
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/84CC9A10957111F18DA344A36D11F970.roa
File: 84CC9A10957111F18DA344A36D11F970.roa (raw, json)
Hash identifier: k55agLSIaP5N2zf0tHKzs/9MtU/5VvxHelGsDQykezo=
Subject key identifier: 74:F6:8D:6F:99:49:4A:90:BD:5A:4D:C7:7C:56:29:08:F0:67:3B:27
Certificate issuer: /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Certificate serial: 0161
Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/84CC9A10957111F18DA344A36D11F970.roa
Signing time: Tue 11 Aug 2026 10:43:42 +0000
ROA not before: Tue 11 Aug 2026 10:43:42 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 140641
IP address blocks: 160.187.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 05:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0E3, serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Validity
Not Before: Aug 11 10:43:42 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a7afcde-fff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:73:2c:ff:f1:eb:90:ba:d5:7e:6e:4d:8e:8d:
d6:8b:b8:84:2c:26:c8:d6:28:d8:39:99:d7:33:dc:
f4:b2:59:61:c2:05:f7:5e:a4:7c:4b:f3:28:74:0b:
3b:3b:2f:cb:18:56:85:aa:3c:95:a9:44:d4:d7:b6:
1b:c9:a5:5c:bf:97:0c:09:1e:4e:76:e5:e0:cc:59:
39:5c:8d:67:ce:36:35:8c:f2:0f:0d:3d:93:df:60:
35:07:c2:d1:bf:07:0a:92:09:8f:b0:ac:3a:4e:ff:
91:7b:8d:67:4b:c3:40:3b:dc:32:c6:84:b5:3a:69:
a0:eb:20:fd:04:df:12:8b:ed:c6:9c:3e:ab:f6:fd:
7f:76:0a:1b:ec:db:91:28:4a:70:b0:27:73:90:d0:
48:42:f4:eb:67:49:d5:55:db:62:f6:67:c8:f9:0a:
15:07:6e:b8:07:07:89:8c:b3:2c:a3:3a:2d:af:01:
fb:75:42:ba:35:64:a5:9b:6f:f5:9d:29:66:1d:50:
91:39:ea:3e:c2:c6:96:8c:20:e2:66:3e:4e:c0:84:
ea:39:5d:66:30:cb:5b:50:29:11:ba:21:bf:24:b4:
e4:81:bd:8a:67:ec:94:ad:f1:cd:eb:99:27:db:29:
7e:da:64:62:e2:95:95:44:d6:10:11:f7:83:c7:f6:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F6:8D:6F:99:49:4A:90:BD:5A:4D:C7:7C:56:29:08:F0:67:3B:27
X509v3 Authority Key Identifier:
keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/84CC9A10957111F18DA344A36D11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.4.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:48:d4:b6:eb:a3:47:0f:05:1c:9f:35:0c:fb:ea:10:65:ad:
16:93:23:e3:38:68:c3:50:fa:8f:7f:b1:c7:ad:19:db:96:64:
4a:e1:59:d2:7c:58:51:43:d6:40:fc:f1:07:af:ac:8c:b8:35:
36:ea:63:0c:15:2b:7a:90:cf:f4:69:50:7c:2b:d3:90:16:38:
31:18:fd:63:6a:4d:56:55:aa:06:fa:98:ff:10:51:fc:1d:75:
fe:ec:5d:2a:f8:de:8b:94:a0:71:98:09:08:06:c6:6b:5e:93:
88:f5:75:ae:7a:ac:6f:f9:b4:07:39:c2:1e:81:33:eb:1e:7d:
c0:94:ad:f8:56:69:4e:c8:9c:8a:d1:12:eb:17:dc:ba:8e:40:
c4:a4:35:88:bb:15:1d:79:23:0c:1d:fe:50:25:02:2c:70:51:
cf:a4:52:5b:23:50:1c:10:5f:0b:12:59:ea:b8:95:62:0b:96:
be:a0:c8:b0:46:63:90:83:25:f8:1f:ec:fa:fa:d9:6e:4b:60:
4d:ae:5e:aa:4a:b7:bd:c6:4c:d6:be:7b:f5:c8:50:54:a1:54:
dc:6a:29:f1:3b:cc:da:96:c3:54:bf:97:74:f0:8e:be:65:10:
cd:52:52:f0:7f:c6:d8:6f:ac:c8:bc:d5:6d:65:91:63:39:4a:
47:5e:18:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:47 2026 by rpki-client