
$ rpki-client -vvf rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/74EA4288947611F1B81B112D5F11F970.roa
File: 74EA4288947611F1B81B112D5F11F970.roa (raw, json)
Hash identifier: xf63CpVG1xYHFcYXOGVTTTSM5albmIZRt5CqNRfPUy4=
Subject key identifier: 5A:83:DD:7D:12:5D:27:27:E9:AE:D7:6D:70:B7:5E:1C:25:36:1A:33
Certificate issuer: /CN=A919125D/serialNumber=9C5172E4301B12B057207E4B840E7ACB90B208AE
Certificate serial: 04
Authority key identifier: 9C:51:72:E4:30:1B:12:B0:57:20:7E:4B:84:0E:7A:CB:90:B2:08:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/74EA4288947611F1B81B112D5F11F970.roa
Signing time: Mon 10 Aug 2026 04:46:31 +0000
ROA not before: Mon 10 Aug 2026 04:46:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154301
IP address blocks: 203.14.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.crl
rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:56:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919125D, serialNumber=9C5172E4301B12B057207E4B840E7ACB90B208AE
Validity
Not Before: Aug 10 04:46:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a7957a7-adda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:77:db:67:f2:0d:b1:c3:c0:fa:0e:24:e2:b5:
b3:ad:2e:ca:0a:e5:e4:2c:ef:a7:3e:7d:16:aa:35:
4e:88:f8:9b:04:3c:8d:58:ed:30:94:c1:c4:63:1c:
4a:2d:cb:bc:03:ae:dd:84:c5:f3:7b:3b:b5:e7:bf:
a0:91:eb:94:16:66:80:38:02:38:a8:8e:92:09:1a:
ce:cb:7b:11:3e:1b:62:26:8c:a6:69:d8:b2:18:0b:
d8:9d:0d:29:de:1d:58:8e:46:bd:8b:39:de:09:a8:
e0:51:24:13:47:11:0f:b6:ce:4d:5f:14:17:68:3d:
1d:6a:93:22:26:b2:19:60:11:89:2a:26:6a:ff:8f:
6f:af:ce:2f:e7:96:c9:c8:dd:2d:17:5e:a6:b4:b6:
36:52:e9:99:46:b5:49:33:9e:c5:e9:b0:8a:b6:70:
14:5e:0e:2a:c0:69:04:6a:65:96:ca:b7:40:68:d0:
db:60:c0:d9:70:e4:31:2f:96:a6:60:3b:b3:d8:7c:
13:68:ec:f0:78:22:3f:82:46:71:25:5c:e9:4b:01:
0a:aa:ea:50:a8:6f:62:77:84:dc:55:4f:71:ee:1c:
2d:f3:37:bd:a1:f1:56:a3:9f:c2:eb:a1:57:c3:99:
98:36:2d:ce:42:d7:08:0e:12:10:77:cd:b6:51:e8:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:83:DD:7D:12:5D:27:27:E9:AE:D7:6D:70:B7:5E:1C:25:36:1A:33
X509v3 Authority Key Identifier:
keyid:9C:51:72:E4:30:1B:12:B0:57:20:7E:4B:84:0E:7A:CB:90:B2:08:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/nFFy5DAbErBXIH5LhA56y5CyCK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFFy5DAbErBXIH5LhA56y5CyCK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919125D/F04A3FF6947511F1B481F7DF5E11F970/74EA4288947611F1B81B112D5F11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
