
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/294CEBA68FDD11EDBC45E84DC4F9AE02.roa
File: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (raw, json)
Hash identifier: hJLpP/cI9jDZ/8DhHypoNSXnMVx/3+PYyqeD/Uo9Ujw=
Subject key identifier: 10:AE:45:EB:5C:E9:39:DF:B9:CF:01:CD:E3:C0:26:30:6A:43:A0:5A
Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Certificate serial: 08E6
Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/294CEBA68FDD11EDBC45E84DC4F9AE02.roa
Signing time: Thu 04 Jun 2026 20:27:13 +0000
ROA not before: Thu 04 Jun 2026 20:27:13 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 141366
IP address blocks: 45.249.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2278 (0x8e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Validity
Not Before: Jun 4 20:27:13 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a21dfa1-451c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:c6:b7:fe:79:1a:ab:db:2e:d9:7d:86:91:
c6:ed:f2:9b:b9:bb:09:00:40:cd:40:56:7a:b2:53:
0c:54:08:21:7d:4d:35:fb:e0:ad:aa:0e:5c:ad:7a:
cb:dc:41:ad:0c:b8:64:f4:e1:83:53:e3:cb:6b:1e:
30:1b:0c:db:2d:92:0f:a4:97:50:62:4d:6f:e5:0f:
26:e5:ca:d4:c4:f2:c9:52:ea:9a:a5:58:e3:fa:bd:
fd:92:be:4e:c9:f3:7f:a9:d1:57:26:43:4f:5b:b9:
73:33:13:f1:7a:6b:d0:bd:eb:e9:85:d2:22:73:e7:
e8:c1:21:34:65:7d:7f:9a:c1:6a:a9:e9:34:aa:4c:
b1:4a:02:46:d1:3b:25:10:02:17:82:b9:0e:6e:1c:
f6:c7:22:09:94:c1:88:69:63:8f:93:2e:09:24:47:
59:ed:d5:5c:d0:41:0f:8c:57:79:fd:d4:88:7f:1d:
89:33:61:93:3c:c6:6b:02:e2:69:7d:b5:e2:6a:8c:
50:5b:5b:70:9a:db:4c:bf:3c:d2:7d:b5:f7:e4:ae:
01:1f:6b:0e:07:df:80:03:a2:3f:47:5b:32:7f:23:
f7:e3:e7:3e:88:fe:bc:a4:8a:11:b8:9c:97:ef:c2:
4c:20:10:a0:25:ea:52:c6:97:5d:00:94:9b:49:7f:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AE:45:EB:5C:E9:39:DF:B9:CF:01:CD:E3:C0:26:30:6A:43:A0:5A
X509v3 Authority Key Identifier:
keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/294CEBA68FDD11EDBC45E84DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.249.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:68:ac:1a:f1:ec:4e:5c:05:20:30:db:cd:38:f5:f9:d4:c0:
8d:2e:90:4b:8a:85:49:67:30:53:b9:72:fd:4b:cd:d7:81:29:
f9:0d:a7:8b:24:bd:f6:d8:60:e1:91:fb:d8:14:cd:25:cd:93:
d1:fd:6a:05:43:f4:f0:af:af:4c:6c:1a:d6:f9:22:82:3a:d4:
4e:01:9b:c3:b5:b9:4a:57:76:b4:6d:99:e5:bc:38:b8:94:ec:
fc:ef:44:36:2d:39:b0:c3:c7:e8:97:52:ed:ce:cb:16:66:87:
cb:cb:c9:93:db:fb:de:cb:0d:14:23:c4:67:1a:5b:92:75:80:
c2:14:c1:2e:66:6a:cc:5f:dd:55:1d:ef:d1:91:5f:d3:7a:a7:
c2:88:30:3e:8a:24:96:89:ab:e7:df:ef:36:11:d5:9b:03:a4:
fe:99:e0:cf:b9:9a:bf:2f:ed:8c:87:eb:18:01:fa:85:b4:db:
46:64:01:f0:93:bf:80:a2:42:d3:40:ed:0e:a3:0e:4f:45:04:
2b:47:c1:1e:50:0f:25:9b:ab:7a:e9:ed:7b:55:c9:12:5b:ea:
94:a3:d5:b2:d3:85:54:cc:91:4d:99:96:01:88:37:36:bc:c8:
89:a8:0c:4a:83:db:e0:04:60:dc:9e:3f:3d:21:a1:7f:16:d4:
7f:f7:b0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:16:00 2026 by rpki-client