
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/3853657658CA11F188C8E1F19D833773.roa
File: 3853657658CA11F188C8E1F19D833773.roa (raw, json)
Hash identifier: dGgAXDrAOa6dHqoeo3Tw6FLvY9KJRR5IMwL6J/VPqTs=
Subject key identifier: A4:E7:1B:CB:60:3A:09:C6:7C:73:FF:7C:69:D0:54:23:DF:90:C6:35
Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Certificate serial: 0136
Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/3853657658CA11F188C8E1F19D833773.roa
Signing time: Tue 26 May 2026 06:14:58 +0000
ROA not before: Tue 26 May 2026 06:14:58 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134204
IP address blocks: 160.250.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:34:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Validity
Not Before: May 26 06:14:58 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a153a62-ce3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:9a:a4:1c:67:28:91:c0:95:cf:01:fb:92:
46:da:42:bf:da:4a:33:38:71:48:96:01:01:cb:25:
d9:7b:5f:b3:6d:40:d3:81:ea:aa:98:bb:4b:dd:44:
b6:b5:99:81:64:78:ff:e6:15:f5:c2:ca:40:87:0c:
e9:d2:de:c4:83:79:d3:fe:d9:91:4a:e5:b0:cb:71:
12:df:b6:26:5b:28:f9:87:03:6b:dd:34:2d:0b:29:
8c:be:b0:3a:17:21:61:01:14:c8:10:c2:88:cf:81:
60:4f:63:ce:c6:69:c8:d7:22:36:d9:d1:86:17:ee:
49:5c:e1:51:3e:b3:a1:6e:31:25:fb:e6:73:eb:1d:
92:06:0d:91:ba:f1:73:cd:7d:d5:02:04:a6:5a:d4:
95:78:ec:37:85:fd:65:b8:ed:d9:0d:1c:dd:44:c3:
d6:1c:cd:ee:92:f0:e3:2b:fb:50:ef:b6:53:c3:bd:
2b:25:34:92:fe:a9:5f:c1:ca:95:ff:ef:2d:76:53:
5b:c4:d5:4b:14:91:fb:1c:77:fc:8c:2c:2d:64:bc:
99:11:4f:e0:a4:dc:b9:19:19:30:0f:4d:bf:cd:ae:
61:5f:9d:bf:09:03:cb:31:90:6f:88:95:f6:67:2a:
92:12:5c:90:36:32:e9:8d:c8:2b:cb:58:af:9a:06:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E7:1B:CB:60:3A:09:C6:7C:73:FF:7C:69:D0:54:23:DF:90:C6:35
X509v3 Authority Key Identifier:
keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/3853657658CA11F188C8E1F19D833773.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.82.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:6f:08:c4:82:ea:e1:a2:15:e4:fa:b9:b3:c3:37:f8:55:5d:
8d:8c:3b:ea:98:75:d8:47:40:92:91:41:7b:72:30:fe:be:38:
11:28:c5:50:7e:c0:47:ca:53:7a:dd:73:d8:75:6f:c3:21:5c:
72:52:4c:a6:2a:c0:60:2e:ee:4d:d1:25:9c:c7:bd:e4:46:f3:
2a:0c:4e:6a:14:3e:b6:58:05:fd:af:c1:97:42:4c:7f:6d:a8:
5b:4e:e4:74:a1:f4:2a:6e:10:46:5d:2f:d0:0f:51:a3:87:6c:
c5:ee:00:3e:0b:04:cb:6d:6d:f8:67:a0:89:87:92:50:97:39:
6b:4d:ff:75:13:bd:80:0c:93:61:c7:80:a7:98:f6:f5:16:0d:
a2:b6:a8:ed:f8:3a:92:f0:7b:99:e1:8c:df:7f:54:64:0d:77:
90:d2:d4:93:d2:cd:d0:6c:bc:a5:f4:65:d2:4c:46:07:64:40:
91:d7:0b:c0:b5:d5:2f:8e:eb:fb:41:b7:97:08:9b:23:32:9d:
bc:23:78:3b:86:cc:e2:ae:85:95:69:b9:be:69:cf:9e:7a:1d:
e1:1c:30:d2:b6:f2:f9:75:76:8e:4a:ff:ad:c1:ec:d2:ba:83:
8c:06:1e:20:21:b3:d0:a3:17:03:76:bf:44:5f:e4:56:07:9e:
53:bb:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:27 2026 by rpki-client