
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/E426603AA29C11F1B8B5B60D3311F970.roa
File: E426603AA29C11F1B8B5B60D3311F970.roa (raw, json)
Hash identifier: Nv3QmjlVhbAgsVcim0US8JDU8UTwNmJE6Th9Fn9Q2oo=
Subject key identifier: 85:34:B1:43:A5:A4:17:63:0C:D7:F4:11:F2:1E:BB:7F:A3:3F:02:F7
Certificate issuer: /CN=A914E801/serialNumber=628125351377C5906B849BA05267987E17AE2DE4
Certificate serial: 49
Authority key identifier: 62:81:25:35:13:77:C5:90:6B:84:9B:A0:52:67:98:7E:17:AE:2D:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/E426603AA29C11F1B8B5B60D3311F970.roa
Signing time: Fri 28 Aug 2026 05:00:27 +0000
ROA not before: Fri 28 Aug 2026 05:00:27 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 13335
IP address blocks: 43.229.39.0/24 maxlen: 24
103.41.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.crl
rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 08:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E801, serialNumber=628125351377C5906B849BA05267987E17AE2DE4
Validity
Not Before: Aug 28 05:00:27 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a9115eb-16cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:41:8e:32:df:b3:df:a8:06:cc:09:80:3d:
da:63:7d:c3:a3:04:d8:f6:5f:b9:ba:d1:9f:74:00:
1c:c3:5d:34:96:eb:d6:2d:88:87:2f:07:90:16:6c:
36:e7:e7:4d:f7:be:5e:15:8b:c7:76:77:fe:28:24:
49:bc:2a:76:3a:d9:68:04:86:e5:97:b8:51:7b:ae:
e3:dc:e0:ac:f6:a9:ce:9b:47:b6:8d:4f:9a:06:dd:
26:7c:9f:e9:1e:fc:96:93:1b:97:7d:e6:e6:99:9f:
e0:f3:96:32:4e:01:2b:b0:11:17:49:2d:7f:f5:07:
93:d6:ae:f5:c9:e4:f6:46:02:c7:73:0d:6e:51:37:
99:1e:32:60:e3:6c:20:37:ce:f1:ce:aa:81:8d:04:
2e:0b:8b:4a:dc:56:01:bc:c8:5f:f8:60:99:48:88:
23:a9:04:e5:7c:cb:69:35:dd:03:b3:0b:14:35:ef:
c6:08:42:fe:84:5f:45:d2:b0:84:b0:12:3a:5c:95:
34:eb:b9:04:8d:ba:af:b2:54:db:63:71:6e:47:ed:
ff:d2:98:8b:30:91:e1:21:ca:6d:a6:c7:ad:0b:9e:
4a:0b:a3:93:ed:06:09:e2:a9:36:c8:63:44:75:3a:
36:2f:39:21:35:77:87:a2:46:cd:c9:e9:6e:d9:23:
63:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:34:B1:43:A5:A4:17:63:0C:D7:F4:11:F2:1E:BB:7F:A3:3F:02:F7
X509v3 Authority Key Identifier:
keyid:62:81:25:35:13:77:C5:90:6B:84:9B:A0:52:67:98:7E:17:AE:2D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/YoElNRN3xZBrhJugUmeYfheuLeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoElNRN3xZBrhJugUmeYfheuLeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E801/108EB0623E2711F19E9B7397B5833773/E426603AA29C11F1B8B5B60D3311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.229.39.0/24
