
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/4CBDBA5E3F0011F18130B663C8833773.roa
File: 4CBDBA5E3F0011F18130B663C8833773.roa (raw, json)
Hash identifier: MYIZdYIrRMX8GOTnK8Yq+Fr2Q47kM6T/tbwrjmOwZ2A=
Subject key identifier: 50:EA:F5:BD:86:2F:FF:83:C8:51:04:35:1C:E5:56:19:47:F9:F4:C9
Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Certificate serial: 1D9D
Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/4CBDBA5E3F0011F18130B663C8833773.roa
Signing time: Thu 23 Apr 2026 10:36:35 +0000
ROA not before: Thu 23 Apr 2026 10:36:35 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 138640
IP address blocks: 103.239.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 23:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7581 (0x1d9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Validity
Not Before: Apr 23 10:36:35 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69e9f632-0eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:f4:fc:37:c4:6e:ac:9f:74:d5:35:d9:2c:
15:35:30:f1:62:ce:ee:d9:7c:69:32:8f:75:b8:c5:
37:2b:e6:af:2b:77:47:d7:b5:5c:8f:4d:38:a2:b0:
21:b6:06:e4:c4:da:86:3a:fd:95:65:ef:81:77:73:
09:5d:06:7f:a9:4d:50:06:2e:d7:37:c5:b0:2b:c1:
14:01:b8:30:71:aa:ad:25:0f:14:3d:b8:dc:62:f0:
e3:07:c1:48:67:72:98:ff:56:d2:96:61:6e:5f:51:
f3:aa:03:9b:e0:63:16:79:d5:05:69:3f:10:2f:aa:
d0:8a:b9:c2:01:18:19:f8:20:9f:20:00:3e:a6:cc:
e5:a6:b3:f5:6d:ee:06:95:b8:93:7d:f7:a7:86:0a:
1c:23:a8:91:32:19:cc:e6:44:b4:f0:85:b2:a5:f0:
04:16:e8:b3:72:e6:5e:f4:c5:22:60:75:7c:6c:1d:
37:5e:cc:3e:14:ff:8e:ee:ff:36:f7:15:c7:76:e5:
16:85:77:37:9c:82:fd:d9:25:7d:88:bb:7d:6a:6b:
30:92:b6:a9:15:fe:ef:1d:29:33:be:44:d9:35:80:
3c:4c:23:19:1d:f3:64:9c:df:36:ff:cd:2d:d9:29:
1e:21:cc:02:cb:8a:52:43:e0:21:c9:ae:87:74:98:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EA:F5:BD:86:2F:FF:83:C8:51:04:35:1C:E5:56:19:47:F9:F4:C9
X509v3 Authority Key Identifier:
keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/4CBDBA5E3F0011F18130B663C8833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.239.254.0/24
Signature Algorithm: sha256WithRSAEncryption
39:26:a1:ad:5f:7b:dd:39:47:c2:45:e6:12:eb:90:8a:3e:93:
a7:c2:9a:30:da:08:4e:86:fa:72:50:43:2e:91:61:ab:5c:30:
32:e8:78:ed:47:cc:d6:8a:23:1e:d0:3b:a1:b6:9f:90:09:2e:
5d:35:9b:e1:7d:3b:de:6e:42:b6:8e:d0:15:c9:41:f9:62:25:
c8:23:45:df:67:58:13:e3:3a:70:47:bb:78:e9:00:eb:8f:58:
f6:fc:d9:a9:7b:ab:49:87:f8:fe:2a:f5:47:1c:32:04:01:e1:
53:65:c5:52:30:27:da:48:fb:68:e6:7e:6e:22:fd:22:be:2f:
3f:03:e3:b0:16:50:64:bc:14:06:45:0e:83:b5:5e:f9:77:33:
1d:ce:5a:c5:0f:a0:82:97:8d:32:7a:4e:fa:25:cd:fb:6c:38:
5c:74:2c:3c:b3:9e:ec:f9:a5:9e:42:f6:a0:0c:84:84:71:0b:
6d:65:84:3c:8c:df:9e:e0:d9:15:43:64:46:19:a7:df:3c:7b:
39:1c:cd:13:3b:dd:92:cb:5b:b6:42:19:78:55:fe:7f:eb:49:
2e:0a:29:45:a2:06:71:71:df:84:27:9e:78:0a:c9:4b:ca:4c:
03:fe:43:51:c7:cb:04:00:7f:7c:1b:1f:8a:14:6c:88:91:36:
81:b7:42:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 11:34:10 2026 by rpki-client