
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/9D1066F8474111F08A856E0FC4F9AE02.roa
File: 9D1066F8474111F08A856E0FC4F9AE02.roa (raw, json)
Hash identifier: 3mUKIpK5ysDArEDV3XnxBsCBKd6j9sbsM4R0Fe9UpVo=
Subject key identifier: BB:2C:AC:DA:63:F8:85:91:A1:7A:B9:B6:00:56:77:5B:74:5F:DC:8E
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 2039
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/9D1066F8474111F08A856E0FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:12:34 +0000
ROA not before: Sat 30 Aug 2025 16:35:26 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 148981
IP address blocks: 121.62.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 16:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8249 (0x2039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Aug 30 16:35:26 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48fa1-efa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:90:62:6a:27:28:cb:ad:75:60:4f:c0:1f:
0c:22:58:0a:6d:43:20:6c:a6:51:32:5a:41:a1:05:
4a:f1:3a:08:1a:6b:02:d9:f6:8b:b1:3a:c5:f6:9c:
6b:70:45:62:9e:b6:6a:6e:ab:c6:a9:28:13:69:b8:
1a:e6:92:e7:86:5d:11:c4:96:84:96:a0:ef:df:44:
2c:4c:88:ec:7e:fc:f9:21:38:f4:04:8a:c4:30:ba:
73:07:fa:ca:14:ab:74:ec:e9:13:90:94:d6:13:82:
f3:b1:3e:8a:0c:15:25:6e:eb:6d:59:2c:2b:6a:82:
cd:a9:d3:5d:e8:63:65:89:0f:8c:d6:5f:67:3d:13:
34:c2:6d:65:f7:6b:c8:2d:33:0b:11:11:bc:29:e1:
0b:5c:9a:bc:36:0e:a5:5d:b5:dd:b3:f4:55:02:cb:
a7:ae:d6:32:71:0b:90:23:60:1c:ce:de:62:ed:c1:
8b:d1:e3:1b:aa:52:43:71:89:cd:85:23:d2:6c:8e:
8d:63:f3:73:ea:03:a8:9c:aa:c3:5f:d7:de:71:c6:
33:7d:e8:62:9c:eb:da:c1:50:4d:9e:db:9b:b9:54:
08:da:e9:38:f7:57:61:51:66:3b:a8:c3:2d:9f:d9:
2a:15:d8:90:27:0b:f8:5e:39:5f:30:d9:7c:68:25:
2e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2C:AC:DA:63:F8:85:91:A1:7A:B9:B6:00:56:77:5B:74:5F:DC:8E
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/9D1066F8474111F08A856E0FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
121.62.16.0/21
Signature Algorithm: sha256WithRSAEncryption
70:b7:ec:6b:98:5e:81:ea:70:3c:bd:b6:7e:cc:f1:81:50:0f:
16:18:58:66:a4:b2:a7:b4:e4:93:c8:6e:0b:6b:2d:a5:a8:5b:
15:41:51:9e:40:b8:e2:a7:82:94:6d:3f:0b:cb:88:e4:e4:97:
fa:bb:24:55:6e:f6:e5:4a:11:8c:6f:73:cb:7d:eb:c8:9b:81:
ac:d6:63:48:e8:0e:95:0e:d0:96:63:16:29:94:54:48:d1:56:
34:ba:12:69:9a:c6:93:14:47:87:ca:77:d7:4c:ac:28:2c:a3:
18:6b:e5:f3:de:33:3a:db:35:b5:dc:aa:8d:ef:0a:da:ca:53:
ba:51:75:a7:79:33:08:12:20:21:a8:c6:87:91:87:67:12:b1:
8a:85:bb:d2:03:66:a6:57:93:32:1c:c4:2c:19:c3:7d:90:61:
15:d0:46:5d:4e:e4:22:79:5e:f9:0c:d1:fa:39:67:f0:df:4d:
ee:e4:dd:0b:46:7a:37:f4:bb:71:08:03:56:31:a6:9a:14:9b:
43:2f:d1:f4:c2:f9:4d:74:cd:39:dc:a2:83:b4:03:49:da:7d:
ac:f8:81:08:db:2a:6e:bc:31:da:23:04:16:4c:c9:ef:1a:ad:
77:d5:8e:1a:86:4c:a8:25:27:19:e3:cb:41:47:2c:a7:f7:14:
37:0e:8f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:47:04 2026 by rpki-client