
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/55056D1CBABA11EB8A51C234C4F9AE02.roa
File: 55056D1CBABA11EB8A51C234C4F9AE02.roa (raw, json)
Hash identifier: PJtMmmzqWr4Ah2oRz29LH07ry6ra6iCiilV599rXJrQ=
Subject key identifier: 5B:66:AE:51:38:C9:C2:75:45:E9:5E:5F:8C:88:21:9C:9A:25:0D:10
Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
Certificate serial: 0674
Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/55056D1CBABA11EB8A51C234C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:57:38 +0000
ROA not before: Wed 10 Sep 2025 23:06:09 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 24112
IP address blocks: 202.45.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl
rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1652 (0x674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
Validity
Not Before: Sep 10 23:06:09 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a453e2-f8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:88:a2:7b:19:c2:10:d2:97:36:20:27:95:
a1:fc:5a:45:ce:14:a5:c8:2f:02:b6:e5:e7:28:3a:
2d:c6:a4:bc:9e:23:06:5b:13:65:a0:6f:f9:ed:6b:
23:37:4e:79:08:fc:91:a5:09:0e:44:f2:53:01:6c:
ac:3e:91:03:99:5f:46:2f:8a:ce:7a:94:29:90:b6:
a3:08:70:5c:62:0c:62:5c:c5:bf:67:c0:62:cf:df:
7f:b1:b0:a0:06:a1:e1:a2:5a:3e:e5:47:5d:b8:ee:
74:4b:0a:72:98:2e:94:5b:9d:b3:97:0f:fc:a2:1b:
10:65:03:f5:c1:8c:56:8f:9f:18:47:ac:30:70:ce:
ee:b9:7e:ff:ae:71:07:e6:1a:e5:a0:40:a7:1e:03:
76:bc:04:a4:98:9e:6c:8b:11:28:2f:7c:f3:e2:1c:
5d:57:5a:5b:6c:98:a2:02:54:96:02:47:3f:33:80:
a3:28:1f:fe:32:d0:4f:12:7b:35:ba:03:16:39:fa:
45:5f:f3:6d:5a:51:05:e3:e0:ea:0e:7b:1a:c2:6e:
81:79:53:b0:52:d3:2c:f1:6f:b1:69:17:77:4e:b3:
77:f3:1b:00:9b:5d:cc:29:7e:08:7a:b6:00:fc:a8:
c1:79:1a:d7:e3:f0:bc:0c:b6:bd:a9:0e:43:88:b3:
2c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:66:AE:51:38:C9:C2:75:45:E9:5E:5F:8C:88:21:9C:9A:25:0D:10
X509v3 Authority Key Identifier:
keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/55056D1CBABA11EB8A51C234C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.45.14.0/24
Signature Algorithm: sha256WithRSAEncryption
48:72:01:a5:df:c2:1c:e3:08:11:c6:f6:b3:a1:4e:1e:a8:3f:
43:4e:cb:ca:b7:34:46:0e:89:87:f8:46:72:91:bf:10:bf:82:
c2:e6:73:2e:c6:7a:88:61:88:70:b2:46:6e:b6:c2:75:45:88:
fb:d6:7e:c3:78:ae:37:35:7a:1f:05:a4:7e:0d:16:f6:48:fd:
32:46:6d:dd:99:8e:fd:54:7c:2e:75:3c:00:34:7e:97:c0:7e:
8e:b6:d9:8a:0e:9c:9d:80:fd:f4:06:61:78:96:69:64:9b:7a:
84:6c:42:1f:a7:8e:3a:33:87:5f:9d:f1:00:7c:7a:75:7a:9e:
25:91:8e:fd:bd:17:81:c1:4e:47:66:59:30:26:ca:fb:36:49:
b3:23:5d:0e:4d:d0:af:ea:e8:ba:87:e9:49:0f:30:25:a9:94:
94:6c:ed:90:25:71:50:2d:e0:cf:f3:a6:87:45:45:80:51:3c:
ed:18:46:62:c0:18:6e:8a:97:ea:73:7c:db:0e:05:bb:5f:d2:
9f:f4:75:fd:3c:3d:6c:07:a0:66:c8:3a:38:d3:c5:0f:7e:eb:
2d:1b:5a:a0:a0:0c:a0:af:25:41:42:89:69:75:ae:34:d4:cb:
1d:8e:ff:df:98:be:0f:30:f4:15:35:69:e1:71:ea:9c:c8:57:
4f:2a:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:11 2026 by rpki-client