
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/8D88B9125B2311EE86CC6A71C4F9AE02.roa
File: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (raw, json)
Hash identifier: m4OYQMEnrmC7k1a1yVmKxzd2QvlWXdsaMA1wS2lcsRs=
Subject key identifier: 6A:EA:D6:47:2B:F2:9F:54:FC:03:35:DE:44:29:7B:09:52:19:85:4B
Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Certificate serial: 01DA
Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/8D88B9125B2311EE86CC6A71C4F9AE02.roa
Signing time: Fri 13 Mar 2026 03:38:41 +0000
ROA not before: Fri 13 Mar 2026 03:38:40 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 4768
IP address blocks: 192.146.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Validity
Not Before: Mar 13 03:38:40 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69b386c0-b113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:7c:e4:b7:42:bb:3d:d9:59:b9:dc:16:32:
02:fa:c6:f4:03:52:3e:2e:d0:82:d4:19:d6:33:9f:
87:12:32:f6:ff:47:d0:f3:37:09:78:77:26:18:b5:
d9:33:24:0e:4a:26:ef:e4:19:ec:23:4f:97:6b:49:
bb:dd:43:41:d6:dc:8d:89:b4:5f:51:aa:86:2d:e2:
78:64:9b:4f:0d:1a:f0:32:0c:72:21:4c:3e:31:1a:
ca:bb:c8:02:59:5a:df:db:a3:c0:51:1e:43:91:98:
fd:7d:48:2d:df:58:f2:90:32:24:d2:2a:d5:e1:17:
c5:7c:1b:da:a3:65:53:f8:e2:ec:43:4c:79:78:33:
74:be:22:07:16:26:3e:b4:56:c4:98:89:4d:6f:dd:
70:a5:ba:d5:33:e2:53:6a:7b:12:97:fe:9e:6b:7b:
c4:0a:97:ad:47:47:b9:5a:11:e6:c1:d7:9d:47:67:
41:db:38:ac:49:85:14:71:9c:f7:0e:46:66:d9:53:
06:98:9f:bc:91:2f:9a:d5:df:fa:37:9d:3b:52:15:
ad:66:ef:88:ca:d4:a6:68:7b:1e:1d:f5:b0:c6:6b:
3d:b3:a3:29:1d:5a:96:1e:9c:7e:cc:95:d0:90:63:
be:f5:f1:30:b3:06:bd:59:d5:52:23:24:8f:94:ff:
11:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EA:D6:47:2B:F2:9F:54:FC:03:35:DE:44:29:7B:09:52:19:85:4B
X509v3 Authority Key Identifier:
keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/8D88B9125B2311EE86CC6A71C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.146.219.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:7c:49:23:e4:aa:92:48:45:71:60:4b:7c:fb:2b:b0:89:76:
a0:2e:97:17:05:45:09:9d:cf:14:f8:6e:a9:7a:89:9e:6d:94:
11:1c:5a:95:e7:69:86:3d:7b:06:f6:8e:fc:58:c1:c3:37:f9:
13:d2:02:13:44:15:49:41:b4:81:c8:ec:bf:4b:4e:41:80:3b:
12:2b:21:0a:9a:d6:64:29:8c:5c:8f:71:8e:ab:96:ff:85:ee:
e5:22:78:ea:65:c7:c8:5d:6b:28:e5:4c:16:aa:6a:fe:37:ac:
59:78:68:57:b3:40:65:bb:35:7d:68:9d:b5:e3:e3:05:f5:3e:
7b:f2:6f:27:5b:27:0c:f8:19:43:e8:58:14:68:a7:58:3a:10:
81:4a:80:f5:79:d6:fe:70:13:a4:7e:26:1a:be:51:5c:51:36:
f5:5a:c9:5f:39:44:30:54:21:30:47:05:a7:b4:9e:d8:8a:a8:
ee:05:d2:53:5b:0a:89:91:21:c8:14:ec:c1:47:5f:94:9a:b1:
67:98:81:76:cc:7c:14:0e:b9:69:8a:03:66:ec:c5:a2:68:a9:
60:bc:86:ed:ab:e7:65:32:05:6f:94:f8:aa:0b:b0:0f:14:4b:
ed:c7:7e:77:ee:b4:00:a4:4a:0c:e4:dc:10:63:23:35:b9:19:
fb:8c:64:62
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY5MzcxMTAvBgNVBAUTKDg4QTJDQjQ2MjQ4MDFCQzlDN0FEQTIyMzgzOUZDM0M1
MzZDN0ZCMjYwHhcNMjYwMzEzMDMzODQwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWIzODZjMC1iMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApPB85LdCuz3ZWbncFjIC+sb0A1I+LtCC1BnWM5+HEjL2/0fQ8zcJeHcmGLXZ
MyQOSibv5BnsI0+Xa0m73UNB1tyNibRfUaqGLeJ4ZJtPDRrwMgxyIUw+MRrKu8gC
WVrf26PAUR5DkZj9fUgt31jykDIk0irV4RfFfBvao2VT+OLsQ0x5eDN0viIHFiY+
tFbEmIlNb91wpbrVM+JTansSl/6ea3vECpetR0e5WhHmwdedR2dB2zisSYUUcZz3
DkZm2VMGmJ+8kS+a1d/6N507UhWtZu+IytSmaHseHfWwxms9s6MpHVqWHpx+zJXQ
kGO+9fEwswa9WdVSIySPlP8REQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGrq1kcr
8p9U/AM13kQpewlSGYVLMB8GA1UdIwQYMBaAFIiiy0YkgBvJx62iI4Ofw8U2x/sm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yNkI0OTgxRTVC
MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4bkhyYUlqZzVfRHhUYkgt
eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEY5MzcvMjZCNDk4MUU1QjIzMTFFRUI4NzczRjcwQzRGOUFFMDIvOEQ4OEI5MTI1
QjIzMTFFRTg2Q0M2QTcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwJLbMA0GCSqGSIb3DQEBCwUAA4IBAQDBfEkj5KqSSEVxYEt8+yuw
iXagLpcXBUUJnc8U+G6peomebZQRHFqV52mGPXsG9o78WMHDN/kT0gITRBVJQbSB
yOy/S05BgDsSKyEKmtZkKYxcj3GOq5b/he7lInjqZcfIXWso5UwWqmr+N6xZeGhX
s0BluzV9aJ214+MF9T578m8nWycM+BlD6FgUaKdYOhCBSoD1edb+cBOkfiYavlFc
UTb1WslfOUQwVCEwRwWntJ7YiqjuBdJTWwqJkSHIFOzBR1+UmrFnmIF2zHwUDrlp
igNm7MWiaKlgvIbtq+dlMgVvlPiqC7APFEvtx3537rQApEoM5NwQYyM1uRn7jGRi
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:54 2026 by rpki-client