
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/A2055C2E57D911F0BD42DB6DC4F9AE02.roa
File: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (raw, json)
Hash identifier: nALmFx4QbD9mgsNW6j0fno4vQEX9hP6WHdbPbuXctXM=
Subject key identifier: B4:0B:27:88:A0:C7:9A:02:82:E4:43:76:52:8F:D2:78:4D:DD:4C:29
Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Certificate serial: 0BC8
Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/A2055C2E57D911F0BD42DB6DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:58:26 +0000
ROA not before: Thu 03 Jul 2025 06:47:49 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 32043
IP address blocks: 45.126.86.0/24 maxlen: 24
45.126.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3016 (0xbc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Validity
Not Before: Jul 3 06:47:49 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a44601-5cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:d2:67:51:f8:24:51:5b:dc:a8:8e:e2:85:
77:88:c8:8c:15:ee:c5:59:1e:2c:0d:c0:3f:fa:50:
c0:33:01:66:f0:d1:4b:64:89:be:01:f2:e2:cf:cf:
90:0a:fe:df:dc:f5:52:f2:2f:4c:2b:91:f5:5e:43:
43:5a:e0:bf:45:4c:0b:d1:79:46:ff:f1:da:ca:ef:
f5:de:48:ed:ef:87:8b:85:df:d1:4c:1b:0b:0e:74:
e7:9f:79:32:6e:f2:7c:cf:13:f4:ea:ec:bf:31:05:
92:09:2a:61:85:8b:80:dc:9b:7c:f7:eb:b5:32:b2:
8b:40:4d:2c:6a:23:6d:ad:d5:fa:2e:12:13:26:5b:
70:f1:1b:b0:65:54:56:79:cf:75:a7:fd:b6:b9:df:
65:99:9b:b1:16:e4:1e:84:51:c2:14:14:ca:54:14:
81:a2:76:3e:02:cd:99:99:f4:bc:d0:9a:d8:1f:9e:
b5:06:04:70:05:78:d6:09:0e:6e:cc:87:96:a6:f5:
36:62:c5:75:03:2e:2e:1a:b7:97:d1:b1:71:a0:ca:
63:7a:06:58:34:32:15:74:91:93:49:71:15:df:9e:
1f:c1:48:fb:31:52:6b:fb:7d:af:32:93:4b:47:d6:
e1:cb:b8:02:0a:b9:b0:36:b0:c6:bc:71:eb:5e:c6:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0B:27:88:A0:C7:9A:02:82:E4:43:76:52:8F:D2:78:4D:DD:4C:29
X509v3 Authority Key Identifier:
keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/A2055C2E57D911F0BD42DB6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.126.86.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:e7:e3:41:a1:39:69:3a:23:ee:39:44:8a:82:6f:10:3d:a3:
fb:a6:76:0d:1a:ab:33:63:b6:30:7e:9d:c6:81:1b:4f:be:18:
4f:45:61:b2:db:27:65:b9:c0:29:f2:d4:ca:01:52:81:04:e7:
ba:cc:e8:ee:6a:78:8b:42:b2:f5:84:53:30:08:a2:e8:0d:4a:
06:7e:cd:83:eb:0b:e1:9c:09:c9:73:20:6f:f7:84:a2:53:dd:
21:14:1f:ab:d5:29:ab:65:e3:53:f5:00:0d:7c:a3:73:b4:c7:
d4:5b:18:ef:41:ab:e2:6a:cf:c0:08:a5:83:0b:2a:a6:a6:54:
e7:0c:20:e7:01:23:f8:33:e8:55:2e:e3:6c:16:bb:92:9d:25:
b8:4a:e8:8c:03:d4:2b:6b:6c:5a:1b:f6:71:fa:55:46:9a:26:
dd:55:a9:03:1b:d1:c0:66:f2:48:32:28:5d:2a:82:b9:4a:9d:
40:68:37:bf:9b:0b:69:ae:cf:c8:15:61:7c:19:a4:cb:e2:bd:
b3:49:27:34:b5:55:d1:0b:3e:f2:4e:fd:92:c3:f7:04:8d:65:
ba:18:1e:30:cb:8c:9e:3b:0e:63:fc:89:fd:c8:37:f6:9b:cc:
3a:c3:c2:f5:b5:85:9b:fb:c4:d7:7f:3c:ec:f1:14:94:7e:0a:
1c:04:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:20 2026 by rpki-client