
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/14EC8116B10B11E58EB48F13C4F9AE02.roa
File: 14EC8116B10B11E58EB48F13C4F9AE02.roa (raw, json)
Hash identifier: GhHnCwYe2zJxM5qH+kr9CEnQ9KqcXmSau3Q4lL5IV3k=
Subject key identifier: 5D:0F:D8:08:1B:1F:77:05:1D:C5:9C:8D:BA:56:6B:B8:0C:C1:7C:E7
Certificate issuer: /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
Certificate serial: 2852
Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/14EC8116B10B11E58EB48F13C4F9AE02.roa
Signing time: Mon 02 Feb 2026 16:12:55 +0000
ROA not before: Mon 02 Feb 2026 16:12:55 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 132124
IP address blocks: 43.224.124.0/22 maxlen: 22
103.11.32.0/22 maxlen: 22
2402:cb00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl
rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10322 (0x2852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
Validity
Not Before: Feb 2 16:12:55 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6980cd07-c240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:53:09:f1:27:bd:8b:c9:59:2f:f8:c8:df:
93:59:7a:e4:c2:b4:54:12:fa:d3:e4:3c:6a:52:1d:
cd:cc:6e:af:9d:62:ba:c7:11:8b:ce:a0:1d:d2:4d:
6a:e0:98:f7:7c:b2:51:59:89:f6:d1:7f:ce:b0:7c:
2c:85:73:59:5c:f7:5b:98:63:41:79:2f:5e:62:c2:
ba:8f:d5:ca:ba:4a:9d:83:f6:9f:16:29:db:c2:43:
d9:07:76:e7:3b:bd:95:41:a9:41:e6:7a:6e:94:2b:
b5:76:ed:e7:2d:77:ff:c4:42:79:94:ec:d7:f1:02:
5b:16:6a:94:57:65:b1:0f:e7:a8:7e:1d:46:bc:c8:
74:33:77:e7:ef:17:d9:b7:88:a8:3e:8d:ed:63:d0:
0b:25:48:e1:6e:7c:b5:1f:5f:ce:b8:93:22:59:d6:
50:89:c1:07:4b:9d:73:99:fd:4a:c7:35:5a:35:e1:
88:99:88:39:d0:57:b6:95:73:3e:19:81:dc:8c:32:
8a:d8:ef:e3:7c:5a:33:d1:9d:97:6c:80:8a:e7:fa:
de:58:06:c1:a6:0e:60:35:b8:9d:ff:37:e4:b9:4e:
34:64:3f:da:9e:c2:8a:a6:a5:c6:8f:c8:63:e9:1b:
76:93:6d:24:73:dc:8e:46:e6:aa:e4:5a:8e:1e:6f:
91:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0F:D8:08:1B:1F:77:05:1D:C5:9C:8D:BA:56:6B:B8:0C:C1:7C:E7
X509v3 Authority Key Identifier:
keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/14EC8116B10B11E58EB48F13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.124.0/22
103.11.32.0/22
IPv6:
2402:cb00::/32
Signature Algorithm: sha256WithRSAEncryption
a1:cc:36:02:23:89:7e:1a:8c:6e:b0:8f:52:09:14:b4:54:2b:
30:3a:ca:e0:eb:ed:02:09:35:7c:13:df:7c:10:a7:0c:f4:cb:
be:3f:0d:2a:43:7d:ea:dd:9e:d2:33:89:a4:7d:80:17:7d:6a:
ea:9b:3d:57:76:36:83:f0:48:25:d5:af:d0:e2:83:e4:35:d8:
f9:31:39:fe:f3:a6:9f:23:aa:79:b4:f3:76:4c:c6:d3:7b:59:
18:4b:34:3f:8a:f1:24:28:4d:54:cf:68:f6:bb:48:88:8c:b7:
1a:57:c5:37:79:06:10:89:57:a7:80:ea:29:24:90:71:aa:e7:
f2:98:8a:da:ca:93:c9:e9:24:a9:c1:73:32:fb:e5:5b:8b:83:
95:45:89:2d:41:2b:bb:ae:ef:79:b4:e3:56:66:0f:b7:23:a1:
c8:d2:33:77:1c:4a:87:74:7b:de:4f:69:8d:73:ca:18:e3:c0:
d2:db:1c:d1:45:8c:fb:18:b9:67:ae:1a:6d:05:af:db:e4:14:
0f:32:a9:11:ab:ff:a4:c7:2c:3a:a9:5c:b8:85:39:69:fd:6f:
d4:ea:f4:a5:e7:37:1a:e2:b4:e3:bb:3a:52:62:30:69:d7:1e:
ce:64:a3:11:6f:96:ce:c9:8b:3e:7e:ff:59:60:a0:0b:b9:21:
d8:73:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:13:20 2026 by rpki-client