
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/E4FC42B4AA6B11F1A625801A6311F970.roa
File: E4FC42B4AA6B11F1A625801A6311F970.roa (raw, json)
Hash identifier: MwQK/rkMedIHbWxvuuhvYzNXRO6W1Kz0RQ01ry7aASY=
Subject key identifier: 42:BD:6C:BA:C7:EA:90:6F:A3:0D:07:B4:53:F2:8F:91:F8:CE:C4:F6
Certificate issuer: /CN=A914B669/serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02
Certificate serial: 3578
Authority key identifier: AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/E4FC42B4AA6B11F1A625801A6311F970.roa
Signing time: Tue 08 Sep 2026 15:17:38 +0000
ROA not before: Tue 08 Sep 2026 15:17:38 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38261
IP address blocks: 202.95.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl
rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13688 (0x3578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B669, serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02
Validity
Not Before: Sep 8 15:17:38 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa02712-6b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:bd:f5:02:6e:fa:7f:74:6b:e1:56:95:57:
3f:eb:a9:8d:ef:e7:1b:2c:87:fb:85:16:61:d9:33:
0d:ac:6a:a9:34:f6:7d:78:01:5d:2a:d6:9f:26:45:
57:eb:87:b7:33:7a:d2:4a:ed:ae:a4:33:70:d1:af:
59:9f:35:06:38:42:2e:e3:50:df:c9:25:b8:4e:a7:
ac:bd:e0:24:29:6f:1d:f8:b8:95:69:cb:2e:36:a9:
af:e0:9a:83:61:59:27:c2:b1:13:e1:c9:06:ec:1e:
81:a8:99:92:63:2c:3f:15:df:e7:bc:04:45:77:fb:
1d:cc:d1:f4:8c:82:1c:c8:a7:30:fc:79:1a:e1:fa:
74:22:c0:3b:79:8e:ef:f5:c0:55:95:80:aa:96:11:
86:d7:90:7c:54:95:32:67:a1:1d:b7:c0:bf:fa:c6:
c5:2a:2e:8c:68:d4:88:2e:a7:30:92:76:6d:bd:7a:
ee:90:99:df:75:a4:f6:25:2b:c8:87:65:1a:0c:75:
7e:8e:4e:d2:c6:95:9b:1e:97:99:a2:ac:4e:5a:9d:
d9:18:5f:67:b6:57:c2:65:f5:9e:b3:c6:bf:40:92:
71:75:2b:79:9c:fc:fc:e4:a0:77:0c:5f:8d:3f:ab:
4a:58:f0:b5:9c:5e:67:17:c3:41:b4:45:fc:b2:86:
3a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BD:6C:BA:C7:EA:90:6F:A3:0D:07:B4:53:F2:8F:91:F8:CE:C4:F6
X509v3 Authority Key Identifier:
keyid:AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/E4FC42B4AA6B11F1A625801A6311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
202.95.251.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e8:38:43:cd:cf:04:38:64:e3:47:1b:59:c9:8d:ff:b4:4c:
3e:f1:e0:e0:ed:e3:6b:a0:69:78:39:69:e7:38:3a:76:4b:38:
2d:5d:2a:cd:9a:4b:ab:5b:c8:bf:95:56:90:57:8e:db:f0:64:
d8:7e:43:92:5d:3b:ab:c6:bc:2a:0b:32:2b:29:5e:d6:79:fb:
a1:9c:08:ca:06:c8:7f:5b:5e:72:e0:10:2d:0e:5f:47:13:6d:
6d:1b:c2:b0:1f:9d:2f:83:29:a5:58:b1:e7:60:0a:b4:c6:61:
c3:80:e9:91:48:c0:0b:45:9a:9a:60:6b:d6:f6:08:64:69:8c:
d9:45:69:6b:e9:99:57:d4:b6:94:cc:41:c1:75:d9:4f:59:8c:
4e:d9:88:9d:ed:95:56:d1:e5:e5:e8:8f:a3:71:d6:2e:3e:89:
5c:12:ff:d3:2a:c6:dc:f5:31:d9:54:04:7a:f5:eb:bb:14:80:
b0:8a:56:85:13:38:85:ba:32:6e:7a:54:b7:fd:3e:49:63:6c:
06:77:18:92:f0:c8:e1:b7:7b:ec:2f:f5:e6:02:46:c2:c6:7b:
54:a2:9d:85:3f:d6:54:31:44:52:e0:3f:c9:d5:76:7e:51:84:
c1:a4:de:61:4b:a9:c9:cf:98:c5:dd:90:ef:21:26:9d:0d:a7:
67:96:e7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:12:44 2026 by rpki-client