
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/0458A9A409FB11EA8742F60AC4F9AE02.roa
File: 0458A9A409FB11EA8742F60AC4F9AE02.roa (raw, json)
Hash identifier: LC97LkNyCch8PpadNtuDgtVq+g6dfVllu2MEvl1zkNM=
Subject key identifier: CA:EB:12:78:CD:25:99:2C:A8:F5:86:9D:23:00:CD:83:14:E3:A2:AB
Certificate issuer: /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Certificate serial: 3522
Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/0458A9A409FB11EA8742F60AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:23:53 +0000
ROA not before: Tue 02 Sep 2025 15:01:45 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 45268
IP address blocks: 202.45.159.0/24 maxlen: 24
203.201.48.0/24 maxlen: 24
203.201.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13602 (0x3522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Validity
Not Before: Sep 2 15:01:45 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a421c9-186b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:8c:13:12:78:5f:12:b1:d9:85:ee:4a:07:
25:54:92:46:c9:c3:81:ff:a5:0c:b9:b5:09:f2:10:
6e:0a:3e:5a:d8:ce:de:f9:10:c5:2f:81:dc:b0:d2:
e4:e7:e0:04:55:c1:0c:b1:f2:0a:79:55:af:18:e4:
84:98:c6:cc:bb:04:6b:7a:e2:71:78:48:3a:0e:ee:
74:b4:d5:d6:dd:19:97:ca:72:6a:cd:94:2b:56:d4:
60:1f:00:2f:50:30:75:62:c0:23:cd:38:05:a8:ae:
94:b6:89:60:c9:77:ef:17:79:25:82:32:99:2e:99:
9f:1f:50:2b:2b:1d:4d:19:fd:ce:d0:bc:bc:af:f4:
31:1d:47:17:8d:f4:d7:78:08:67:ba:59:a5:01:68:
b1:e5:6c:0f:8a:94:69:e6:8f:17:ab:d8:4f:44:8f:
bf:cf:3a:b7:8f:76:c3:01:68:46:d9:f7:3f:af:cd:
a0:1d:b2:c8:e4:c3:3e:11:4b:cc:2a:00:fd:0b:f2:
20:11:8c:e7:e3:e3:2a:4a:03:32:ea:02:53:89:60:
fd:27:13:ff:0b:7a:fc:53:d5:7e:49:08:bf:34:8a:
e6:8f:55:e8:a8:2a:e9:fd:16:83:49:d8:93:9d:50:
98:7a:38:96:9c:9b:99:35:ed:0a:0f:7f:c1:28:8d:
08:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EB:12:78:CD:25:99:2C:A8:F5:86:9D:23:00:CD:83:14:E3:A2:AB
X509v3 Authority Key Identifier:
keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/0458A9A409FB11EA8742F60AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.45.159.0/24
203.201.48.0/23
Signature Algorithm: sha256WithRSAEncryption
33:8b:52:63:16:0c:10:d3:84:55:c4:cb:27:5a:19:d9:cf:46:
a1:c5:ee:d2:3f:4f:59:72:ac:48:45:d8:c5:bf:42:ed:cb:1a:
91:a3:c8:97:7a:11:00:d5:7a:39:f7:61:fd:bb:f6:30:54:c5:
a4:ff:6a:f7:e4:f5:57:13:3a:1f:ef:1f:6e:c8:ac:92:bc:88:
aa:aa:9a:e6:1d:a5:10:e3:27:f3:37:fa:31:0a:3e:f3:f3:86:
82:a4:44:8e:fe:8e:79:d0:9c:69:a2:8d:7f:50:c8:8f:70:92:
c0:54:76:67:f8:ba:55:bd:03:85:47:d8:62:c3:55:81:e3:3c:
66:cc:7a:01:13:39:06:29:4e:8e:84:17:fd:40:1a:cd:ae:20:
38:65:85:3e:55:5f:e1:9d:35:59:2f:75:2c:74:9e:df:68:27:
45:68:50:dd:d8:25:ca:c0:98:64:ac:4a:ea:d2:ec:a3:08:8e:
d2:f6:52:15:b8:c4:de:a0:08:4a:16:98:a1:5a:b5:f5:ea:22:
6f:de:27:be:02:de:69:d8:9f:24:07:5e:b3:40:0e:ba:50:af:
fc:a0:f2:6f:df:c2:34:ba:3d:79:b1:04:8c:66:78:28:c9:aa:
a1:5a:ec:78:f5:58:d7:5a:94:b9:11:cb:46:ae:aa:d0:cc:3b:
47:f7:11:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:46 2026 by rpki-client