
$ rpki-client -vvf rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/ABA9F4B8AF8411EABF9F844DC4F9AE02.roa
File: ABA9F4B8AF8411EABF9F844DC4F9AE02.roa (raw, json)
Hash identifier: /w4t5dhbmQEa84JEDJ39VitjjFskPm/mEpnYuZ0T6wQ=
Subject key identifier: 5A:4B:8F:07:E9:97:4B:47:72:E1:E1:19:BD:D5:EF:2C:CB:1D:6B:AF
Certificate issuer: /CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
Certificate serial: 2546
Authority key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/ABA9F4B8AF8411EABF9F844DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:48:41 +0000
ROA not before: Fri 24 Oct 2025 16:03:11 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 9930
IP address blocks: 119.110.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl
rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9542 (0x2546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650A5, serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
Validity
Not Before: Oct 24 16:03:11 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a47bf9-30ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:11:dd:6f:da:b8:b0:fd:19:45:c4:49:96:
a9:ad:cf:e1:3e:cf:eb:90:b5:66:a6:50:c7:63:98:
2c:fd:8d:95:a5:40:28:c4:4d:ed:94:cf:1c:a8:0e:
b4:0c:2d:ad:20:02:2a:4a:75:23:3f:2a:b3:3e:f7:
41:04:d9:87:ed:de:35:da:ec:5c:d6:6b:2b:c5:bf:
74:35:8c:05:ab:6c:9b:5c:3f:cb:1b:22:c8:db:5c:
e5:04:6e:22:04:f9:5b:53:8d:03:7b:ad:34:f4:2b:
0e:38:07:d5:38:71:d8:be:18:42:bd:4b:50:35:f2:
31:36:a3:81:78:a9:90:dd:fe:2f:08:4b:29:1f:3c:
c6:d4:6b:bd:0e:e9:95:3d:60:96:7f:15:1d:ac:08:
c5:fb:39:10:69:89:38:50:9c:06:d5:2d:de:2d:83:
0d:6b:c1:07:1f:e6:b2:56:27:e6:91:66:15:fd:22:
a2:55:30:f7:63:07:2a:c3:45:a6:b0:59:f5:5c:04:
4c:5a:1c:24:f7:bb:c1:cf:12:6f:d2:f9:19:72:59:
7d:cd:71:72:c3:9a:1d:1f:cc:a5:76:c6:0b:6f:db:
03:27:4f:1d:6d:20:2d:77:f7:89:f2:1b:f7:27:bc:
c5:13:9a:d1:6a:5e:93:ff:cd:e2:0e:d1:58:50:d7:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4B:8F:07:E9:97:4B:47:72:E1:E1:19:BD:D5:EF:2C:CB:1D:6B:AF
X509v3 Authority Key Identifier:
keyid:40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/ABA9F4B8AF8411EABF9F844DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.110.128.0/18
Signature Algorithm: sha256WithRSAEncryption
25:b6:fb:a4:79:8d:e1:f1:77:9b:3a:83:77:2a:ea:aa:07:4f:
b3:b2:c8:c8:da:76:b1:b6:e4:43:d2:3d:b3:7d:f2:27:1a:14:
99:ec:be:a1:30:eb:4f:ea:a6:e6:f6:a6:6a:58:51:2e:b0:48:
74:b9:b0:f1:30:29:b3:3f:4f:ec:13:95:05:ef:fb:04:b5:fd:
f6:9e:d8:8d:7f:b8:d9:82:22:f2:fc:b4:22:02:fc:e2:3e:46:
01:6c:9d:bd:22:67:f4:01:a1:03:ff:ef:c6:6f:04:bf:6e:3a:
70:17:4c:6f:c6:ab:c2:d8:8a:6a:dc:6d:f3:47:b9:ed:70:b7:
de:bc:f3:da:21:2d:ed:68:dd:32:f5:d8:09:73:67:8f:70:60:
93:cb:75:f2:52:be:bd:23:72:ba:f1:d3:41:01:b5:76:e2:7c:
ae:89:f5:ec:ad:17:53:3d:e8:ad:e8:1f:ab:ac:a4:46:a0:3c:
f1:0d:4a:c5:de:1b:b6:7c:16:70:f7:56:91:4e:41:d9:f4:8f:
c8:98:26:46:c5:ad:19:3b:94:87:a2:d8:8b:fe:07:9f:37:06:
14:fb:56:0e:54:b9:50:a6:5f:ea:06:76:26:36:0f:55:30:02:
02:d2:2c:ab:4e:de:ca:ca:25:16:0a:99:fc:ac:d3:af:a5:58:
74:59:42:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:53 2026 by rpki-client