
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/C2308ADC6E2111F18E37985672A30FBC.roa
File: C2308ADC6E2111F18E37985672A30FBC.roa (raw, json)
Hash identifier: wptdMLkGYWCREgeRbFIexsWdbeobaprWrt9rh5ES8yE=
Subject key identifier: 95:92:67:51:DC:D5:CB:2C:2C:2D:CB:7A:91:78:45:89:56:30:F9:24
Certificate issuer: /CN=A913AB2B/serialNumber=C565795309E872148CD20DE2B2A43CD3B204C251
Certificate serial: 0A
Authority key identifier: C5:65:79:53:09:E8:72:14:8C:D2:0D:E2:B2:A4:3C:D3:B2:04:C2:51
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/C2308ADC6E2111F18E37985672A30FBC.roa
Signing time: Mon 22 Jun 2026 10:04:30 +0000
ROA not before: Mon 22 Jun 2026 10:04:30 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 134732
IP address blocks: 162.4.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.crl
rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AB2B, serialNumber=C565795309E872148CD20DE2B2A43CD3B204C251
Validity
Not Before: Jun 22 10:04:30 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a3908ad-f851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:81:9a:ae:ff:87:3c:d2:37:9c:90:29:75:a2:
8c:c1:0f:49:52:5d:78:3f:f3:fd:fd:50:48:1d:db:
1b:97:63:cc:9f:ff:0a:2a:5b:0f:0e:f1:fb:45:1a:
98:12:89:80:36:43:9f:9a:df:b9:92:ac:2f:c2:a3:
40:b5:b0:55:dc:b5:e2:00:2c:ad:56:a3:9e:e0:9c:
96:63:7c:a1:22:0d:04:86:25:11:23:ca:25:1c:3b:
fc:5e:5b:9e:8b:2d:3c:13:8c:37:2f:93:63:a3:93:
8e:08:70:6e:3e:f7:e1:89:7c:ba:0f:3a:cd:49:e4:
62:8d:d3:2e:84:2e:b2:0d:a7:c1:1b:eb:2b:71:4f:
cf:15:90:e3:8b:bf:87:0f:89:17:2f:f0:3d:d1:45:
8a:28:eb:f3:3d:cc:5d:e0:48:7c:b2:89:0d:c4:3d:
a3:89:d6:16:e6:b6:f8:9d:37:84:00:d8:be:f9:0c:
3a:2e:10:2d:d2:e6:23:78:73:0f:89:46:64:e2:27:
6d:67:6e:81:19:5b:2a:dd:f1:2a:25:8b:07:89:bb:
1a:23:d8:fa:c4:57:6c:4c:2c:34:18:d8:94:8b:3e:
83:60:8f:d1:56:d8:78:06:bf:b2:47:92:aa:b7:8a:
80:de:b1:d4:c4:4a:1b:90:08:26:0f:ee:1e:66:e2:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:92:67:51:DC:D5:CB:2C:2C:2D:CB:7A:91:78:45:89:56:30:F9:24
X509v3 Authority Key Identifier:
keyid:C5:65:79:53:09:E8:72:14:8C:D2:0D:E2:B2:A4:3C:D3:B2:04:C2:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/xWV5UwnochSM0g3isqQ807IEwlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xWV5UwnochSM0g3isqQ807IEwlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AB2B/49C19F48672111F18DD248217647A888/C2308ADC6E2111F18E37985672A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.214.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d3:c8:5d:ea:9d:9e:5b:b0:fe:48:eb:9e:42:2f:24:b7:87:
