
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F5CC48A804D011E994985639C4F9AE02.roa
File: F5CC48A804D011E994985639C4F9AE02.roa (raw, json)
Hash identifier: hfYdn8wwHnjsTS227dj040+/40qDeJ8yzlHUVK3UJCY=
Subject key identifier: 56:A9:1C:49:4D:EE:69:08:EC:E0:AA:FA:BF:FE:F0:4D:BD:EC:EF:6A
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 210E
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F5CC48A804D011E994985639C4F9AE02.roa
Signing time: Wed 30 Sep 2026 16:31:32 +0000
ROA not before: Wed 30 Sep 2026 16:31:32 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 23724
IP address blocks: 218.30.25.0/24 maxlen: 24
218.30.26.0/23 maxlen: 23
218.30.26.0/24 maxlen: 24
218.30.28.0/23 maxlen: 23
218.30.96.0/19 maxlen: 19
218.30.99.0/24 maxlen: 24
218.30.107.0/24 maxlen: 24
218.30.110.0/24 maxlen: 24
218.30.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 16:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8462 (0x210e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Sep 30 16:31:32 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd3964-c9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:a2:a3:e2:93:54:8f:38:95:0e:90:0a:ce:
3a:57:51:a1:66:36:a5:5a:da:dc:25:b9:3b:b2:f6:
53:0f:e1:68:ab:b9:79:7d:82:fd:48:41:7b:be:fa:
ff:71:c7:15:fd:93:54:d0:07:ea:44:ee:b9:97:06:
7e:1a:38:dd:e4:3c:d9:69:ee:a6:96:60:2a:c7:9b:
18:a0:81:f2:52:20:bf:d8:ee:9e:79:f7:56:6f:8e:
2e:75:51:bf:e6:c2:8f:99:4f:fd:0e:fc:ea:be:32:
be:81:56:3d:97:41:fd:4f:07:43:90:86:93:71:82:
54:68:bd:27:92:f4:40:72:20:f6:fa:02:31:fc:66:
30:68:f3:83:3c:b3:c0:f7:5a:b1:11:bc:72:2b:07:
43:98:24:2a:3e:f1:98:e6:77:e3:06:09:cb:71:b1:
1e:b9:8a:22:5f:6d:fa:cb:d4:b6:4e:15:53:3e:ca:
20:85:e6:b7:14:68:b7:7f:2b:a1:3a:1c:a2:82:60:
e9:d7:41:b5:86:9a:f8:de:25:0d:4b:86:7e:4a:bb:
fc:32:ff:23:bd:b2:68:c4:b6:61:45:37:5b:e7:ac:
70:c2:11:5c:a8:71:3b:5c:26:9d:13:fb:de:cb:91:
7c:55:08:31:25:09:49:28:50:06:7c:73:ca:49:af:
b8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A9:1C:49:4D:EE:69:08:EC:E0:AA:FA:BF:FE:F0:4D:BD:EC:EF:6A
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F5CC48A804D011E994985639C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
218.30.25.0-218.30.29.255
218.30.96.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:4f:06:42:44:7a:5f:a2:19:9e:84:51:cd:62:e2:cc:bb:f1:
b6:74:18:df:07:c1:29:0a:0d:3a:dc:29:ce:1b:e7:df:38:c7:
d6:21:d3:46:64:2e:d2:87:03:83:89:96:36:e4:e3:3a:12:42:
36:15:d5:89:0c:e5:8b:d3:94:c1:69:8d:86:83:0f:ec:98:00:
61:e8:8a:e0:84:d8:c9:d3:e7:30:a4:fe:89:c6:6f:7d:3f:43:
4d:b4:90:4c:cd:b1:c6:df:c1:83:95:d7:25:79:06:a5:6b:73:
e1:ca:76:22:1f:0c:92:fb:d4:25:5d:ab:dc:08:2e:24:f9:2d:
9b:af:cd:4f:fb:60:89:b9:a5:7d:dc:3c:9b:e5:2f:59:f4:24:
26:e5:3e:b1:ec:e1:f0:0d:89:9d:94:66:1c:80:97:26:d2:c9:
4b:f0:dc:e6:26:d1:b5:57:a4:c1:d3:3d:ed:4e:86:9c:6e:29:
55:cd:f9:90:8e:ac:97:55:30:81:86:0f:20:b2:9c:3e:51:24:
4e:50:18:6c:f6:46:f1:a4:3d:7b:62:7d:19:5f:10:5a:95:e3:
88:34:84:7f:ae:0d:69:65:40:95:12:3f:be:4f:fc:0f:07:fe:
8f:bd:3c:1f:ed:7a:ff:0a:ba:ea:13:90:04:e9:7f:30:9d:8d:
af:03:34:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:31 2026 by rpki-client