
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/52850542A60811EF91FB1113C4F9AE02.roa
File: 52850542A60811EF91FB1113C4F9AE02.roa (raw, json)
Hash identifier: 7ZACF84BticmqYcy0cTQt7odfs1cGVq62PyCzOJA14k=
Subject key identifier: 88:A2:73:10:94:08:80:A3:05:39:B7:51:2F:6A:1A:A4:1A:C4:05:E3
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3CF8
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/52850542A60811EF91FB1113C4F9AE02.roa
Signing time: Fri 29 May 2026 00:25:50 +0000
ROA not before: Fri 29 May 2026 00:25:50 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 20200
IP address blocks: 45.250.221.0/24 maxlen: 24
45.250.222.0/24 maxlen: 24
45.250.223.0/24 maxlen: 24
61.251.182.0/24 maxlen: 24
101.53.75.0/24 maxlen: 24
115.71.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:22:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15608 (0x3cf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: May 29 00:25:50 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6a18dd0d-b9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:93:66:c0:10:3f:af:0d:c7:a0:5b:4f:bf:
01:54:82:8e:fa:6a:f0:ed:90:a4:a3:dc:39:75:3b:
03:cc:80:ee:df:16:f2:f8:56:ae:de:66:c1:76:f2:
ba:bb:8f:c6:75:e3:62:80:14:55:ed:ad:e7:a9:f2:
40:9e:85:e8:da:61:6c:21:df:1b:2f:3e:67:50:26:
f0:11:55:fb:72:b2:73:c3:96:74:9c:66:13:da:2c:
5f:42:4d:99:e5:3c:3d:82:4b:66:2e:02:0a:23:24:
2f:cd:a2:7f:96:df:e2:02:7a:a5:c2:a3:3d:64:9a:
bb:4e:29:7e:4d:be:3e:a1:d6:1a:f0:16:7c:94:65:
4f:70:9e:76:ca:65:02:53:64:40:d4:b4:c3:b9:50:
e8:06:ff:29:ff:a9:01:a5:ac:0b:91:74:b9:67:19:
39:16:c6:8a:22:ac:fb:58:16:50:a3:b9:12:66:53:
17:ea:c7:69:de:20:0f:11:81:a4:95:10:f4:b5:91:
da:0b:e6:37:15:aa:7b:ff:30:47:5c:b0:a4:52:42:
55:d0:1f:11:b4:13:a2:75:27:c1:cd:5a:c7:42:ca:
38:fa:90:7f:ad:d0:4c:87:98:61:ba:6f:18:a2:8a:
9f:52:a7:40:b9:14:23:02:ff:ac:54:31:8a:9f:66:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A2:73:10:94:08:80:A3:05:39:B7:51:2F:6A:1A:A4:1A:C4:05:E3
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/52850542A60811EF91FB1113C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.250.221.0-45.250.223.255
61.251.182.0/24
101.53.75.0/24
115.71.26.0/24
Signature Algorithm: sha256WithRSAEncryption
10:3b:dc:34:2e:60:7e:60:96:c7:80:50:6d:b1:86:ec:89:32:
c4:6e:19:d1:c1:45:ba:1e:7f:d1:a3:9b:ed:19:70:e7:48:73:
cf:ce:22:a7:4c:74:fd:43:fa:61:a5:b9:67:46:20:18:05:7c:
1f:10:03:66:35:27:74:48:07:43:d8:df:1a:2e:20:6d:ec:26:
89:c3:1d:9b:fe:22:74:bd:cf:56:28:bd:9f:9d:88:b1:2e:63:
bc:d4:69:75:34:fe:4b:a9:96:4b:34:c4:2d:89:37:85:af:f1:
8e:e6:08:f2:7c:6f:03:e8:6e:ee:51:fe:62:66:36:ce:dc:6e:
36:70:4d:d3:19:ce:ce:62:c1:45:9f:d2:16:a0:7d:a4:f7:cb:
cf:e4:8e:63:e3:a9:04:aa:85:e0:57:25:f5:f2:7c:05:79:96:
75:61:7d:72:17:a4:12:3c:72:87:bb:36:9f:6b:46:b6:2d:4c:
93:30:d8:bc:37:79:7d:a9:4d:c8:29:f6:9e:b3:56:18:53:05:
d1:d6:5b:d7:8b:87:d5:11:bb:25:b7:67:1d:d5:1c:5f:52:6d:
e0:70:28:e3:b1:5d:e0:42:f2:6f:33:35:ff:8d:ec:a7:c6:b9:
3b:d6:b7:d7:25:e7:35:3a:e5:71:5e:07:56:00:26:c8:19:3d:
02:ef:0b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:43:58 2026 by rpki-client