
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/849E45A839B811F1B2456B00AE833773.roa
File: 849E45A839B811F1B2456B00AE833773.roa (raw, json)
Hash identifier: WrHoimy7W3Kh4V/ViVWvGFPYBxuHZRvygLPr6i6VQGA=
Subject key identifier: 55:56:A6:FD:51:F5:77:90:13:C3:98:E2:94:E5:83:4A:01:F6:F1:21
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 1053
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/849E45A839B811F1B2456B00AE833773.roa
Signing time: Sun 26 Apr 2026 18:57:15 +0000
ROA not before: Sun 26 Apr 2026 18:57:15 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 153844
IP address blocks: 14.192.153.0/24 maxlen: 24
14.192.156.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 19:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4179 (0x1053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Apr 26 18:57:15 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69ee600b-714c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:77:3c:50:33:42:02:fb:09:e0:7c:29:1c:ce:
9a:2b:10:48:37:eb:0d:bd:f7:09:b0:58:15:a9:eb:
b7:f3:1b:2a:4c:75:26:6b:9e:4d:13:e3:30:5c:4f:
25:dc:32:57:f6:b3:7c:cb:80:b4:f0:5d:f9:3e:f2:
82:40:e2:df:7a:aa:f4:95:49:a5:4e:9d:3f:97:1f:
44:5b:4e:52:46:b7:db:ac:4e:6b:d3:42:03:10:f6:
54:4d:56:29:90:72:87:e0:02:92:a1:7f:35:1f:9f:
7e:6b:67:b4:82:76:64:3f:4b:00:47:b6:ab:5e:7b:
90:21:07:77:dc:4b:88:15:0a:d4:47:c4:ae:e8:57:
62:be:d2:5a:24:8a:ac:fb:5e:45:df:5d:54:e4:b7:
19:de:64:d2:91:4f:3c:d7:01:2e:9d:f9:e4:3c:67:
7d:1e:e5:0e:7b:84:fb:ee:05:97:3d:40:d2:12:04:
d2:89:e6:b1:bb:7d:e0:a3:b3:e6:5a:75:d6:11:75:
3c:3b:4a:04:eb:2b:91:a1:94:b1:8a:43:3c:71:62:
4d:d5:4f:68:d2:91:46:04:68:f6:b7:fd:4b:7c:d3:
b3:6f:df:80:a7:79:45:14:1f:e2:20:b3:d6:56:81:
41:3e:2e:cf:3d:5b:8e:17:04:9a:56:8e:eb:a4:50:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:56:A6:FD:51:F5:77:90:13:C3:98:E2:94:E5:83:4A:01:F6:F1:21
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/849E45A839B811F1B2456B00AE833773.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.153.0/24
14.192.156.0/24
14.192.158.0/24
Signature Algorithm: sha256WithRSAEncryption
33:64:0f:c6:55:f7:22:21:c4:ed:28:58:9b:e1:39:18:97:52:
fd:4c:3e:ef:54:88:3b:c2:49:10:d3:5b:e9:39:a4:1b:ab:82:
ed:0b:a9:a2:e4:c5:c8:59:c4:8b:8e:41:3e:c7:4b:90:c3:51:
fa:95:ad:eb:ef:09:3d:bf:d2:b2:b4:1c:5b:a4:22:72:75:e9:
b3:a4:60:e9:2e:f3:00:85:d8:89:ff:61:3b:63:65:f9:a3:14:
b9:cb:02:70:26:31:a7:23:ee:26:bb:ff:c7:6c:8f:c1:b5:6a:
34:c5:57:85:7a:ae:09:b5:26:25:40:fc:68:78:08:72:6a:b9:
58:b2:55:fb:78:8d:7a:0e:c0:d4:f2:e0:f6:e8:7a:1f:8d:6f:
e3:30:44:a0:60:be:c5:34:e9:96:fd:0d:86:bd:ff:cd:9c:dc:
8c:c7:9a:95:d4:7f:5d:23:5a:8a:58:1b:da:ee:e9:51:2d:73:
58:cf:50:e7:1d:11:76:57:82:f4:1a:1f:c5:7c:34:87:e8:6d:
6d:d2:d4:46:c8:07:46:fa:b3:9c:55:f6:9e:07:16:90:91:1a:
7d:09:b2:c8:29:8e:ce:e3:df:72:bf:be:e1:c9:ee:01:47:84:
de:a9:b6:0a:81:6b:6e:b2:67:84:fe:2b:1f:e8:c0:8e:22:9e:
9b:1d:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 05:25:12 2026 by rpki-client