
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/049574BAD05F11F184AD199B0866CEF9.roa
File: 049574BAD05F11F184AD199B0866CEF9.roa (raw, json)
Hash identifier: lxJnUeNA/Ds48pwe8f1kFysDWApLmXTiO7Aozoo5rvQ=
Subject key identifier: 85:7C:29:A8:49:A7:89:C1:DF:DE:57:3A:D3:15:8B:DA:23:AF:17:50
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 11E5
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/049574BAD05F11F184AD199B0866CEF9.roa
Signing time: Sun 25 Oct 2026 10:29:54 +0000
ROA not before: Sun 25 Oct 2026 10:29:54 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 151983
IP address blocks: 14.192.142.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 15:22:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4581 (0x11e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Oct 25 10:29:54 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6addda22-3118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:a0:ac:4b:e6:88:2c:4d:8f:51:df:91:55:
89:68:35:41:f3:2a:9f:87:9b:05:2b:c9:96:0d:77:
a1:05:f0:f2:dc:91:43:cc:07:05:c6:01:02:b6:7f:
dc:d3:08:3c:85:5f:c3:82:4f:dc:0c:20:40:c6:7d:
10:de:5f:e2:a9:b5:9b:22:95:09:fd:7e:26:bf:c7:
59:2d:34:de:9a:09:62:40:f2:3a:31:16:9f:cb:d4:
2f:2c:6b:d6:ec:ff:10:c7:7b:67:fa:6a:bb:75:4b:
a8:4e:4b:84:58:7a:95:24:04:a5:07:c1:b2:f6:94:
98:20:e4:8a:49:6d:a8:96:37:1e:74:c8:99:e3:4c:
ee:c6:25:1c:0e:07:2f:36:19:96:47:98:da:a4:23:
d6:56:9b:15:2d:3a:04:38:fd:b9:ba:9f:af:aa:52:
af:df:ca:2e:95:3f:94:08:55:fe:b8:d6:5e:48:bf:
47:d6:c3:59:ca:e5:80:0c:b3:25:e2:9c:e9:e7:3e:
ed:13:be:84:72:03:ff:2f:c1:85:7b:3a:ea:d8:6d:
23:99:61:e8:d5:09:43:91:c6:6c:9d:ee:f2:0c:89:
3b:ef:65:39:1f:b6:2c:24:da:37:9d:96:be:09:4b:
70:b1:4a:fd:08:e4:a0:51:e7:30:11:87:d1:ae:5f:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7C:29:A8:49:A7:89:C1:DF:DE:57:3A:D3:15:8B:DA:23:AF:17:50
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/049574BAD05F11F184AD199B0866CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.142.0-14.192.144.255
Signature Algorithm: sha256WithRSAEncryption
bc:18:d1:d3:8d:24:ee:3a:cc:c1:b3:77:68:51:10:f4:29:eb:
1f:50:99:96:cf:d6:46:f6:8f:84:82:c9:f2:4c:05:b7:87:fd:
87:70:96:a2:32:7e:c6:fe:3f:33:9f:fa:fc:2f:40:de:1e:3f:
d9:25:f0:74:e0:4d:77:d5:3c:64:6c:24:2a:e0:99:8c:59:55:
81:f7:48:d3:a0:bd:71:d0:2e:6d:38:ca:f6:43:ac:50:b4:5e:
ba:41:96:f5:9d:e3:80:f5:1e:ba:52:76:67:9a:b1:25:f8:3a:
fd:31:e3:ff:a4:32:2a:2d:01:1c:a4:47:b7:e6:0d:df:75:6f:
02:68:10:a5:52:a4:39:33:05:d2:3a:ec:b1:a4:80:5f:36:9c:
80:a8:72:75:5d:68:3f:01:0f:23:2b:db:fe:33:e8:8e:48:f3:
52:73:e0:00:84:84:17:9f:79:af:83:28:c7:77:4d:e5:66:de:
02:13:eb:75:5f:c0:f3:ab:b8:61:ee:75:a3:f4:4e:75:d1:44:
b0:06:c3:3a:b4:b6:e1:88:17:df:e3:68:c5:41:4c:5e:24:d0:
bf:49:d1:74:e5:5d:c9:64:c2:a5:24:ab:35:29:da:61:cd:c4:
f2:16:b8:d4:fa:e2:1e:19:be:a3:a4:e8:9b:ea:83:4a:a1:f1:
4d:61:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:32:55 2026 by rpki-client