103.41.125.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:cf:23:c7:a4:30:ff:24:34:12:5c:7c:9c:ef:00:a1:9a:f9:
78:88:7c:1b:98:9b:c9:28:ac:d5:3b:f6:ba:bc:f2:e2:e5:61:
ce:dc:20:36:cf:f3:f4:ed:fe:29:31:28:0c:44:4f:d1:48:33:
27:66:62:03:e5:7f:fd:8b:76:50:3f:81:3d:bb:ee:df:f0:a5:
76:92:e4:27:6b:7d:c6:a6:08:c3:54:cf:b2:17:09:c1:ae:7e:
30:67:70:32:0f:67:d8:a4:62:f8:c4:fb:99:d2:47:4f:40:2d:
65:94:4c:aa:2c:c2:4b:09:32:e0:2f:7b:18:62:d5:c8:12:54:
48:cc:43:7b:48:90:4f:94:ef:35:61:db:31:74:02:ae:5d:52:
88:8e:f2:7a:1d:84:eb:5d:c5:fd:5e:48:f5:74:18:e7:82:5a:
9a:40:b3:fb:c4:a5:69:98:00:ab:bf:2a:89:e3:ec:bc:d9:21:
b2:40:4f:df:92:4c:cd:75:bc:94:1f:d8:b2:b6:08:1d:5a:e5:
d3:2b:0b:35:0e:5f:77:36:8d:1e:48:1c:19:a6:d6:9b:90:2e:
3e:20:05:56:8a:97:d7:9d:27:02:22:c4:f4:2f:7d:8f:84:ca:
2f:e9:8b:d9:cb:40:7b:5a:45:8b:31:9b:87:00:f8:e9:f2:43:
06:78:4e:ec
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RTgwMTExMC8GA1UEBRMoNjI4MTI1MzUxMzc3QzU5MDZCODQ5QkEwNTI2Nzk4N0Ux
N0FFMkRFNDAeFw0yNjA4MjgwNTAwMjdaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhOTExNWViLTE2Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHZUGOMt+z36gGzAmAPdpjfcOjBNj2X7m60Z90ABzDXTSW69YtiIcvB5AWbDbn
5033vl4Vi8d2d/4oJEm8KnY62WgEhuWXuFF7ruPc4Kz2qc6bR7aNT5oG3SZ8n+ke
/JaTG5d95uaZn+DzljJOASuwERdJLX/1B5PWrvXJ5PZGAsdzDW5RN5keMmDjbCA3
zvHOqoGNBC4Li0rcVgG8yF/4YJlIiCOpBOV8y2k13QOzCxQ178YIQv6EX0XSsISw
EjpclTTruQSNuq+yVNtjcW5H7f/SmIswkeEhym2mx60LnkoLo5PtBgniqTbIY0R1
OjYvOSE1d4eiRs3J6W7ZI2NdAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUhTSxQ6Wk
F2MM1/QR8h67f6M/AvcwHwYDVR0jBBgwFoAUYoElNRN3xZBrhJugUmeYfheuLeQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFODAxLzEwOEVCMDYyM0Uy
NzExRjE5RTlCNzM5N0I1ODMzNzczL1lvRWxOUk4zeFpCcmhKdWdVbWVZZmhldUxl
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWW9FbE5STjN4WkJyaEp1Z1VtZVlmaGV1TGVRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTgwMS8xMDhFQjA2MjNFMjcxMUYxOUU5QjczOTdCNTgzMzc3My9FNDI2NjAzQUEy
OUMxMUYxQjhCNUI2MEQzMzExRjk3MC5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAAr5ScDBABnKX0wDQYJKoZIhvcNAQELBQADggEBAD3PI8ekMP8kNBJc
fJzvAKGa+XiIfBuYm8korNU79rq88uLlYc7cIDbP8/Tt/ikxKAxET9FIMydmYgPl
f/2LdlA/gT277t/wpXaS5CdrfcamCMNUz7IXCcGufjBncDIPZ9ikYvjE+5nSR09A
LWWUTKoswksJMuAvexhi1cgSVEjMQ3tIkE+U7zVh2zF0Aq5dUoiO8nodhOtdxf1e
SPV0GOeCWppAs/vEpWmYAKu/Konj7LzZIbJAT9+STM11vJQf2LK2CB1a5dMrCzUO
X3c2jR5IHBmm1puQLj4gBVaKl9edJwIixPQvfY+Eyi/pi9nLQHtaRYsxm4cA+Ony
QwZ4Tuw=
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:54 2026 by rpki-client