
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F112/B68FB67A2E9411F1948A2D2FB2833773/F2364AB42E9811F1AF05F936B4833773.roa
File: F2364AB42E9811F1AF05F936B4833773.roa (raw, json)
Hash identifier: b6aOPDCn0jkzvk/wtvvTjLnGnv+9R/k9OUIex4MpeQQ=
Subject key identifier: 16:49:42:6F:4F:F7:DC:EF:FE:80:11:49:D5:99:7E:24:1C:E3:A1:31
Certificate issuer: /CN=A914F112/serialNumber=8F92588620CE230E60904C2EFC0FA52D22735D1A
Certificate serial: 30
Authority key identifier: 8F:92:58:86:20:CE:23:0E:60:90:4C:2E:FC:0F:A5:2D:22:73:5D:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5JYhiDOIw5gkEwu_A-lLSJzXRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F112/B68FB67A2E9411F1948A2D2FB2833773/F2364AB42E9811F1AF05F936B4833773.roa
Signing time: Tue 30 Jun 2026 09:45:28 +0000
ROA not before: Tue 30 Jun 2026 09:45:28 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 154580
IP address blocks: 163.128.150.0/23 maxlen: 23
163.128.150.0/24 maxlen: 24
163.128.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F112/B68FB67A2E9411F1948A2D2FB2833773/j5JYhiDOIw5gkEwu_A-lLSJzXRo.crl
rsync://rpki.apnic.net/member_repository/A914F112/B68FB67A2E9411F1948A2D2FB2833773/j5JYhiDOIw5gkEwu_A-lLSJzXRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5JYhiDOIw5gkEwu_A-lLSJzXRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 08:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F112, serialNumber=8F92588620CE230E60904C2EFC0FA52D22735D1A
Validity
Not Before: Jun 30 09:45:28 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a439038-c93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5e:2d:b7:a8:74:46:46:47:da:32:57:da:27:
b5:e2:61:9e:36:7c:f1:0a:96:ba:28:98:8b:3a:a8:
a7:80:a4:e8:1a:21:3c:8c:0a:7f:8b:c0:4d:09:e6:
f8:0a:34:a7:7a:a7:d5:e1:51:c3:69:d5:b1:bc:bd:
5d:f6:dc:ee:21:77:6d:01:02:87:25:22:e7:b4:b4:
48:c5:27:de:a9:b3:82:42:90:70:3c:ae:cb:10:a9:
e2:10:52:30:3b:3b:fe:3e:d6:ad:60:49:92:26:d9:
54:e9:78:a2:69:5d:19:81:44:a4:b3:1c:f5:87:9f:
5b:fe:38:f7:5d:e4:a0:fe:d6:18:2c:71:b5:82:07:
9c:fb:c6:ff:f4:a0:3f:0b:2f:fd:2b:5c:4c:0b:80:
b5:19:60:30:2c:73:e1:32:c3:6b:94:05:e5:82:66:
93:b9:f9:9d:fe:4d:59:0d:1f:83:21:b5:c1:96:67:
6f:46:a2:c3:f7:d7:cb:66:e0:b0:80:c1:31:ce:3b:
e9:2c:e7:00:30:00:ac:25:a9:c1:31:6c:96:5e:20:
6f:50:6a:43:22:23:32:f8:e7:58:4a:3b:7b:41:cd:
97:05:d8:8c:51:42:01:67:68:1d:57:3a:67:6b:59:
0a:6a:4d:77:49:53:7b:0f:1b:27:3c:b8:4b:fe:99:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:49:42:6F:4F:F7:DC:EF:FE:80:11:49:D5:99:7E:24:1C:E3:A1:31
X509v3 Authority Key Identifier:
keyid:8F:92:58:86:20:CE:23:0E:60:90:4C:2E:FC:0F:A5:2D:22:73:5D:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F112/B68FB67A2E9411F1948A2D2FB2833773/j5JYhiDOIw5gkEwu_A-lLSJzXRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5JYhiDOIw5gkEwu_A-lLSJzXRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F112/B68FB67A2E9411F1948A2D2FB2833773/F2364AB42E9811F1AF05F936B4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.128.150.0/23
Signature Algorithm: sha256WithRSAEncryption
72:a1:46:14:62:bb:5e:5c:51:f6:bc:5b:68:b9:8f:95:b5:c0:
8b:73:69:c5:dc:89:1f:23:3d:e1:21:bb:9c:9e:1c:06:21:59:
84:d3:d8:4c:7f:6f:85:19:2c:f7:9e:09:9e:06:60:4d:8f:7f:
69:7b:55:a8:a8:9f:91:0f:a0:63:f2:d6:01:56:30:9e:fa:12:
67:ae:b1:ad:35:1b:63:86:ae:dc:9c:24:0d:7b:3a:00:2f:68:
0f:62:26:6c:73:94:1e:23:98:6f:cb:36:81:94:1a:3f:00:39:
85:3f:6b:39:57:fa:f5:29:84:e3:08:f1:85:19:e4:3a:64:a0:
1c:58:5e:83:a4:73:c3:48:15:d7:b3:33:29:9a:78:0f:40:be:
a4:2f:aa:94:4e:c6:14:9f:97:f9:69:34:bc:d6:34:cd:8e:e0:
51:19:6a:da:ca:18:61:4a:df:61:44:3d:ea:24:30:a0:16:72:
1c:96:92:8b:fd:a8:b6:16:50:8a:3f:85:e0:83:60:40:10:17:
77:4f:ca:a5:c9:bc:82:1c:d0:9d:fb:d9:92:91:26:33:09:e0:
71:05:eb:6c:b1:22:e3:e4:35:8e:83:01:b8:ae:67:31:fd:24:
33:83:ee:b3:f8:a1:09:84:71:b6:3e:24:3b:dd:88:4f:fa:4d:
72:ad:67:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:03:10 2026 by rpki-client