
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/A42AF5D0559111F08D8D0584C4F9AE02.roa
File: A42AF5D0559111F08D8D0584C4F9AE02.roa (raw, json)
Hash identifier: t2om7TbFW0IU1AjhuHkOR/Cy3KPIB2YN2mwmgdujesY=
Subject key identifier: E4:36:D4:B2:EC:6E:07:08:F6:98:B1:03:55:7F:AB:3B:55:DD:EE:40
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 2107
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/A42AF5D0559111F08D8D0584C4F9AE02.roa
Signing time: Wed 30 Sep 2026 16:31:14 +0000
ROA not before: Wed 30 Sep 2026 16:31:14 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 151058
IP address blocks: 124.225.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8455 (0x2107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Sep 30 16:31:14 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd3951-2452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:cf:3b:46:88:3e:6f:b0:a3:53:0e:c8:e1:
c6:02:ef:1e:97:63:67:7d:8d:ab:1f:7f:da:0a:c9:
cb:03:e4:1d:71:2d:b1:25:42:68:1d:d4:88:95:eb:
c5:02:7b:4c:1e:23:47:e0:98:3b:df:bf:a6:d2:07:
34:fd:71:d8:56:03:7a:72:e9:a3:4f:43:8c:3a:69:
7a:20:f0:aa:ce:56:77:f5:6e:7c:27:e3:ac:0d:0a:
ee:a4:a8:d1:9e:db:fd:82:04:fa:57:d4:dd:2e:d7:
55:4a:c3:08:3e:0e:d1:52:58:ee:66:ff:de:4f:fa:
41:3a:0c:16:67:91:9d:1a:0f:cb:1c:62:bf:ed:13:
67:cd:f6:ec:08:37:15:26:34:65:db:a5:1e:3c:3c:
9d:26:6f:c6:6b:71:eb:3e:58:0d:37:58:72:09:2e:
06:a1:50:d1:44:4e:f3:b5:ca:46:60:e4:aa:f6:2b:
9a:e3:5d:5c:19:fe:c8:61:b0:84:8f:22:d2:59:2e:
ee:e6:02:e2:4b:63:23:4e:83:2f:55:f2:18:39:30:
3f:5a:7a:00:6e:fe:5c:be:7c:22:c4:89:92:b8:dd:
73:28:89:a9:f1:69:f0:1f:7f:36:dc:58:f4:e6:ef:
71:84:9a:41:4d:44:79:1b:7a:ef:e6:c8:ab:cf:60:
47:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:36:D4:B2:EC:6E:07:08:F6:98:B1:03:55:7F:AB:3B:55:DD:EE:40
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/A42AF5D0559111F08D8D0584C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
124.225.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:ab:c2:ac:97:c4:34:95:b0:3c:dc:d2:58:41:c4:9c:cb:dc:
ff:7e:5d:36:f3:56:37:d7:a1:2b:08:38:bb:2c:ce:7c:61:7b:
5f:82:e3:b0:46:1b:70:4b:a8:7a:43:41:d7:58:8e:e1:8e:51:
e4:29:30:63:09:17:63:f3:65:f8:07:86:8b:93:22:b1:8b:55:
ef:ac:af:27:d6:a9:5e:05:7c:8b:c4:fa:f2:cd:c5:e9:51:9f:
b4:16:1b:11:20:a5:a7:d8:05:ff:82:ba:48:88:32:92:b2:35:
17:1c:03:b6:45:28:97:fb:17:03:60:f3:3d:9e:d6:6d:34:68:
08:a6:56:8f:e0:27:2c:2c:f2:88:42:c5:db:1b:36:6c:b9:a1:
94:99:44:57:b4:4f:5a:ce:cf:91:22:ce:e7:f5:61:5f:9c:b2:
0c:86:c1:0f:91:58:d5:a4:08:c8:80:b3:eb:1d:3f:01:46:b1:
c7:14:1a:e9:39:cb:82:98:e2:bd:86:f5:59:2b:10:63:07:c2:
77:54:2e:2d:ed:6e:8b:b6:e5:12:c2:c2:98:9d:28:21:18:2a:
e1:2b:6c:af:c5:59:3c:20:62:52:dc:ca:61:f2:a8:7a:4a:d3:
c0:d7:51:87:b3:ea:82:9d:df:fd:26:15:ac:08:16:df:a0:09:
78:17:89:a8
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgICIQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1
NkU4QUM4QkEwHhcNMjYwOTMwMTYzMTE0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJkMzk1MS0yNDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu3HPO0aIPm+wo1MOyOHGAu8el2NnfY2rH3/aCsnLA+QdcS2xJUJoHdSIlevF
AntMHiNH4Jg737+m0gc0/XHYVgN6cumjT0OMOml6IPCqzlZ39W58J+OsDQrupKjR
ntv9ggT6V9TdLtdVSsMIPg7RUljuZv/eT/pBOgwWZ5GdGg/LHGK/7RNnzfbsCDcV
JjRl26UePDydJm/Ga3HrPlgNN1hyCS4GoVDRRE7ztcpGYOSq9iua411cGf7IYbCE
jyLSWS7u5gLiS2MjToMvVfIYOTA/WnoAbv5cvnwixImSuN1zKImp8WnwH3823Fj0
5u9xhJpBTUR5G3rv5sirz2BHDwIDAQABo4ICXzCCAlswHQYDVR0OBBYEFOQ21LLs
bgcI9pixA1V/qztV3e5AMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvQTQyQUY1RDA1
NTkxMTFGMDhEOEQwNTg0QzRGOUFFMDIucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMAfOEwDQYJKoZIhvcNAQELBQADggEBAKWrwqyXxDSVsDzc0lhBxJzL
3P9+XTbzVjfXoSsIOLssznxhe1+C47BGG3BLqHpDQddYjuGOUeQpMGMJF2PzZfgH
houTIrGLVe+sryfWqV4FfIvE+vLNxelRn7QWGxEgpafYBf+CukiIMpKyNRccA7ZF
KJf7FwNg8z2e1m00aAimVo/gJyws8ohCxdsbNmy5oZSZRFe0T1rOz5Eizuf1YV+c
sgyGwQ+RWNWkCMiAs+sdPwFGsccUGuk5y4KY4r2G9VkrEGMHwndULi3tbou25RLC
wpidKCEYKuErbK/FWTwgYlLcymHyqHpK08DXUYez6oKd3/0mFawIFt+gCXgXiag=
-----END CERTIFICATE-----
Generated at Mon Oct 26 22:59:09 2026 by rpki-client