
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/D86268E877F111EFADAB6362C4F9AE02.roa
File: D86268E877F111EFADAB6362C4F9AE02.roa (raw, json)
Hash identifier: oemFiSu7xvtYlYRUpCkXZaggbkGyG52ArxoSenXNp0o=
Subject key identifier: 4C:C8:93:50:47:57:71:9E:3C:34:BA:85:F9:99:EA:8A:15:05:CE:1F
Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial: 0174
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/D86268E877F111EFADAB6362C4F9AE02.roa
Signing time: Sun 23 Aug 2026 04:54:37 +0000
ROA not before: Sun 23 Aug 2026 04:54:37 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 137552
IP address blocks: 160.30.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 04:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Validity
Not Before: Aug 23 04:54:37 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8a7d0d-5c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:00:f2:fb:d1:88:eb:e8:99:c8:10:8e:96:1a:
8c:31:cf:fa:7a:b3:66:f1:b8:28:63:df:e2:ea:07:
c0:40:24:89:8a:93:49:bb:cc:2a:97:b8:e1:5f:5d:
6c:be:eb:0a:e2:9c:73:48:ac:81:86:e2:5f:a1:e3:
92:65:cf:3e:78:33:a5:d2:02:21:5a:c3:be:66:51:
be:f2:67:0d:27:46:fe:f5:0c:07:24:67:3c:5f:11:
08:34:55:95:20:b9:13:d4:01:60:1b:9b:79:60:fa:
91:ee:16:7f:9d:70:a8:5e:a8:7d:61:f4:a7:fc:05:
18:e4:66:8a:94:67:7e:72:5e:b5:79:e0:8a:46:45:
0d:3d:1d:2e:de:f6:a9:e3:10:2d:e2:80:00:e5:f6:
96:3e:39:24:28:9b:98:ec:17:d0:74:53:ce:ae:e4:
d8:20:af:ef:30:2c:1b:ad:33:72:03:61:4a:62:c7:
fe:9a:48:49:a9:b2:a9:f0:f9:58:0c:ce:fb:8b:ee:
0a:9d:a9:ba:d0:02:9f:75:81:f6:78:d4:9b:4b:5a:
e3:e9:4f:bd:bc:59:eb:1c:cf:f2:88:5e:d5:36:e9:
07:c3:bf:00:c0:ba:5a:45:08:a5:0c:4f:c8:7c:b9:
cf:1b:d2:dd:a0:06:b7:c3:00:5e:37:ee:dc:1c:d9:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C8:93:50:47:57:71:9E:3C:34:BA:85:F9:99:EA:8A:15:05:CE:1F
X509v3 Authority Key Identifier:
keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/D86268E877F111EFADAB6362C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.4.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:68:bb:10:a7:2f:74:99:e3:cf:6b:b8:3b:d1:7e:a8:36:a7:
95:85:00:3d:4e:21:ef:f3:56:98:f8:95:27:01:75:c9:f3:ae:
8e:f3:26:17:98:c5:23:53:cd:8f:81:86:fd:d1:3f:5c:34:a0:
0e:33:6f:a0:ec:4c:15:50:91:e4:fb:34:2e:7b:80:81:3c:4a:
62:b8:94:7b:bf:9a:94:db:7c:02:41:c6:5c:36:0d:d8:2b:5f:
33:d3:3d:e6:a8:d2:64:87:c3:be:f0:d7:6a:21:91:71:8e:fd:
24:4f:06:0b:81:fe:c8:56:82:a3:60:05:4b:2d:d0:1e:9f:c6:
4c:63:7d:5e:0e:fc:eb:89:30:2e:bb:fd:78:02:9e:01:b3:fb:
e5:75:c1:8f:94:3c:1d:f2:fc:bb:0b:46:85:eb:0b:0e:2b:69:
69:3d:1f:fc:f3:08:49:f8:78:72:96:29:fa:01:da:ad:40:a0:
03:e2:44:13:12:89:23:63:b4:e9:c7:ae:a7:5a:7e:e2:54:0d:
d9:51:96:e6:60:1e:04:a0:c9:81:fd:4c:2c:0f:15:df:93:a4:
0c:eb:fd:58:95:4c:d8:05:f2:6c:d7:ff:ce:06:60:9a:ca:62:
17:8d:c7:cd:ae:a3:2c:d8:d2:92:ee:9a:56:e3:fe:04:ba:b4:
26:93:79:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:36 2026 by rpki-client