
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F59F290A459B11F0AE80E433C4F9AE02.roa
File: F59F290A459B11F0AE80E433C4F9AE02.roa (raw, json)
Hash identifier: x4hqkMKW3DDXFgkrqMhlRpe96z/X9WQNlz9uH+lk7+8=
Subject key identifier: 28:E4:45:DD:21:C1:A3:01:75:26:66:A3:E5:86:10:68:6F:52:3E:B4
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 2036
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F59F290A459B11F0AE80E433C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:12:31 +0000
ROA not before: Sat 30 Aug 2025 16:35:23 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 141006
IP address blocks: 1.183.208.0/20 maxlen: 24
240e:918:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 16:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8246 (0x2036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Aug 30 16:35:23 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48f9f-7273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:6e:1c:9f:ac:ba:c6:78:78:b1:b7:06:d4:
64:17:ee:13:19:79:7a:39:1d:bf:1b:c4:b8:fb:f5:
c0:9e:35:84:62:b4:63:c0:a5:2e:d6:22:bd:75:e8:
23:64:d4:aa:b0:f9:0d:76:e3:9d:9d:51:da:7b:14:
ce:ef:db:bf:25:55:14:a9:cb:70:91:c2:a8:bf:3c:
f9:43:5b:d9:57:b4:37:f8:6b:e2:c0:fe:57:d0:64:
44:51:6a:ec:98:be:cd:21:dd:49:a7:46:67:23:eb:
20:0b:28:62:51:e5:f4:5d:7d:81:28:f8:7e:90:27:
8b:70:3a:f9:1b:43:4f:5c:7b:be:d7:03:08:0f:64:
b4:e5:3e:43:36:51:90:1b:ec:4f:6d:58:fd:f8:39:
60:6c:b0:ad:6f:cb:d2:4c:00:92:5b:1b:c8:f7:7a:
ff:78:01:13:45:ca:43:17:82:71:55:85:09:6c:e8:
d7:67:38:00:60:db:be:72:30:ee:03:b8:91:2f:63:
9e:2d:92:32:ed:1f:36:16:66:a3:e7:44:00:8e:51:
7e:8a:f7:9d:bc:66:0b:6f:7b:35:e3:5b:1d:f5:90:
90:39:7c:c3:49:7f:9c:2d:8e:86:3a:ca:08:ac:98:
01:73:f2:c5:d7:4a:83:15:73:04:ce:23:67:8f:0a:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E4:45:DD:21:C1:A3:01:75:26:66:A3:E5:86:10:68:6F:52:3E:B4
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F59F290A459B11F0AE80E433C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.183.208.0/20
IPv6:
240e:918:a000::/40
Signature Algorithm: sha256WithRSAEncryption
64:2a:be:cc:81:c0:d7:58:56:b5:7e:2c:91:9d:4b:87:0f:36:
61:59:d9:aa:90:64:bb:18:f8:b6:99:d9:d7:87:dc:50:d8:9a:
ac:2e:07:95:66:cf:2c:db:e7:54:b9:ea:df:e0:90:09:f8:76:
ea:b7:cf:0f:b6:2d:ba:17:8d:88:61:12:c1:0e:08:bf:df:06:
5b:85:f2:96:ba:e0:2d:29:27:7b:b1:d4:5a:97:84:ff:77:79:
f3:ab:59:4f:fc:22:dd:1f:5e:65:48:98:47:a6:3b:4a:b4:93:
95:05:59:1c:af:bc:64:24:0c:0e:e0:22:10:2b:f5:0e:0e:2e:
38:d9:4f:12:57:48:a2:8d:a4:a8:20:0b:eb:9e:9b:a1:1e:d1:
c3:a9:34:41:35:c0:e3:36:29:f9:bd:63:b5:8a:00:ee:48:69:
4c:82:46:bd:43:92:40:ed:92:5e:75:8b:3d:98:42:e8:e9:e5:
d6:6d:66:59:50:cc:97:f0:62:d1:8e:dd:19:4d:14:4d:a1:47:
bc:2f:2a:e2:31:7a:1f:ad:53:b8:30:20:fc:bd:65:42:e1:17:
77:f5:5d:0e:ca:7d:8e:4d:a9:88:1c:78:fc:81:6a:b2:0b:82:
f4:5f:50:cf:ae:cb:f0:04:f0:cc:8b:28:9a:80:96:a5:63:a6:
6e:9a:e6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:47:04 2026 by rpki-client