
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B228FE46257C11E79EE15E3CC4F9AE02.roa
File: B228FE46257C11E79EE15E3CC4F9AE02.roa (raw, json)
Hash identifier: At2+K3WQ1ElJA6cxgtuMOTjSAFaeuafZm362lRd0hqc=
Subject key identifier: 0B:5A:6A:1F:BD:8A:62:D1:12:8C:67:C3:77:85:C7:65:89:F0:A8:55
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 210C
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B228FE46257C11E79EE15E3CC4F9AE02.roa
Signing time: Wed 30 Sep 2026 16:31:27 +0000
ROA not before: Wed 30 Sep 2026 16:31:27 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 17896
IP address blocks: 123.172.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8460 (0x210c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Sep 30 16:31:27 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd395f-62b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:c8:63:e2:2b:d0:40:34:88:20:ce:cd:39:
3e:98:16:df:7d:71:a7:d1:11:8d:69:f6:c8:3f:85:
b5:b0:c9:1b:f8:bd:fa:d5:93:e2:c8:56:67:03:0d:
fc:c2:0c:2b:53:82:e6:26:ac:a1:23:3d:f9:64:ba:
9d:fd:fc:57:07:cb:f6:3f:50:1e:b8:c8:42:19:a9:
f6:6d:eb:c4:4a:e5:17:e5:25:99:22:4f:c7:c2:7e:
fc:30:33:f9:ad:c4:36:62:83:15:92:13:7b:68:b2:
a4:ab:bc:69:71:1f:22:0d:79:88:15:d6:44:86:cc:
1c:6e:4c:7a:7e:9d:63:01:ae:dd:fd:13:1e:49:3c:
ba:43:9b:96:9b:ab:68:79:c4:f7:31:d1:73:3b:a1:
89:8f:0c:1d:68:31:43:a8:41:8d:70:c4:f2:fb:36:
37:3b:47:0a:67:16:99:2c:03:c6:03:1f:3b:87:eb:
8d:41:8a:d0:ea:01:b2:0d:f7:20:24:c7:08:2d:ee:
81:d7:77:ca:55:aa:e8:b2:b4:ae:8f:b6:67:da:44:
ac:ec:f3:e1:ab:9e:72:4d:86:90:8d:f5:db:e6:e5:
a8:51:2f:be:c9:ed:e0:53:ca:d0:a2:5c:61:ae:0b:
5b:12:b8:7f:d3:1d:45:de:ba:99:68:7d:18:b2:57:
17:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5A:6A:1F:BD:8A:62:D1:12:8C:67:C3:77:85:C7:65:89:F0:A8:55
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B228FE46257C11E79EE15E3CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
123.172.0.0/20
Signature Algorithm: sha256WithRSAEncryption
45:21:8e:da:e3:47:8c:62:00:75:70:28:6a:01:e6:84:3e:54:
7e:b6:62:d2:be:84:ef:87:a4:2b:7c:d7:d0:90:92:b4:21:04:
90:20:b8:9f:24:b2:ba:70:d2:e8:82:aa:7d:7b:36:e7:8e:ef:
c4:59:26:61:11:19:f0:86:58:04:0e:83:33:49:6f:6c:63:95:
5d:18:c1:4f:fa:6c:41:73:08:96:26:1a:3b:3c:b1:a4:10:c4:
9b:07:f3:ca:d8:24:fb:05:88:3d:6b:f6:db:b3:35:8d:fa:e4:
d7:e2:d5:be:c6:d4:af:24:14:f4:5d:c8:ad:a0:1a:45:68:d4:
f7:40:ed:00:69:84:2f:a6:fc:78:85:14:8d:fd:7b:1b:bb:e4:
df:bb:3d:dc:c9:60:14:60:c3:bc:de:9a:b4:77:8e:8b:92:64:
66:a3:21:24:71:14:44:8d:b8:ea:41:2f:13:06:8e:d2:2d:35:
ba:c5:e7:41:5f:3a:1b:df:8b:40:44:ce:22:d9:5e:03:57:51:
e1:55:3a:0d:c5:cf:47:7a:20:74:81:ac:a7:6f:f5:84:63:cb:
e5:63:4e:7d:c1:e4:44:c3:bf:99:a4:8d:78:2c:98:49:63:99:
b0:31:79:de:cd:20:e3:bb:f6:af:23:b4:3d:4e:ef:58:a9:15:
e3:35:91:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:04:25 2026 by rpki-client