
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/50550748066011EEA5F59657C4F9AE02.roa
File: 50550748066011EEA5F59657C4F9AE02.roa (raw, json)
Hash identifier: vyTNqKZJeLDrlZlP4MaReEwY+T37JzuzpVuS51esAt4=
Subject key identifier: 94:12:79:7D:3B:91:F8:8B:5A:03:E6:B3:1D:82:54:B6:6D:B2:54:CC
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 204C
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/50550748066011EEA5F59657C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:12:50 +0000
ROA not before: Sat 30 Aug 2025 16:35:46 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 58466
IP address blocks: 121.14.0.0/19 maxlen: 19
121.14.32.0/22 maxlen: 22
121.14.36.0/22 maxlen: 22
121.14.40.0/21 maxlen: 21
121.14.48.0/20 maxlen: 20
121.14.64.0/21 maxlen: 21
121.14.192.0/20 maxlen: 20
125.88.31.0/24 maxlen: 24
125.88.64.0/23 maxlen: 23
125.88.168.0/21 maxlen: 21
125.94.32.0/19 maxlen: 19
125.94.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 16:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8268 (0x204c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Aug 30 16:35:46 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48fb2-8937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:48:a6:5b:ca:fb:89:18:11:17:e2:46:c5:
97:c4:ee:cb:f8:5f:83:f5:ca:c0:20:27:02:ef:25:
d4:c8:de:15:30:97:f4:9a:2f:55:4b:cf:bf:45:c4:
c7:9e:65:af:12:3d:a2:1a:7d:ef:71:8a:0b:4d:36:
d1:f7:0e:17:98:9b:ca:11:b3:2b:04:e4:51:f1:86:
16:0e:71:28:73:2b:28:fa:5f:24:f1:25:a4:f2:f4:
5f:3e:e5:12:0d:be:b6:f8:55:42:be:73:c0:70:f7:
49:1a:f7:69:47:81:cd:0d:a0:40:40:09:98:65:6d:
2f:36:7b:54:cd:c9:90:dc:19:a8:a0:9a:bd:a5:13:
01:de:77:5f:2d:7d:d5:84:7d:e4:34:44:ae:27:9b:
39:ff:9a:d0:9c:47:0c:36:32:59:38:0d:67:1a:2a:
4c:33:b4:d7:25:71:00:a1:63:40:e6:6d:2f:1a:02:
ad:75:b5:58:07:93:41:38:a9:37:7b:73:59:ad:e3:
0f:e9:ad:68:b5:a6:18:c8:64:64:55:ca:bc:73:2e:
15:d4:11:2c:7e:32:ad:71:44:df:b3:0c:cf:1d:12:
8c:6e:d8:54:7f:11:dd:63:dd:d5:be:d1:95:08:ac:
1a:c9:6f:df:84:2b:6b:b1:5b:b5:13:be:94:d6:7b:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:12:79:7D:3B:91:F8:8B:5A:03:E6:B3:1D:82:54:B6:6D:B2:54:CC
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/50550748066011EEA5F59657C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
121.14.0.0-121.14.71.255
121.14.192.0/20
125.88.31.0/24
125.88.64.0/23
125.88.168.0/21
125.94.32.0/19
125.94.212.0/22
Signature Algorithm: sha256WithRSAEncryption
75:22:d4:9a:d9:79:46:01:81:bd:2b:e3:4b:ad:ea:46:8f:77:
34:8f:68:03:1b:95:d2:5c:88:3e:ba:8a:a0:5e:8e:15:8b:40:
f3:31:5f:61:56:ad:3d:7c:65:db:f0:ba:bb:32:9e:f1:ee:8b:
fa:cd:44:98:8e:73:7e:ab:69:bf:ce:5d:04:c7:fe:82:ec:78:
4c:2a:76:88:c5:0b:09:fe:e8:27:ee:3e:10:5a:26:9e:22:d7:
3b:43:70:71:d1:d5:e3:63:95:92:e3:aa:ca:8c:52:75:9a:77:
d1:0b:6c:5b:21:db:ae:1c:9f:fe:4b:fd:cc:4c:35:e4:7a:41:
6b:02:5f:14:a1:4e:63:d6:ad:37:b5:44:7f:e2:35:07:1e:7a:
25:c1:33:29:48:6b:cf:5a:93:66:e2:c7:c8:2b:b0:58:01:0c:
63:6e:02:2c:46:a5:b7:96:cc:a0:4a:b7:db:d8:15:88:5c:ae:
7f:7f:15:a6:05:62:3f:a1:90:68:b0:10:50:fd:a6:cd:33:45:
6e:d7:b1:48:e7:f0:c5:7d:63:e0:93:27:f7:71:3c:ae:c9:00:
c4:7a:b6:69:f1:05:ef:aa:8f:b6:dd:7f:61:e2:0b:b9:80:12:
92:f9:5e:9f:14:a2:2d:7c:91:10:cf:13:4d:ec:a8:ee:c9:08:
69:d0:95:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:45:54 2026 by rpki-client