
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa
File: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (raw, json)
Hash identifier: 8VCSX3Py1IyN0f9zmOSlchE4nrVyfSkUdTOEL2+Xh+k=
Subject key identifier: 15:A1:9D:FE:0B:21:83:09:19:FD:87:69:CB:34:CA:66:6F:F2:65:6B
Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Certificate serial: 01D9
Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa
Signing time: Fri 13 Mar 2026 03:38:39 +0000
ROA not before: Fri 13 Mar 2026 03:38:39 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 4648
IP address blocks: 192.146.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Validity
Not Before: Mar 13 03:38:39 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69b386bf-807e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:8d:13:e4:1f:0b:64:22:b9:f1:a8:41:9e:
6e:ee:92:05:ef:c0:f3:88:10:d9:ca:f9:02:08:e0:
45:0f:4f:9e:d3:15:e2:b4:06:0b:a8:7b:d5:9e:db:
fa:ab:64:95:a4:4c:55:a1:5b:0e:69:42:25:ba:af:
49:9a:0c:aa:8c:e1:43:c1:dc:ae:1e:50:26:dd:c9:
1a:53:3c:a5:ea:15:d4:b1:2f:8c:f5:1f:54:93:52:
80:4c:6a:ae:0e:3d:06:ae:7c:78:c5:b4:e9:2e:a8:
6f:f4:02:bb:bb:79:b8:25:bb:77:3e:8f:24:83:f5:
6a:b4:a7:1b:52:1b:41:f7:50:65:76:e3:0b:b5:b4:
88:dc:4e:2c:f2:ba:9b:09:8e:8b:4c:4d:6d:ea:07:
f5:30:64:fb:0f:7b:44:6e:f4:dd:e3:5a:81:89:84:
50:01:26:92:0c:1c:b2:78:c3:a8:eb:30:01:15:f3:
4a:f0:44:d1:dd:51:90:69:ad:35:17:52:be:72:36:
69:99:9d:e6:51:18:ca:c9:25:c1:9f:e4:75:6f:1d:
eb:38:4f:94:cd:83:f6:02:01:ef:81:ac:13:ab:e1:
2d:33:c8:21:d0:7a:7e:8e:36:99:a6:69:a8:76:05:
22:28:b1:82:63:75:de:64:9c:92:14:b8:07:36:42:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A1:9D:FE:0B:21:83:09:19:FD:87:69:CB:34:CA:66:6F:F2:65:6B
X509v3 Authority Key Identifier:
keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.146.219.0/24
Signature Algorithm: sha256WithRSAEncryption
59:9f:bc:db:6a:55:e3:df:5b:a7:b9:61:4a:e9:44:13:87:42:
16:b7:97:cb:1b:a0:02:bc:b9:85:0e:0d:0a:90:88:ca:18:18:
84:d1:68:d4:7a:79:73:00:9a:da:1b:d9:ec:de:04:85:55:23:
4c:c2:15:75:77:d0:6f:12:02:bd:2c:00:cd:d1:a5:94:34:6c:
b8:b0:9e:75:7f:f9:7d:8c:24:3d:85:dc:46:ca:58:65:78:fb:
17:b8:74:b7:bf:70:c4:18:ce:92:7a:c4:e7:ba:27:33:72:b0:
23:e6:c7:b1:04:db:d5:9d:36:db:c3:70:56:ec:83:fe:c6:50:
30:dc:76:3e:d6:75:c3:f3:61:cf:86:5e:3f:ad:60:7d:59:3a:
ba:0c:0a:1b:30:fd:f2:90:79:3b:3e:70:49:20:da:c2:91:56:
1c:5b:16:b3:1a:64:f2:f8:d4:3b:c1:a9:3b:39:86:62:b0:3b:
71:a6:33:92:04:83:b5:c1:8d:5b:aa:a0:66:07:18:35:a9:dd:
01:0d:76:2d:28:70:1e:04:50:c9:7a:2b:ae:23:54:bb:fa:fa:
b6:13:eb:aa:7d:cb:1d:43:c9:77:4c:e1:ae:19:a3:d1:5e:21:
8b:70:26:23:cc:76:85:8a:b2:54:85:77:97:e9:bb:16:fc:1e:
e1:43:c5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:29:37 2026 by rpki-client