
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/B752BBF0EF0811F098A4972A416F56BC.roa
File: B752BBF0EF0811F098A4972A416F56BC.roa (raw, json)
Hash identifier: rSx6SG/CH+Eqp7hGNaOrkPucM6ELj4c471xwycPS5Rc=
Subject key identifier: FD:87:AC:80:D9:03:3E:0C:27:6C:2C:D7:BF:D9:F6:F2:1F:92:54:F1
Certificate issuer: /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
Certificate serial: 70
Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/B752BBF0EF0811F098A4972A416F56BC.roa
Signing time: Sun 01 Mar 2026 16:14:58 +0000
ROA not before: Sun 11 Jan 2026 16:15:16 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 142192
IP address blocks: 45.119.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl
rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:56:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32
Validity
Not Before: Jan 11 16:15:16 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a46602-5e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:fa:58:77:ea:7a:f6:59:90:ba:fe:56:27:
fa:b5:d1:af:29:b3:ce:3d:2f:ee:ce:1d:ac:66:57:
cc:aa:c6:83:ed:62:64:b9:21:cc:f8:60:52:65:af:
0f:ad:33:b4:64:30:37:53:31:f1:a2:5d:00:09:1a:
63:ce:bf:73:ed:94:cc:2d:93:2b:d6:56:9d:e4:1b:
58:27:e9:9e:d4:c8:10:37:cc:3b:63:7d:61:f1:f3:
45:e9:d4:50:bb:f0:06:1a:7a:7f:80:78:aa:9d:27:
33:a1:44:39:5f:f0:4f:11:bf:cb:f3:e1:99:52:f7:
5f:b9:f9:aa:d2:c2:71:b4:a4:9b:0e:da:b4:60:02:
17:ae:9e:57:23:7c:6c:39:b3:d2:9c:08:53:2e:81:
6c:99:0c:82:74:f2:a7:ae:27:94:3d:c3:1d:c9:ad:
e6:d5:ca:74:71:5f:20:93:f1:3c:40:58:bf:d8:f6:
2b:c0:40:a9:2a:40:9c:b0:fc:4b:88:f3:9c:02:c4:
a1:b3:39:c2:d6:a3:4f:12:37:ad:e1:98:74:d0:1b:
ee:c0:ea:1c:a2:9d:d9:35:f5:a7:22:da:5f:21:a1:
03:b9:2b:90:d8:a8:42:82:83:ee:bd:3e:17:61:20:
01:33:98:2a:02:37:87:32:f5:88:16:58:71:31:14:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:87:AC:80:D9:03:3E:0C:27:6C:2C:D7:BF:D9:F6:F2:1F:92:54:F1
X509v3 Authority Key Identifier:
keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/B752BBF0EF0811F098A4972A416F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
45.119.121.0/24
Signature Algorithm: sha256WithRSAEncryption
13:61:82:68:20:39:7a:a8:4b:01:1d:c8:04:91:da:c5:18:13:
e8:39:8d:28:f7:20:6c:d3:91:db:ae:df:0a:70:02:ca:81:8a:
09:c4:f4:0c:9c:5a:e0:f6:a5:9c:c1:ce:13:f0:d4:de:f8:b3:
7a:19:10:89:96:68:36:28:f8:3a:69:04:39:ca:2c:cf:59:ed:
5c:bf:ee:a6:d1:11:d3:f0:b6:2d:b2:d9:e4:27:9e:35:9e:5e:
f7:48:c8:c8:43:dc:4e:03:24:ae:5f:de:b6:d1:a0:41:e4:56:
70:83:ee:b6:aa:17:3d:92:7b:79:2c:a1:1f:dd:51:c8:47:65:
c3:52:bf:55:bd:da:de:62:0c:e9:83:81:e9:65:6f:57:6e:78:
4e:4c:e2:4d:2a:1e:86:c3:b4:ee:9f:09:8d:af:dd:54:20:38:
14:91:21:f4:7f:70:39:8b:c6:a0:ac:1b:f1:09:c2:81:db:ac:
02:02:7e:a0:77:e1:bb:ef:c6:13:a2:b0:3c:7d:96:96:34:fe:
4e:e3:fb:b0:00:23:10:00:f8:5a:f9:f7:be:ee:0f:32:a5:29:
bf:9e:18:5d:9d:de:d3:4f:26:b0:36:f7:14:76:0d:04:c7:5d:
af:3c:38:13:3d:37:00:7e:af:03:91:aa:96:8b:a5:40:6d:a3:
3f:1e:56:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:08:06 2026 by rpki-client