
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/450039D4FF2E11F0AFF66B6D89EE528E.roa
File: 450039D4FF2E11F0AFF66B6D89EE528E.roa (raw, json)
Hash identifier: OWCucafOwXwEDRCjulLNjuJ23YlVUqM5OZtvjWuvgwo=
Subject key identifier: 71:FF:6D:79:79:EF:E0:85:21:C5:AE:0B:41:78:35:B8:0F:63:1A:D8
Certificate issuer: /CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8
Certificate serial: FA
Authority key identifier: 40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/450039D4FF2E11F0AFF66B6D89EE528E.roa
Signing time: Sun 01 Mar 2026 16:57:03 +0000
ROA not before: Tue 03 Feb 2026 05:25:50 +0000
ROA not after: Tue 02 Jun 2026 00:00:00 +0000
asID: 142158
IP address blocks: 2001:df4:a4c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl
rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:05:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146179, serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8
Validity
Not Before: Feb 3 05:25:50 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=69a46fdf-be51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:3c:92:74:fd:88:4c:19:e6:7e:12:5d:90:
b7:64:32:75:42:8d:c6:c8:b7:28:36:1b:a0:db:9b:
a0:64:c8:6f:1e:19:29:9b:5a:37:a8:e1:6a:1a:18:
b0:f7:94:2e:1f:54:46:39:ea:52:3d:a5:c1:d3:02:
e8:4a:3b:bf:f2:e4:12:74:69:93:5e:bf:43:a5:42:
6f:82:ce:e6:5a:36:84:bd:33:33:ce:ec:27:3d:18:
0c:0b:97:ab:33:1d:c7:ee:2e:11:a2:92:f9:11:24:
d5:0b:fe:5c:ca:db:37:a8:98:f0:3f:5c:7f:25:cd:
a9:95:a7:bb:46:3b:3f:12:3f:19:da:c8:b3:3b:0b:
6d:94:ed:88:8c:d0:3d:32:5b:d8:cf:fc:c3:9d:62:
ff:d4:69:c4:b5:54:e8:08:43:a7:64:52:7b:32:35:
db:93:6f:52:d0:ed:56:41:9e:89:9e:c5:b5:ea:3a:
0a:96:f2:f1:6b:ec:74:11:4d:df:47:f5:4c:45:7b:
30:4b:44:a8:43:62:94:b9:b3:94:10:b2:8d:3c:d0:
88:19:ff:bf:2f:21:47:83:aa:67:2d:fb:bd:c6:d8:
ab:54:62:10:00:de:64:ea:c6:3a:0f:c3:26:65:04:
2c:bc:28:8e:6d:cd:0d:55:c4:63:be:f9:9e:fd:e1:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FF:6D:79:79:EF:E0:85:21:C5:AE:0B:41:78:35:B8:0F:63:1A:D8
X509v3 Authority Key Identifier:
keyid:40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/450039D4FF2E11F0AFF66B6D89EE528E.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:a4c0::/48
Signature Algorithm: sha256WithRSAEncryption
a6:cd:a7:8c:b9:8a:57:c0:d9:47:2f:8a:a7:92:ab:17:d3:2c:
61:8d:54:d6:07:b1:07:41:69:5e:38:52:24:07:85:d3:96:b8:
de:de:99:a4:27:77:a5:1c:b9:b8:51:9e:8c:d8:d7:7f:0e:c0:
ce:b8:98:0c:87:32:79:8e:cb:b1:4d:42:c8:c3:5f:fe:f1:dd:
04:67:b6:22:3f:ba:b7:b3:3d:15:15:17:bf:51:78:5b:38:3a:
00:cf:b5:00:b4:49:e0:79:1a:c8:3a:32:37:fb:e0:12:c1:dc:
16:b0:b2:44:2c:c6:26:f7:e1:a5:a6:a9:36:8f:d6:22:87:f0:
db:18:e2:b7:ba:7a:4f:fe:96:e5:5e:36:61:6b:85:18:b4:b9:
5c:d1:ee:d0:24:54:ae:e2:92:27:5b:7f:8a:9d:79:8c:06:c4:
cb:7b:7a:49:26:79:26:c6:a9:c8:bb:01:0f:55:c5:10:8d:5e:
4a:35:d4:40:07:73:3b:4f:e8:92:43:c2:3c:c0:1c:1e:30:63:
32:65:e3:cf:db:ad:7f:78:b3:36:e7:9a:64:fa:02:4f:bf:be:
6a:ff:f8:87:d2:91:8c:29:f2:4b:6f:b7:01:7f:67:7b:5c:27:
6a:81:24:cd:89:24:0a:c5:54:a3:83:90:bd:36:18:03:51:1a:
60:0f:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:37:17 2026 by rpki-client