
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/04545D1C9AB911ECBC6CFA20C4F9AE02.roa
File: 04545D1C9AB911ECBC6CFA20C4F9AE02.roa (raw, json)
Hash identifier: bfM/I9MI61wpx9SI9z0ncpfFzbqWQMVFRjvnxiVGThE=
Subject key identifier: CB:5A:8F:A6:32:8E:3B:FD:9D:67:F7:4D:28:B5:44:DC:AB:78:7F:C3
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 0694
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/04545D1C9AB911ECBC6CFA20C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:37:15 +0000
ROA not before: Sun 03 Aug 2025 00:06:29 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 32787
IP address blocks: 202.139.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1684 (0x694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Aug 3 00:06:29 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4875a-657d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:1d:a4:48:e7:12:7d:8f:23:75:be:a9:b8:
86:44:13:0d:f5:81:cd:d8:59:5a:16:ee:db:d0:7b:
52:36:f1:b6:25:6f:db:ce:96:42:49:82:14:ae:76:
43:34:6a:13:e6:8f:86:d4:ee:2d:5d:2b:9f:8b:22:
05:01:80:b5:1a:73:74:62:55:0c:28:5b:49:a2:19:
e9:1c:0c:a0:24:c6:de:ab:fc:92:f6:24:60:1b:e1:
4b:4a:ca:51:0e:07:dc:4d:a5:e8:59:7b:2b:e6:e0:
13:ca:24:41:4c:19:84:9c:72:37:9d:00:b9:7a:ec:
6c:d5:41:30:f1:21:f1:93:f7:58:64:ab:1c:06:54:
42:83:dd:b7:db:57:a8:0a:4b:56:e7:bd:02:e3:84:
e2:14:22:b0:a6:26:98:37:e7:e4:4d:07:cf:57:17:
0c:bb:2e:26:ba:b8:c1:bf:ec:b1:8f:42:42:59:25:
bb:e6:dd:bd:b0:ae:26:a2:e1:a2:61:6d:25:24:0b:
df:70:cb:0e:44:a8:f2:99:d5:58:b7:e9:de:12:b6:
03:15:20:86:0c:0c:e6:bf:88:15:73:2c:13:a2:cd:
36:c1:8e:1f:47:15:a0:80:5b:f4:61:25:08:e0:c5:
10:a3:b0:6e:84:a9:b6:d4:77:84:1b:e1:83:60:6e:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5A:8F:A6:32:8E:3B:FD:9D:67:F7:4D:28:B5:44:DC:AB:78:7F:C3
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/04545D1C9AB911ECBC6CFA20C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.139.113.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d6:f4:5f:1c:c4:39:00:bc:37:14:ca:ce:1a:c9:10:71:b9:
6a:9f:25:fb:45:d5:f2:2f:c1:05:74:f9:7d:4b:bf:7c:c2:07:
72:a5:e2:60:1a:60:2a:b7:44:4d:91:0a:53:ba:bf:e8:b4:7e:
38:e0:fa:8b:2d:11:9b:49:7b:e5:63:5d:2b:e3:cd:b8:5a:26:
67:e1:75:24:9b:a4:87:c3:0f:eb:12:6b:89:a1:1d:90:9b:85:
c7:12:6e:e5:e7:10:73:8b:e2:a7:fb:82:53:4b:71:d8:74:ae:
23:66:a1:30:ca:03:ac:7c:7d:67:e5:b0:19:0c:d2:2e:1b:86:
c4:e4:db:92:1f:de:7a:bc:20:43:69:d3:11:c6:bb:8f:a8:c1:
f0:b9:0e:f9:f8:0d:19:4e:2c:e6:b7:95:3a:d7:ee:cd:ef:e8:
69:08:94:fb:0d:0d:d5:3c:ae:74:35:0b:8a:a8:40:55:b0:0f:
d4:1f:6a:85:aa:f3:b4:98:85:df:87:6e:2b:9a:1d:4d:c4:a9:
a6:5a:91:37:f1:4d:f2:f0:bc:10:a3:b0:62:b0:44:93:f4:1f:
c6:9c:5c:19:4b:79:36:49:4f:b9:63:47:ee:b2:fc:34:37:b4:
77:bd:21:11:ab:4f:85:93:27:bb:b2:bb:48:14:c3:75:ea:b1:
7b:f7:44:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:52 2026 by rpki-client