
$ rpki-client -vvf rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/84BE275E976C11F0867B3309C4F9AE02.roa
File: 84BE275E976C11F0867B3309C4F9AE02.roa (raw, json)
Hash identifier: CpP4/hcnXIR7veugCMThSACinZW+qkZzHANhaqtAI3U=
Subject key identifier: 9D:CD:91:41:2C:8A:6B:A0:87:AA:8B:06:FD:6A:19:24:B4:4A:DE:6E
Certificate issuer: /CN=A917960F/serialNumber=8125B06E074C28C2F82105C43100049EDF6E00F8
Certificate serial: 56
Authority key identifier: 81:25:B0:6E:07:4C:28:C2:F8:21:05:C4:31:00:04:9E:DF:6E:00:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSWwbgdMKML4IQXEMQAEnt9uAPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/84BE275E976C11F0867B3309C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:19:08 +0000
ROA not before: Mon 22 Sep 2025 04:29:56 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 154258
IP address blocks: 45.115.40.0/23 maxlen: 23
45.115.40.0/24 maxlen: 24
45.115.41.0/24 maxlen: 24
2402:2d60::/32 maxlen: 32
2402:2d60::/36 maxlen: 36
2402:2d60:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.crl
rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSWwbgdMKML4IQXEMQAEnt9uAPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917960F, serialNumber=8125B06E074C28C2F82105C43100049EDF6E00F8
Validity
Not Before: Sep 22 04:29:56 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a3da5c-dc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:20:d3:bd:f0:f4:63:b5:bf:31:73:df:3a:
9d:16:70:46:13:a7:67:e9:bd:dd:e0:bf:ba:b3:a8:
9a:3a:47:3f:a5:d8:5b:d5:c9:b0:9d:d2:17:bd:64:
76:28:ac:b7:47:3b:b5:8d:5a:f7:39:0b:58:43:90:
8f:31:eb:d4:71:cc:16:7d:de:31:90:80:7f:36:6c:
a8:93:18:e9:14:18:51:06:82:28:e2:74:a8:8d:00:
0b:15:77:9f:fe:f0:8b:65:60:20:61:2e:e3:d9:d8:
04:25:75:5a:26:db:0a:ab:94:49:18:5a:88:c4:28:
15:fd:54:6b:05:f1:5a:46:9a:12:95:c4:59:9d:d9:
6d:36:9a:99:86:8a:42:b6:6f:8b:ed:95:8a:2e:13:
de:4f:0e:1a:48:8f:63:7e:b1:9b:53:03:3b:a0:34:
21:0b:5a:a8:6b:84:21:fc:cf:af:9a:a0:1b:b2:f4:
15:60:37:aa:14:0d:8e:6b:09:5f:27:9a:f4:db:27:
10:c3:10:d9:61:2c:1c:bb:f3:ed:1a:76:dc:a8:ec:
a9:7e:43:2b:e7:fe:57:80:57:94:07:10:4c:d1:67:
6f:7e:c0:2a:1c:d1:2c:97:7e:4f:4a:b2:17:3b:a9:
7f:e6:a9:0e:74:d2:3c:4f:93:24:75:d2:3c:36:7c:
e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CD:91:41:2C:8A:6B:A0:87:AA:8B:06:FD:6A:19:24:B4:4A:DE:6E
X509v3 Authority Key Identifier:
keyid:81:25:B0:6E:07:4C:28:C2:F8:21:05:C4:31:00:04:9E:DF:6E:00:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/gSWwbgdMKML4IQXEMQAEnt9uAPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSWwbgdMKML4IQXEMQAEnt9uAPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917960F/BA35E0A8976B11F0AEE7A584C4F9AE02/84BE275E976C11F0867B3309C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.115.40.0/23
IPv6:
2402:2d60::/32
Signature Algorithm: sha256WithRSAEncryption
4b:45:74:af:93:15:10:ba:ca:6b:c2:e7:56:61:9a:4b:17:0e:
75:7f:62:5d:ac:a1:d9:e0:d8:0b:06:5c:70:80:13:8f:68:d6:
2f:99:00:89:36:d5:b5:e0:4f:d7:2d:58:7d:31:11:3a:f0:5e:
74:00:1d:98:cd:41:25:4e:d7:4d:5f:fb:1a:27:47:a4:76:4a:
a4:8d:e6:45:a7:fd:9f:f9:ef:9d:85:3e:aa:57:e3:f5:ea:77:
91:d2:cc:e0:11:b4:ae:17:be:0c:01:fa:38:14:4d:28:82:76:
b7:f9:92:2e:d6:68:6d:e5:ac:fa:b1:8a:96:ac:6c:ec:bd:e6:
3a:05:36:43:4a:b9:51:95:01:0f:ba:b8:0f:d3:dc:23:9f:dd:
a8:de:ad:a2:26:0d:13:e7:37:0d:c7:70:b0:f9:d2:aa:2d:a7:
4c:9e:da:4e:d6:aa:c7:96:e0:44:26:64:99:1e:de:43:90:65:
f5:b4:6a:2f:1d:f9:7f:1e:94:f1:62:28:23:e3:4c:54:6d:45:
91:77:44:c5:4b:62:ce:61:7a:94:b7:44:6a:62:05:a5:a3:10:
bf:88:12:f6:1f:c0:dd:84:59:bb:d0:b0:80:20:a7:9e:e1:a8:
87:83:59:f0:4f:63:0f:2b:a1:20:ce:17:30:03:d3:be:0a:90:
15:39:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:03 2026 by rpki-client