203.14.39.0/24
Signature Algorithm: sha256WithRSAEncryption
71:20:02:c9:62:32:6f:d8:0d:df:eb:06:b4:e6:d4:db:f9:4a:
15:5e:8b:7b:c6:47:0a:ea:73:f3:87:cd:4b:c6:e3:19:fc:c1:
dc:9a:59:9c:aa:3d:5b:2b:a8:17:f4:7f:20:60:b0:62:06:35:
a3:e4:0c:1b:b4:5d:87:44:39:9b:d5:83:12:9e:68:69:75:b4:
38:c3:e8:f1:2d:4d:da:c8:cd:5f:fc:49:f3:48:a6:d9:cd:63:
6d:35:45:0d:db:f8:60:e6:13:d9:03:71:ea:4b:aa:30:9b:f5:
ac:43:60:e7:0f:18:21:86:20:ed:f8:7c:43:14:8d:2b:90:fc:
1a:f5:61:2b:1e:30:48:67:ba:6b:a2:b9:8f:84:b3:6e:ca:e5:
32:12:43:7e:d2:f9:03:eb:d6:2f:22:44:1d:c1:2b:35:6d:61:
18:41:dd:d1:56:91:38:f5:90:44:92:81:f5:a0:44:8b:73:bb:
35:49:98:71:17:7a:a0:b1:fb:e5:24:6f:1c:b8:75:1a:2c:be:
cc:63:b5:2b:ac:e7:ed:0b:90:c6:44:6e:fb:56:db:75:19:f0:
a4:11:97:bc:7a:50:32:8a:2b:51:31:ab:71:46:4d:68:c9:68:
6e:ab:77:4e:6b:ce:b3:70:cd:a6:cf:01:9a:8d:42:ad:b1:a8:
35:57:1e:d7
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MTI1RDExMC8GA1UEBRMoOUM1MTcyRTQzMDFCMTJCMDU3MjA3RTRCODQwRTdBQ0I5
MEIyMDhBRTAeFw0yNjA4MTAwNDQ2MzFaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNzk1N2E3LWFkZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDjd9tn8g2xw8D6DiTitbOtLsoK5eQs76c+fRaqNU6I+JsEPI1Y7TCUwcRjHEot
y7wDrt2ExfN7O7Xnv6CR65QWZoA4AjiojpIJGs7LexE+G2ImjKZp2LIYC9idDSne
HViORr2LOd4JqOBRJBNHEQ+2zk1fFBdoPR1qkyImshlgEYkqJmr/j2+vzi/nlsnI
3S0XXqa0tjZS6ZlGtUkznsXpsIq2cBReDirAaQRqZZbKt0Bo0NtgwNlw5DEvlqZg
O7PYfBNo7PB4Ij+CRnElXOlLAQqq6lCob2J3hNxVT3HuHC3zN72h8Vajn8LroVfD
mZg2Lc5C1wgOEhB3zbZR6BWLAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUWoPdfRJd
JyfprtdtcLdeHCU2GjMwHwYDVR0jBBgwFoAUnFFy5DAbErBXIH5LhA56y5CyCK4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMjVEL0YwNEEzRkY2OTQ3
NTExRjFCNDgxRjdERjVFMTFGOTcwL25GRnk1REFiRXJCWElINUxoQTU2eTVDeUNL
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbkZGeTVEQWJFckJYSUg1TGhBNTZ5NUN5Q0s0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTI1RC9GMDRBM0ZGNjk0NzUxMUYxQjQ4MUY3REY1RTExRjk3MC83NEVBNDI4ODk0
NzYxMUYxQjgxQjExMkQ1RjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADLDicwDQYJKoZIhvcNAQELBQADggEBAHEgAsliMm/YDd/rBrTm1Nv5
ShVei3vGRwrqc/OHzUvG4xn8wdyaWZyqPVsrqBf0fyBgsGIGNaPkDBu0XYdEOZvV
gxKeaGl1tDjD6PEtTdrIzV/8SfNIptnNY201RQ3b+GDmE9kDcepLqjCb9axDYOcP
GCGGIO34fEMUjSuQ/Br1YSseMEhnumuiuY+Es27K5TISQ37S+QPr1i8iRB3BKzVt
YRhB3dFWkTj1kESSgfWgRItzuzVJmHEXeqCx++Ukbxy4dRosvsxjtSus5+0LkMZE
bvtW23UZ8KQRl7x6UDKKK1Exq3FGTWjJaG6rd05rzrNwzabPAZqNQq2xqDVXHtc=
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:10:59 2026 by rpki-client