
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/2D89A3B4139A11F182E65A043E3D8C67.roa
File: 2D89A3B4139A11F182E65A043E3D8C67.roa (raw, json)
Hash identifier: 6rniMe/YVWGY7c5EcQQMPJgDsNhBjwIFHtLtGoYlhn8=
Subject key identifier: A7:10:F7:91:30:AF:3B:3C:F6:A0:4C:8B:B9:BB:63:A5:F0:3A:48:87
Certificate issuer: /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Certificate serial: 56
Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/2D89A3B4139A11F182E65A043E3D8C67.roa
Signing time: Fri 10 Jul 2026 17:16:48 +0000
ROA not before: Fri 10 Jul 2026 17:16:48 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 56286
IP address blocks: 167.179.26.0/24 maxlen: 24
205.209.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 16:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Validity
Not Before: Jul 10 17:16:48 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a5128ff-4239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:c3:a3:8a:57:d4:20:25:a1:a6:5c:65:ed:
3a:a8:a5:fa:4b:54:05:1a:c3:2c:f3:09:d6:a7:e7:
39:0e:8f:0c:7d:7b:3f:98:44:ca:d0:46:f6:77:fd:
41:c1:ed:5e:fe:26:90:e2:e5:20:dc:2c:be:0f:83:
00:8c:34:8b:89:0c:d5:28:4a:70:92:de:2c:92:e0:
7d:a7:4d:a1:e8:f6:0a:c4:cc:63:63:a3:4d:65:fe:
cd:49:7e:7e:2d:e9:aa:07:80:94:ac:c2:9c:80:0e:
51:2d:b8:c7:ff:19:3e:e2:69:b5:9e:7a:c0:95:48:
8e:31:7e:fa:99:da:61:d6:bb:de:86:77:01:5a:e8:
51:c2:92:b8:c6:9b:2c:5e:4c:18:02:b1:e7:b2:25:
16:fc:82:b5:47:d5:17:31:e3:69:90:b3:7b:a1:65:
cb:0e:db:de:46:51:c9:6e:ad:eb:bf:70:60:12:6d:
a1:81:67:8a:d2:8d:07:b6:d3:81:3f:e3:61:a7:d0:
2b:e3:e5:bf:62:80:9f:b4:b0:ce:04:06:a0:e2:f4:
32:e4:1e:e7:fd:68:42:56:6a:1c:a8:a4:68:ca:a3:
bb:2c:31:d1:ed:b1:b0:5c:55:41:53:86:84:41:ae:
ad:dd:63:a7:20:b6:23:85:55:9a:d4:10:a5:a1:5a:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:10:F7:91:30:AF:3B:3C:F6:A0:4C:8B:B9:BB:63:A5:F0:3A:48:87
X509v3 Authority Key Identifier:
keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/2D89A3B4139A11F182E65A043E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
167.179.26.0/24
205.209.31.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b0:8b:37:90:f0:8e:53:61:4c:ae:7d:83:1f:e9:61:94:95:
08:ee:b6:d3:a4:1b:3e:5b:1f:d2:a7:35:18:8e:22:4e:32:a8:
81:29:1e:ca:09:28:88:f9:4e:da:df:ef:3f:8c:9c:24:6e:b8:
93:41:fa:26:f3:c1:63:53:40:44:6b:03:57:8b:89:9d:af:59:
ae:74:e6:9b:50:a0:99:b8:6a:3a:04:e0:00:64:c9:2c:47:9b:
a4:d8:a4:38:41:86:59:15:52:1b:24:ae:2c:77:fd:c0:7c:2c:
78:08:53:82:af:76:24:8d:2e:5d:57:58:20:68:7a:88:70:61:
c5:24:7b:7b:96:38:c3:ab:79:ad:b6:fc:f5:9a:03:ac:1b:df:
ac:64:3e:85:f1:fa:6f:15:ad:90:78:ae:6f:5f:bb:73:25:d1:
c5:db:0b:90:f1:db:28:02:98:18:bf:55:fe:3e:bf:36:7a:4d:
b2:84:9a:ad:8f:e2:61:e3:50:11:0f:27:e9:60:52:2a:ee:e9:
d8:da:7a:a3:bb:3e:32:3d:f8:99:95:35:78:db:c5:72:05:f7:
de:86:16:6d:fb:3d:86:02:2a:40:2c:dd:51:c6:3f:ef:17:aa:
8c:d0:69:cc:ca:22:2a:8c:ab:2c:35:75:45:a1:a6:b0:3d:3d:
9b:29:dc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:25:28 2026 by rpki-client