19:41:f1:be:8f:cc:25:e2:2d:a5:f5:59:f0:26:76:a0:07:3c:
8e:68:cc:60:2d:07:2f:90:ab:53:4d:ed:e9:d7:7c:27:ac:84:
f4:9f:7c:e5:bb:d2:69:e4:51:d5:2c:ed:11:0a:ea:da:32:33:
6a:cb:b7:fa:d1:ec:ae:f4:72:41:93:d2:7a:f6:b4:31:34:3a:
e7:6d:da:99:49:70:f0:b0:43:0d:b2:2e:04:69:ec:b1:61:d4:
38:93:76:7f:99:88:95:66:54:76:5d:a9:6d:6f:e3:e2:aa:65:
7d:87:80:52:c8:a1:40:a1:b4:d8:4c:ea:51:cd:f5:fb:13:79:
75:b8:be:2a:89:fa:4c:e9:ee:04:f9:fb:e6:ba:2a:d8:ab:90:
09:fc:37:73:64:01:f6:33:8e:04:3c:00:cd:28:4c:b1:3f:3b:
5b:55:2f:85:fe:ab:56:76:5c:60:7a:ae:bf:29:07:a1:76:46:
dc:7a:73:01:3b:dd:9d:d4:76:e8:2f:99:8b:a3:ff:73:80:22:
57:d2:ee:ff:f9:f2:dc:3d:c1:81:42:dc:63:cb:50:b2:96:dc:
47:22:48:b2:da:1c:ce:cf:3a:7d:eb:47:64:1d:89:ca:96:d2:
78:8f:00:05
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
QUIyQjExMC8GA1UEBRMoQzU2NTc5NTMwOUU4NzIxNDhDRDIwREUyQjJBNDNDRDNC
MjA0QzI1MTAeFw0yNjA2MjIxMDA0MzBaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMzkwOGFkLWY4NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdgZqu/4c80jeckCl1oozBD0lSXXg/8/39UEgd2xuXY8yf/woqWw8O8ftFGpgS
iYA2Q5+a37mSrC/Co0C1sFXcteIALK1Wo57gnJZjfKEiDQSGJREjyiUcO/xeW56L
LTwTjDcvk2Ojk44IcG4+9+GJfLoPOs1J5GKN0y6ELrINp8Eb6ytxT88VkOOLv4cP
iRcv8D3RRYoo6/M9zF3gSHyyiQ3EPaOJ1hbmtvidN4QA2L75DDouEC3S5iN4cw+J
RmTiJ21nboEZWyrd8SoliweJuxoj2PrEV2xMLDQY2JSLPoNgj9FW2HgGv7JHkqq3
ioDesdTEShuQCCYP7h5m4oRHAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUlZJnUdzV
yywsLct6kXhFiVYw+SQwHwYDVR0jBBgwFoAUxWV5UwnochSM0g3isqQ807IEwlEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNBQjJCLzQ5QzE5RjQ4Njcy
MTExRjE4REQyNDgyMTc2NDdBODg4L3hXVjVVd25vY2hTTTBnM2lzcVE4MDdJRXds
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIveFdWNVV3bm9jaFNNMGczaXNxUTgwN0lFd2xFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QUIyQi80OUMxOUY0ODY3MjExMUYxOEREMjQ4MjE3NjQ3QTg4OC9DMjMwOEFEQzZF
MjExMUYxOEUzNzk4NTY3MkEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACiBNYwDQYJKoZIhvcNAQELBQADggEBAITTyF3qnZ5bsP5I655CLyS3
hxlB8b6PzCXiLaX1WfAmdqAHPI5ozGAtBy+Qq1NN7enXfCeshPSffOW70mnkUdUs
7REK6toyM2rLt/rR7K70ckGT0nr2tDE0Oudt2plJcPCwQw2yLgRp7LFh1DiTdn+Z
iJVmVHZdqW1v4+KqZX2HgFLIoUChtNhM6lHN9fsTeXW4viqJ+kzp7gT5++a6Ktir
kAn8N3NkAfYzjgQ8AM0oTLE/O1tVL4X+q1Z2XGB6rr8pB6F2Rtx6cwE73Z3Udugv
mYuj/3OAIlfS7v/58tw9wYFC3GPLULKW3EciSLLaHM7POn3rR2QdicqW0niPAAU=
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:28:58 2026 by rpki-client