
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/45395E28C8F411F0A2F04129C4F9AE02.roa
File: 45395E28C8F411F0A2F04129C4F9AE02.roa (raw, json)
Hash identifier: D2Zdr1KjCtW0v7SwktRTkUb9mkJrYGEuJhxB/QmO9bg=
Subject key identifier: B0:83:2D:04:F4:24:C7:53:A4:97:CA:BC:64:7C:ED:7C:F8:7C:BB:EE
Certificate issuer: /CN=A919B59F/serialNumber=FB858EFBAE93C3892D949BDC41FC446A8EBCEE1B
Certificate serial: 34
Authority key identifier: FB:85:8E:FB:AE:93:C3:89:2D:94:9B:DC:41:FC:44:6A:8E:BC:EE:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/45395E28C8F411F0A2F04129C4F9AE02.roa
Signing time: Sun 01 Mar 2026 05:58:32 +0000
ROA not before: Mon 24 Nov 2025 05:13:11 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139773
IP address blocks: 2001:df6:5ac0::/48 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.crl
rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B59F, serialNumber=FB858EFBAE93C3892D949BDC41FC446A8EBCEE1B
Validity
Not Before: Nov 24 05:13:11 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a3d587-5b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:2b:b0:1d:00:ae:a3:91:b1:95:75:ca:b7:
ed:82:74:66:15:bc:d9:60:9f:ed:e3:ce:be:17:41:
8d:a7:ba:19:40:d5:fd:32:79:bc:b2:e7:75:47:85:
a1:c9:e6:d3:a5:f5:a6:aa:53:f0:df:7f:29:bb:e6:
bb:b3:0b:2a:33:84:66:c8:27:fe:56:21:89:c6:b9:
e2:42:cc:82:76:e3:84:98:50:2d:6a:b6:7d:61:05:
38:9c:95:bb:22:79:65:f1:ec:d8:f0:3a:d2:c3:d3:
ec:ed:a2:e2:07:45:40:9d:ca:4d:25:bf:15:c6:8e:
e6:0c:93:8d:8e:0d:75:45:a3:04:4c:c2:a9:b4:1c:
0f:7d:2b:b4:10:0b:3e:91:ba:fb:f8:30:ee:86:62:
86:16:29:d8:1d:b2:a2:44:f5:1b:46:12:46:4e:99:
54:0d:1b:02:8f:e3:51:72:dd:fc:6e:65:f7:c0:7c:
d7:a7:2b:d6:03:0c:8b:37:d3:4e:a0:0f:97:7e:99:
ec:21:2f:c2:86:e4:d4:5e:c7:45:e7:7b:f6:87:f7:
a0:27:6c:08:50:26:81:db:e2:67:ec:9b:6d:6d:95:
3a:db:f1:ad:b1:71:9a:dc:6e:fb:db:1c:79:cd:c9:
a4:fb:b7:be:69:74:45:16:08:da:f9:a8:1e:06:cb:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:83:2D:04:F4:24:C7:53:A4:97:CA:BC:64:7C:ED:7C:F8:7C:BB:EE
X509v3 Authority Key Identifier:
keyid:FB:85:8E:FB:AE:93:C3:89:2D:94:9B:DC:41:FC:44:6A:8E:BC:EE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/45395E28C8F411F0A2F04129C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:5ac0::/48
Signature Algorithm: sha256WithRSAEncryption
58:6c:aa:f7:70:70:30:33:b5:f8:4b:75:a1:a6:6a:59:ab:42:
e8:08:50:12:e0:06:0e:c6:d8:02:79:0f:88:3c:cc:82:cb:18:
a4:59:b5:ef:5f:11:77:1b:f4:60:10:77:9c:55:3c:74:94:4d:
85:1b:6b:32:1f:97:5f:f0:7c:d7:2f:c8:cf:15:7d:a5:fe:18:
07:ed:b3:35:98:dc:cd:98:2f:7d:bc:9e:ed:d8:d6:ed:f1:90:
03:0a:f6:f0:65:0d:ed:69:5e:6d:6e:31:e2:a1:e1:2c:73:bd:
c8:5c:81:6c:5c:f9:f0:1a:69:c6:7c:a8:f7:0b:4c:d7:e8:5d:
e1:b1:a2:63:94:98:e4:01:e6:ff:90:87:8e:1e:53:36:f3:e7:
95:a2:41:f6:b8:70:a0:f6:59:06:22:a4:94:02:51:bf:86:4d:
d0:b4:54:d1:be:8c:e9:3f:f2:0d:25:bc:d3:d6:11:d8:95:a5:
6b:95:37:d5:1e:47:39:1b:97:54:f3:85:f4:4e:32:6a:cc:50:
9e:de:41:ee:9a:6e:48:08:01:af:fa:8a:a7:94:e8:ac:78:d4:
7a:bc:29:02:45:af:3d:8c:ac:01:bf:fc:78:37:9d:f7:5d:70:
3d:c8:f1:10:a7:41:88:e6:5b:c7:86:71:a7:a2:b5:35:e0:fe:
a6:40:6b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:03:09 2026 by rpki-client