
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/445DB498796011EFA7E9391DC4F9AE02.roa
File: 445DB498796011EFA7E9391DC4F9AE02.roa (raw, json)
Hash identifier: k2tDc+ez6BNq63hqlmOcWT3woUQyCLcLZFk7DkkdvX8=
Subject key identifier: 5A:03:5D:1C:EA:E5:22:2A:1F:07:92:94:5C:37:6C:32:23:DA:E7:5D
Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial: 2AC9
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/445DB498796011EFA7E9391DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:27:46 +0000
ROA not before: Wed 16 Jul 2025 15:52:25 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138420
IP address blocks: 43.245.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10953 (0x2ac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Validity
Not Before: Jul 16 15:52:25 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a45af1-9ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:d0:c6:ff:89:c5:b1:d5:b0:85:11:da:01:
60:1f:41:79:44:95:ac:80:a2:e7:32:e9:ee:6d:60:
c1:ff:13:6d:07:92:0c:7b:6a:18:aa:c3:7f:0e:4a:
9e:b0:f2:7a:ae:99:b4:82:bd:6a:86:6d:d4:70:2e:
18:e1:ca:2f:70:31:85:31:15:62:fb:ae:90:f9:20:
19:04:59:14:ae:a6:36:74:83:d2:2b:e5:63:70:cb:
48:3c:e6:dd:73:bc:ac:48:78:ac:d7:9b:3c:78:8a:
df:0f:06:e8:27:5a:e1:61:57:91:3e:89:6a:1f:4d:
75:c2:18:2d:34:ba:5b:b0:10:bb:03:f0:2d:34:3b:
ca:d4:56:da:59:0d:c9:55:d1:f9:ed:22:2f:03:2a:
c6:13:07:77:48:c6:d3:00:fe:eb:d9:da:f4:a3:ed:
6d:14:02:ac:ac:84:31:17:55:1c:b2:db:0e:4d:a3:
42:5c:c2:76:08:c7:2e:79:e1:0a:c8:6a:fd:fb:1b:
da:8e:7e:4c:af:97:b2:f2:6f:69:7e:0c:5d:9b:6c:
3d:6f:49:8f:34:9b:87:55:49:70:09:50:25:8c:d6:
25:68:cf:b4:a2:dc:38:59:13:aa:6a:72:fe:89:5c:
f6:70:19:f0:3f:69:24:2b:bb:cd:ac:67:7d:ab:7d:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:03:5D:1C:EA:E5:22:2A:1F:07:92:94:5C:37:6C:32:23:DA:E7:5D
X509v3 Authority Key Identifier:
keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/445DB498796011EFA7E9391DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.245.195.0/24
Signature Algorithm: sha256WithRSAEncryption
12:9b:11:33:16:f1:ac:57:8c:36:44:4b:ed:64:5a:24:be:42:
7e:f3:65:ac:ea:ba:1b:40:28:d5:bd:fe:7b:35:20:68:e6:ae:
63:87:7d:34:d9:b3:38:df:39:10:a8:85:d2:e3:14:9c:32:64:
2e:61:37:71:ab:91:69:f1:39:79:af:5f:f6:7a:e6:7c:70:13:
67:cf:dd:5d:fa:8f:f8:93:60:35:c4:1f:bf:4e:b1:d5:1a:a2:
a4:90:84:b8:d4:11:5d:9f:e8:a4:8e:21:9f:44:f6:ea:84:96:
51:7d:4c:24:e8:69:fb:62:ec:50:d6:8f:e8:79:24:24:b2:8c:
f3:a9:f5:6b:b2:37:29:e0:18:42:f1:6e:f2:8c:c9:6c:bf:3a:
b3:2e:2d:de:17:97:c8:cb:dd:13:de:f3:f6:84:b9:fb:e7:58:
92:be:08:69:c9:85:d1:e4:38:14:db:ce:6f:49:62:da:4b:30:
93:fa:a9:b1:2b:ce:33:4a:5c:c6:34:95:ad:3f:79:88:4f:f6:
9a:ea:d5:68:58:ec:a5:b3:09:00:52:cf:02:1f:54:92:08:51:
58:af:60:84:ee:88:e0:08:49:ca:86:13:e4:eb:de:b6:0f:12:
dd:69:c4:7a:19:b4:1d:ce:93:55:6d:f5:82:fb:ec:58:2d:a6:
87:9e:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:31 2026 by rpki-client