
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9E60AA30DCB511ECAC801F6EC4F9AE02.roa
File: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (raw, json)
Hash identifier: BIuosdWuF+4ep+QMwFKZ6npqwjzH0+zcNnprYLZ5I98=
Subject key identifier: 90:5F:D2:FC:AC:78:A0:03:C2:26:10:36:06:84:6F:72:A3:1C:AF:AD
Certificate issuer: /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
Certificate serial: 038C
Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9E60AA30DCB511ECAC801F6EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:21:09 +0000
ROA not before: Sat 17 May 2025 01:36:55 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 8220
IP address blocks: 193.82.0.0/19 maxlen: 19
194.223.140.0/22 maxlen: 22
194.223.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl
rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 00:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 908 (0x38c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED, serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
Validity
Not Before: May 17 01:36:55 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a59cd5-5a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:49:80:a3:ac:30:2d:d3:26:e4:f3:4b:67:
06:e4:ca:a3:1f:e7:fa:1d:0f:eb:28:22:14:a4:f7:
e3:f4:02:49:dd:a2:43:eb:44:20:9f:0a:27:b7:69:
2f:b6:12:cc:44:75:25:6d:9f:0e:93:4c:6a:a4:ef:
ff:2f:46:c6:2b:56:f5:78:02:b3:4c:e1:15:28:6b:
39:15:64:02:83:2d:e4:ad:4f:52:06:26:43:a1:f4:
49:d9:b0:a0:bd:fe:a2:c6:7c:74:57:d0:3d:b3:81:
e3:ce:9d:bd:69:7b:ad:84:cd:fb:e2:a2:e1:45:cf:
9a:11:fc:20:00:38:74:18:3f:bc:30:2c:dd:51:45:
d9:a3:84:b1:6e:37:4b:ec:f1:b5:fb:53:06:c0:f5:
00:30:5a:ca:c0:07:d0:b7:aa:ef:32:0e:b0:b5:cd:
d3:a6:db:00:d1:20:60:dc:b6:eb:92:15:f0:da:b3:
a0:26:35:4a:f2:71:df:30:8a:95:81:88:20:59:39:
66:76:b2:02:17:96:1c:e6:d1:f1:2f:9a:16:1a:c8:
6f:d7:21:96:d9:f3:6a:3c:4b:cf:3a:f2:9c:0b:b0:
fe:53:62:9a:e8:42:5c:02:a4:ca:e3:fa:f7:6b:1f:
27:f1:27:9d:ad:51:4f:ed:cc:d0:76:89:24:74:ec:
c8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5F:D2:FC:AC:78:A0:03:C2:26:10:36:06:84:6F:72:A3:1C:AF:AD
X509v3 Authority Key Identifier:
keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9E60AA30DCB511ECAC801F6EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
193.82.0.0/19
194.223.140.0-194.223.159.255
Signature Algorithm: sha256WithRSAEncryption
8a:46:09:4a:19:13:43:5a:8c:35:c0:90:c2:16:5d:aa:fe:f4:
ed:c9:1e:e3:03:1f:ed:db:31:2f:ac:a0:81:ac:84:91:7f:d0:
96:ec:4b:24:79:e3:3f:07:3b:e5:0f:a0:ba:d5:3b:b3:22:51:
93:27:66:f2:2c:3d:33:da:15:af:71:33:be:cf:97:78:a2:8a:
97:d5:be:db:69:b7:89:1e:dc:ad:b0:12:02:d5:a1:43:5f:3d:
79:46:96:0e:6a:51:45:eb:f9:6e:a2:a8:20:f2:6f:15:96:9c:
15:b2:65:73:1d:be:b1:5f:80:d5:29:a7:be:6c:de:23:9e:6d:
7c:8c:87:80:1e:09:84:de:6c:d6:a7:09:ba:c2:44:65:17:6f:
1c:5c:d6:60:a0:a7:76:fa:ed:50:1a:7e:76:fc:d6:0b:18:75:
fd:b2:c0:84:1f:59:4c:88:1d:eb:f1:88:69:7d:14:ba:bb:0d:
f3:5b:e3:f3:58:cb:11:4f:2b:89:02:d9:4a:be:f1:e6:ba:bd:
dd:17:1a:13:bc:2a:40:f4:71:58:c4:2d:d3:94:cd:8f:39:b3:
6d:c5:2f:1a:48:91:f6:2b:50:d4:e3:ec:93:69:a5:ac:3e:a8:
01:b7:91:43:fb:0b:b9:cc:23:c4:a5:6d:f3:d2:71:9e:8c:9d:
dc:6e:c7:11
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICA4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM0RUQxMTAvBgNVBAUTKEY2NTUzMjU2QjI5N0YyODMzMTlDQjk4OUU2QjhDNzgz
NkY4NzE5MEIwHhcNMjUwNTE3MDEzNjU1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWNkNS01YTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyw9JgKOsMC3TJuTzS2cG5MqjH+f6HQ/rKCIUpPfj9AJJ3aJD60Qgnwont2kv
thLMRHUlbZ8Ok0xqpO//L0bGK1b1eAKzTOEVKGs5FWQCgy3krU9SBiZDofRJ2bCg
vf6ixnx0V9A9s4Hjzp29aXuthM374qLhRc+aEfwgADh0GD+8MCzdUUXZo4SxbjdL
7PG1+1MGwPUAMFrKwAfQt6rvMg6wtc3TptsA0SBg3LbrkhXw2rOgJjVK8nHfMIqV
gYggWTlmdrICF5Yc5tHxL5oWGshv1yGW2fNqPEvPOvKcC7D+U2Ka6EJcAqTK4/r3
ax8n8SedrVFP7czQdokkdOzI7QIDAQABo4ICbjCCAmowHQYDVR0OBBYEFJBf0vys
eKADwiYQNgaEb3KjHK+tMB8GA1UdIwQYMBaAFPZVMlayl/KDMZy5iea4x4NvhxkL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC8zRUU5NDdBQURD
QUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhvTXhuTG1KNXJqSGcyLUhH
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzlsVXlWcktYOG9NeG5MbUo1cmpIZzItSEdRcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEM0RUQvM0VFOTQ3QUFEQ0FDMTFFQ0EyMjNCRjVDQzRGOUFFMDIvOUU2MEFBMzBE
Q0I1MTFFQ0FDODAxRjZFQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQFwVIAMAwDBALC34wDBAXC34AwDQYJKoZIhvcNAQELBQADggEBAIpG
CUoZE0NajDXAkMIWXar+9O3JHuMDH+3bMS+soIGshJF/0JbsSyR54z8HO+UPoLrV
O7MiUZMnZvIsPTPaFa9xM77Pl3iiipfVvttpt4ke3K2wEgLVoUNfPXlGlg5qUUXr
+W6iqCDybxWWnBWyZXMdvrFfgNUpp75s3iOebXyMh4AeCYTebNanCbrCRGUXbxxc
1mCgp3b67VAafnb81gsYdf2ywIQfWUyIHevxiGl9FLq7DfNb4/NYyxFPK4kC2Uq+
8ea6vd0XGhO8KkD0cVjELdOUzY85s23FLxpIkfYrUNTj7JNppaw+qAG3kUP7C7nM
I8SlbfPScZ6MndxuxxE=
-----END CERTIFICATE-----
Generated at Sat Mar 7 16:11:59 2026 by rpki-client