
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/5233C98A04D211E9BA47303FC4F9AE02.roa
File: 5233C98A04D211E9BA47303FC4F9AE02.roa (raw, json)
Hash identifier: /JpbQnMGFNRO2yoA2/Q6TzM/yULRDoVi/uWv84phM/s=
Subject key identifier: C6:54:B9:9B:99:D7:F2:A9:C0:A4:DD:8F:88:C4:7B:87:80:D3:25:24
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 2113
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/5233C98A04D211E9BA47303FC4F9AE02.roa
Signing time: Wed 30 Sep 2026 16:31:44 +0000
ROA not before: Wed 30 Sep 2026 16:31:44 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 4808
IP address blocks: 218.30.223.0/24 maxlen: 24
218.30.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8467 (0x2113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Sep 30 16:31:44 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd396f-1878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:61:7d:43:bc:b7:20:1f:7c:2d:a8:26:05:ee:
f4:5f:ef:6b:3c:3a:de:e6:2a:b0:ed:cd:92:a8:79:
83:72:af:23:45:3f:86:ad:f6:22:a9:ab:45:8f:be:
13:e0:3b:f3:c6:86:df:3d:80:e8:79:ad:d4:7f:a2:
c6:8a:33:41:e8:f4:82:4b:23:77:e8:23:49:d2:ae:
bd:45:d3:52:31:62:fe:1e:ec:b8:3e:9d:21:2d:b0:
94:07:bb:ba:50:b8:ed:b9:93:91:dc:ea:76:37:d5:
e5:5a:bc:7b:32:7b:9d:99:73:8f:56:7d:c0:9e:43:
a8:d7:e5:3b:40:e3:98:0d:8c:bc:97:56:fe:43:a1:
2e:12:b0:ef:77:5e:1e:18:3a:53:b5:75:9a:07:77:
d5:cd:5a:91:0d:a8:91:e3:b7:7d:d2:70:8c:50:a3:
5a:29:3e:84:9e:fd:a0:d0:64:0e:d3:f7:cd:e2:69:
77:81:ee:ef:f4:f7:b2:b8:41:09:11:47:e5:62:81:
cf:a7:3f:6e:50:9b:85:e5:68:a6:c5:45:0f:e0:0f:
ab:e9:48:48:a4:df:af:ac:6b:a0:bf:de:d8:e7:78:
07:87:5a:ac:1c:d8:cc:4a:0a:70:83:bc:fa:78:ad:
8a:98:df:a0:c4:55:1d:29:ea:e6:92:67:2c:cc:2e:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:54:B9:9B:99:D7:F2:A9:C0:A4:DD:8F:88:C4:7B:87:80:D3:25:24
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/5233C98A04D211E9BA47303FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
218.30.223.0/24
218.30.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:5a:96:2e:64:01:82:93:5e:07:59:6c:74:4c:ce:6a:18:f6:
ff:43:e7:59:aa:56:ac:5b:13:b9:4f:00:d1:48:39:3f:04:dc:
51:fa:d0:c5:ca:c1:69:b6:ba:68:64:fc:66:d2:65:80:37:2f:
fc:b2:88:5d:4a:f8:b3:80:fe:55:52:d7:2d:a7:ad:64:85:15:
19:ce:71:84:c1:a6:98:6a:03:6e:9d:d3:3e:a4:3c:ad:34:21:
c7:2a:0b:3f:e1:ca:e5:b5:f0:81:e9:1c:f0:f1:e6:fc:56:52:
07:01:69:a5:94:6f:78:f2:9e:6b:bc:7a:28:ad:ee:95:df:24:
d0:5c:b0:3a:4a:73:80:2a:4f:db:68:44:b2:45:6e:c7:45:09:
47:c9:49:30:e1:8f:bc:69:95:ac:b7:5e:90:88:b6:3c:80:6c:
86:e7:da:ea:be:1e:aa:03:c5:88:b8:70:42:23:6c:f8:0d:03:
c3:1f:14:20:84:98:1b:2f:dc:99:80:08:85:5a:0e:a0:19:0f:
87:d3:f5:ba:02:33:53:eb:53:cb:02:b1:a8:a3:ab:84:48:66:
cc:8b:bb:75:e5:82:c4:a7:46:88:dc:0d:52:b2:01:64:d6:7b:
bc:e6:e5:8a:2c:22:bf:5d:2a:a5:39:fa:02:f1:de:43:a1:13:
6e:2c:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:05:05 2026 by rpki-client