
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/E45745342AC411F0B2B1822CC4F9AE02.roa
File: E45745342AC411F0B2B1822CC4F9AE02.roa (raw, json)
Hash identifier: 0jjxNmOckcuBOP8oiIG4T7T2/8WMia0yzw78bfh8SRM=
Subject key identifier: 34:A4:36:1D:1A:1F:C2:32:31:CB:23:9F:09:0F:33:01:34:9F:ED:C2
Certificate issuer: /CN=A914CDF9/serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE
Certificate serial: 99
Authority key identifier: AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/E45745342AC411F0B2B1822CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:08:27 +0000
ROA not before: Tue 06 May 2025 21:55:58 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 45189
IP address blocks: 122.99.124.0/22 maxlen: 24
203.175.176.0/24 maxlen: 24
203.185.191.0/24 maxlen: 24
223.26.32.0/20 maxlen: 24
2407:3400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl
rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CDF9, serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE
Validity
Not Before: May 6 21:55:58 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3f3fb-bca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:c3:d1:19:a7:6d:e1:35:0f:67:a3:83:a6:
0f:12:34:5f:18:81:80:ab:94:bc:f7:57:b0:df:d1:
ff:92:6a:2a:91:77:47:0c:3c:35:91:5d:ef:98:f7:
f7:75:c6:40:e5:fd:5d:94:24:dd:47:bd:84:88:cf:
2a:c1:8a:13:8c:01:c7:de:4b:37:38:e3:21:2a:29:
1a:94:3d:1e:89:23:cc:88:df:8a:11:de:3a:d3:df:
13:fb:9b:75:b2:9a:89:a5:1d:df:ac:ac:10:a5:49:
c6:93:71:d0:a6:ec:52:9b:ee:4b:34:20:e3:49:eb:
86:78:8d:14:c5:16:6b:6b:03:67:f3:26:06:dc:71:
c7:43:c3:d1:06:7d:4a:8d:75:87:b0:00:34:11:42:
ae:31:b8:4a:b0:ac:f2:2b:40:46:65:33:ba:53:d1:
4c:56:a7:a5:cb:fe:5e:dc:7b:1f:2a:e7:52:12:7c:
10:9a:ba:55:e3:f0:ce:f4:db:2e:05:fc:17:44:fd:
21:71:56:26:55:39:69:cc:06:bd:56:19:fd:ea:31:
e2:7c:94:47:0a:be:db:a2:de:67:29:3d:90:f9:5e:
ac:80:d2:96:f5:a3:41:7a:eb:96:92:b3:96:c6:c3:
2c:a0:7a:cf:17:8a:dd:12:07:ec:1c:b7:89:cd:a3:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A4:36:1D:1A:1F:C2:32:31:CB:23:9F:09:0F:33:01:34:9F:ED:C2
X509v3 Authority Key Identifier:
keyid:AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/E45745342AC411F0B2B1822CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.99.124.0/22
203.175.176.0/24
203.185.191.0/24
223.26.32.0/20
IPv6:
2407:3400::/32
Signature Algorithm: sha256WithRSAEncryption
32:22:97:f4:47:2e:ef:2f:b4:62:d8:d7:82:82:96:ba:4d:5b:
aa:2d:34:1b:97:03:b0:82:46:90:bd:17:ef:b1:18:bd:2c:5c:
f1:78:d9:0f:aa:52:b8:b1:9f:b4:9b:86:5b:84:ca:a9:03:95:
2d:d3:7e:7c:23:17:54:3a:19:82:41:88:27:b0:8d:93:36:df:
1d:f8:b8:f0:36:72:81:79:2f:bf:c0:cd:a5:d7:0f:9f:f2:5c:
01:dd:23:76:cb:5e:b7:40:fe:93:9e:9b:1b:70:fa:09:2b:0f:
97:43:a8:09:62:c4:53:b1:e7:0b:5e:fe:66:ff:d7:a1:30:2a:
46:b8:ff:c4:e4:79:59:05:01:c3:3c:01:e8:3a:02:55:3b:9b:
58:c8:55:ee:45:c2:0a:79:d0:bc:f6:5b:6d:eb:6c:dc:5b:b0:
8e:88:83:2a:e0:dd:b9:ef:1c:7d:be:34:77:33:e3:df:f2:ca:
e9:20:b3:c7:36:d2:a2:22:c4:44:b1:1a:65:87:cd:a7:c2:7d:
45:4e:e9:74:a9:5b:0c:04:a5:46:1e:c9:c1:10:97:e1:f5:01:
58:59:8a:f0:9c:27:eb:d7:b5:4c:63:0e:1a:d9:fd:ea:fc:46:
10:93:b1:29:1c:e0:35:88:7d:98:fa:97:64:a3:b2:aa:98:3f:
ab:7b:32:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:39 2026 by rpki-client