
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/F060FF0E720D11EDA84BE02EC4F9AE02.roa
File: F060FF0E720D11EDA84BE02EC4F9AE02.roa (raw, json)
Hash identifier: XjvBtz5g4frcjOMdQDCMXkpZji1fTdysFW39IJffTO8=
Subject key identifier: 24:9A:57:6B:E3:D6:E1:8D:07:E1:8F:FE:9B:91:0E:48:8C:6B:6A:E0
Certificate issuer: /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Certificate serial: 029F
Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/F060FF0E720D11EDA84BE02EC4F9AE02.roa
Signing time: Fri 05 Jun 2026 00:30:22 +0000
ROA not before: Fri 05 Jun 2026 00:30:22 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 8220
IP address blocks: 148.109.0.0/16 maxlen: 16
148.109.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 00:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671 (0x29f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Validity
Not Before: Jun 5 00:30:22 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a22189d-b68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:43:f3:e7:b0:ce:ed:6a:95:9d:c9:84:0e:eb:
de:46:b5:37:74:4a:fa:41:3e:b9:2e:25:43:5a:7e:
d2:7d:74:ba:88:c3:42:f3:82:1e:4f:4c:ea:e2:57:
6c:63:2e:ab:78:66:2c:45:bb:11:d6:4c:ab:fa:81:
7f:da:7f:ac:d5:27:87:e0:63:03:4a:f4:0a:0a:f9:
ca:e8:2b:e6:6b:03:7b:7d:56:9c:5e:70:76:9d:ef:
24:3a:6e:1d:56:6f:27:f8:4f:64:09:a0:0b:df:80:
77:30:a3:1b:1f:5a:c6:55:c8:10:54:3b:bc:be:bc:
54:3a:2c:fd:e2:01:f1:c4:13:11:c7:f3:de:78:4f:
ad:83:a7:f1:a9:2f:72:93:fd:97:fa:42:dd:5b:1c:
4d:86:63:21:aa:f2:cb:bd:88:d9:20:de:ee:35:b2:
68:8a:2e:21:d2:00:2b:b2:07:7d:a6:87:9f:d0:ee:
db:93:6a:d4:c8:77:d8:6e:47:38:cd:9f:73:06:c6:
e4:6c:ec:01:a0:c0:db:e9:f1:32:ba:17:20:99:2f:
f7:97:53:c1:95:65:09:3a:da:56:a1:4a:4b:df:27:
51:46:3a:50:5a:16:86:99:34:e8:84:b1:80:86:0b:
e9:93:8f:58:2f:18:76:5f:2d:99:6c:4a:68:e9:a7:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9A:57:6B:E3:D6:E1:8D:07:E1:8F:FE:9B:91:0E:48:8C:6B:6A:E0
X509v3 Authority Key Identifier:
keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/F060FF0E720D11EDA84BE02EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
148.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:33:1d:9e:cc:6e:43:f0:37:8e:6c:f6:bd:83:53:1d:f8:1b:
d0:f1:c2:7c:d0:4d:b8:4c:40:f0:0e:0c:94:01:03:58:6d:36:
46:06:fb:dc:94:53:34:21:ad:85:59:e2:05:be:90:67:ca:33:
35:3f:5c:c1:53:13:48:dc:a5:1e:c1:6b:8a:94:95:48:e4:77:
02:3b:42:61:10:d9:92:20:39:5e:dc:d9:96:84:d4:ee:e8:bc:
a0:bb:7a:f1:af:32:df:a0:c0:40:25:60:73:a6:4a:6c:aa:68:
e7:37:af:ac:96:f0:de:08:29:f3:51:8b:ab:0b:3a:e3:78:75:
b9:98:b6:64:51:9e:14:e7:12:74:1e:4c:ae:48:2e:70:87:f4:
3d:b4:8b:6b:66:3c:07:9b:8f:17:f2:ba:32:30:f0:7a:d6:2c:
59:25:59:f5:fd:c3:15:c1:03:c4:28:e6:10:75:b8:03:b0:2e:
3d:72:2e:b5:e5:7c:7e:9a:98:36:25:9d:29:5a:5b:53:8e:52:
f3:ab:83:ed:56:6d:2e:ac:bd:a9:db:5b:d9:22:96:6b:34:39:
a9:ce:3c:cd:06:a5:84:22:2b:61:9d:63:92:5f:a3:b3:4f:85:
85:f2:e6:63:e7:d9:ff:a8:47:04:9f:80:f9:1c:1d:ec:bc:f6:
cd:2e:44:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:22 2026 by rpki-client