-ddac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:15:df:8f:07:1f:38:8a:52:3e:b1:10:e6:41:
a0:4a:cf:cd:e9:b0:8d:93:9b:3d:85:5d:86:59:59:
f9:41:25:18:10:e6:16:e3:64:e1:08:9c:29:ef:45:
90:9b:37:2d:26:bf:13:5c:83:10:4d:12:98:7c:11:
1c:25:b2:b2:d2:af:dc:37:bf:54:3d:d0:f1:0e:cb:
ee:aa:61:90:d9:37:94:67:3a:f6:c9:08:f8:53:5b:
ab:ca:77:9b:a9:50:cd:fc:8f:c8:ff:d1:c6:39:0f:
0e:ec:7d:cc:37:a2:b2:86:4c:41:19:10:7c:a2:73:
e6:03:c9:32:db:57:ef:62:e2:1a:2d:73:f7:25:75:
59:2f:13:bf:d5:2e:3d:f1:4e:7b:5f:64:17:08:e5:
1f:43:9d:49:a8:9d:a7:f5:b8:98:cc:10:25:0b:f4:
f6:e6:9e:5e:9d:00:0a:24:eb:24:e6:b0:65:c4:d1:
ab:5f:3d:33:28:df:aa:d8:fc:ad:be:77:71:b2:96:
64:0a:b6:58:c4:b2:9a:ba:4b:79:3f:ba:a8:e4:44:
22:85:43:af:fd:a1:36:26:2e:57:86:0c:b0:6b:34:
10:cd:44:0a:bd:bb:ac:1a:5d:02:00:6e:d3:68:79:
fd:8a:83:48:bf:24:3a:2e:85:1c:39:41:be:a8:cf:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B7:F7:A1:D4:45:C5:B3:DB:AC:0D:D5:4E:23:7A:C0:FB:07:36:B4
X509v3 Authority Key Identifier:
keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/746BB148B2CC11F090B61F0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.24.0/24
Signature Algorithm: sha256WithRSAEncryption
86:7a:b6:1c:16:62:3b:f3:04:a8:45:df:24:17:04:a8:ce:26:
9d:36:e0:b3:bd:88:39:d4:e7:2c:ed:1c:ef:d5:f3:b7:10:5b:
e6:7d:27:2c:5d:fa:6b:39:36:9a:b1:98:c1:72:4a:a1:7a:d4:
b3:a2:5c:a2:b4:2d:1f:91:76:0f:1d:0e:71:23:43:47:44:61:
5b:7b:a1:c9:5c:fc:77:76:5f:a8:9b:da:55:56:22:50:e0:70:
89:5f:eb:86:d4:e4:a4:86:3d:6f:4f:c8:58:cf:ee:32:3b:81:
ef:de:7b:54:f9:07:4b:b4:59:dc:6d:39:aa:09:e6:ce:dc:fa:
b0:05:20:06:87:5d:83:3b:5d:b4:50:2b:66:43:1d:0f:8f:9c:
90:e2:58:8a:5f:ff:13:e5:95:3c:1c:0e:7f:20:ae:a8:e4:ac:
29:5e:41:8f:4a:1c:e7:2f:17:93:f3:5b:4c:2c:1b:20:44:0e:
72:46:cf:71:74:5c:8c:cd:c5:cd:15:6d:c6:a3:37:4a:a4:13:
97:ba:73:4e:e6:c5:2a:a7:d9:cf:f7:92:b0:1f:39:01:2a:11:
f7:31:ea:58:7e:59:cc:be:f2:b9:eb:5a:b8:6c:2c:83:5e:75:
58:4b:57:1c:e7:7f:4d:25:3a:e9:fd:be:49:2f:b3:f2:b5:7c:
96:6f:80:47
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdFOTkxMTAvBgNVBAUTKEUyNTM0RDI2Qzc4Qzk3MDE3OTA5OTY0MzhDMTE0MTA4
MjU0Nzc2QUEwHhcNMjUxMDI3MDAzMjQ1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGZlYmRhYy1kZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7xXfjwcfOIpSPrEQ5kGgSs/N6bCNk5s9hV2GWVn5QSUYEOYW42ThCJwp70WQ
mzctJr8TXIMQTRKYfBEcJbKy0q/cN79UPdDxDsvuqmGQ2TeUZzr2yQj4U1uryneb
qVDN/I/I/9HGOQ8O7H3MN6KyhkxBGRB8onPmA8ky21fvYuIaLXP3JXVZLxO/1S49
8U57X2QXCOUfQ51JqJ2n9biYzBAlC/T25p5enQAKJOsk5rBlxNGrXz0zKN+q2Pyt
vndxspZkCrZYxLKaukt5P7qo5EQihUOv/aE2Ji5XhgywazQQzUQKvbusGl0CAG7T
aHn9ioNIvyQ6LoUcOUG+qM8DKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGa396HU
RcWz26wN1U4jesD7Bza0MB8GA1UdIwQYMBaAFOJTTSbHjJcBeQmWQ4wRQQglR3aq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U5OS8wQUNFMTlCMDdB
ODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3RjVDWlpEakJGQkNDVkhk
cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjdFOTkvMEFDRTE5QjA3QTg1MTFFREFENjkyODg3QzRGOUFFMDIvNzQ2QkIxNDhC
MkNDMTFGMDkwQjYxRjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtdRgwDQYJKoZIhvcNAQELBQADggEBAIZ6thwWYjvzBKhF
3yQXBKjOJp024LO9iDnU5yztHO/V87cQW+Z9Jyxd+ms5NpqxmMFySqF61LOiXKK0
LR+Rdg8dDnEjQ0dEYVt7oclc/Hd2X6ib2lVWIlDgcIlf64bU5KSGPW9PyFjP7jI7
ge/ee1T5B0u0WdxtOaoJ5s7c+rAFIAaHXYM7XbRQK2ZDHQ+PnJDiWIpf/xPllTwc
Dn8grqjkrCleQY9KHOcvF5PzW0wsGyBEDnJGz3F0XIzNxc0VbcajN0qkE5e6c07m
xSqn2c/3krAfOQEqEfcx6lh+Wcy+8rnrWrhsLINedVhLVxznf00lOun9vkkvs/K1
fJZvgEc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:23:39 2025 by rpki-client