
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/D9419C8A39B911F1AC578A42AE833773.roa
File: D9419C8A39B911F1AC578A42AE833773.roa (raw, json)
Hash identifier: vClFwDnBe/aORZidJmMRYItqmX7blZQLjJtOhh5864M=
Subject key identifier: 9F:6E:54:A7:19:06:FC:7C:A1:69:4C:00:E7:71:52:29:65:9C:E5:91
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 1109
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/D9419C8A39B911F1AC578A42AE833773.roa
Signing time: Fri 28 Aug 2026 19:39:45 +0000
ROA not before: Fri 28 Aug 2026 19:39:45 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 141711
IP address blocks: 14.192.140.0/24 maxlen: 24
14.192.141.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 19:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4361 (0x1109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Aug 28 19:39:45 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a91e401-8dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:da:2a:19:64:a3:3e:7f:cc:3a:f3:a5:4a:
4e:66:04:63:0a:f7:c9:28:e0:0b:2a:6d:40:8b:39:
da:99:63:6a:88:3e:ab:b6:ce:01:a6:b0:d4:8f:6e:
4c:26:1f:fd:74:ec:ed:96:55:65:ed:b0:0d:35:98:
b8:91:eb:79:ae:e4:f6:f6:44:2c:a0:29:92:da:7e:
67:c8:7b:d2:a2:70:d9:e8:79:f8:cd:8a:b2:d3:6c:
88:b7:2f:d3:4a:e0:df:3d:27:f7:2d:73:ac:84:d0:
9a:d0:bc:f7:dd:fe:0b:1a:d1:da:a9:a8:cf:92:34:
2b:61:b5:27:66:5e:53:af:01:d8:0d:bb:1c:4b:0f:
d4:b4:22:22:e3:10:29:3d:0e:b2:32:a1:9d:db:39:
ed:0d:0d:b2:fb:f3:66:92:d3:6a:71:56:66:52:d0:
2a:82:67:a2:e1:86:f6:eb:eb:3f:07:23:94:de:fa:
46:06:aa:c0:77:22:04:86:5f:59:57:ca:aa:99:f7:
12:59:b7:58:e9:fd:a9:99:7b:6c:f0:2f:26:92:71:
49:c4:22:e7:75:a3:ad:28:94:ea:b3:91:fa:13:e8:
e2:76:58:81:59:25:32:0f:46:04:74:a7:5c:17:00:
6d:be:6d:91:fa:f2:eb:e0:23:18:43:7e:69:75:a9:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6E:54:A7:19:06:FC:7C:A1:69:4C:00:E7:71:52:29:65:9C:E5:91
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/D9419C8A39B911F1AC578A42AE833773.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.140.0/23
14.192.152.0/24
14.192.154.0/23
Signature Algorithm: sha256WithRSAEncryption
84:a7:b3:be:36:89:42:e3:30:9f:3b:c6:02:f6:a6:21:42:9a:
d9:b2:f7:53:11:ba:d8:f1:e8:74:ff:05:f9:49:e0:26:7e:18:
e2:51:ec:4d:05:e0:0e:b2:6c:8a:3a:08:18:4f:c4:c4:10:4f:
87:43:a6:38:72:1e:17:be:e4:b8:d2:7f:c6:1b:7a:41:cd:55:
ee:9b:e5:59:68:c7:66:3f:f3:57:62:c9:bc:f8:8d:1c:c8:11:
3f:22:09:57:89:bf:8a:3f:93:29:67:96:3b:6e:0f:3b:0f:4d:
85:71:c0:6a:6f:45:d4:5d:b3:93:bc:9e:19:24:d9:63:6e:ce:
1d:b9:d5:cd:34:a3:96:41:56:54:bf:b9:80:76:94:4e:f4:85:
0c:d5:04:23:01:04:9f:7b:fc:6b:d5:7c:a0:94:4a:0a:05:0a:
de:54:db:7d:6d:07:87:dd:05:0a:50:1a:93:0d:26:12:71:2e:
57:30:e6:66:c0:27:43:22:f5:17:e4:6a:70:2d:61:a4:b9:72:
aa:95:bb:69:3d:57:75:9f:f0:6c:a2:67:ac:8f:5a:83:79:1e:
73:86:e8:ac:b8:e4:b0:04:0b:ff:43:bb:55:0d:28:2e:ca:5b:
f5:39:df:6b:e4:f1:59:8d:64:f4:60:1f:ea:39:1e:47:bc:2e:
83:a6:c6:5b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICEQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjYwODI4MTkzOTQ1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTkxZTQwMS04ZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtX3aKhlkoz5/zDrzpUpOZgRjCvfJKOALKm1AiznamWNqiD6rts4BprDUj25M
Jh/9dOztllVl7bANNZi4ket5ruT29kQsoCmS2n5nyHvSonDZ6Hn4zYqy02yIty/T
SuDfPSf3LXOshNCa0Lz33f4LGtHaqajPkjQrYbUnZl5TrwHYDbscSw/UtCIi4xAp
PQ6yMqGd2zntDQ2y+/NmktNqcVZmUtAqgmei4Yb26+s/ByOU3vpGBqrAdyIEhl9Z
V8qqmfcSWbdY6f2pmXts8C8mknFJxCLndaOtKJTqs5H6E+jidliBWSUyD0YEdKdc
FwBtvm2R+vLr4CMYQ35pdakEaQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJ9uVKcZ
Bvx8oWlMAOdxUillnOWRMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvRDk0MTlDOEEz
OUI5MTFGMUFDNTc4QTQyQUU4MzM3NzMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQBDsCMAwQADsCYAwQBDsCaMA0GCSqGSIb3DQEBCwUAA4IBAQCEp7O+
NolC4zCfO8YC9qYhQprZsvdTEbrY8eh0/wX5SeAmfhjiUexNBeAOsmyKOggYT8TE
EE+HQ6Y4ch4XvuS40n/GG3pBzVXum+VZaMdmP/NXYsm8+I0cyBE/IglXib+KP5Mp
Z5Y7bg87D02FccBqb0XUXbOTvJ4ZJNljbs4dudXNNKOWQVZUv7mAdpRO9IUM1QQj
AQSfe/xr1XyglEoKBQreVNt9bQeH3QUKUBqTDSYScS5XMOZmwCdDIvUX5GpwLWGk
uXKqlbtpPVd1n/Bsomesj1qDeR5zhuisuOSwBAv/Q7tVDSguylv1Od9r5PFZjWT0
YB/qOR5HvC6DpsZb
-----END CERTIFICATE-----
Generated at Fri Sep 11 08:39:12 2026 by rpki-client