
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/C4618A34188D11F1A1D836EC3D3D8C67.roa
File: C4618A34188D11F1A1D836EC3D3D8C67.roa (raw, json)
Hash identifier: AWHLDSg6pyqywfPLPVxknZ3rJC83UYzL4w3oK5CODzc=
Subject key identifier: 1A:7F:7B:08:42:DF:24:8A:B5:F4:16:29:91:D1:2B:0C:BB:4F:77:4F
Certificate issuer: /CN=A91E8556/serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Certificate serial: 18
Authority key identifier: 2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/C4618A34188D11F1A1D836EC3D3D8C67.roa
Signing time: Thu 05 Mar 2026 12:20:59 +0000
ROA not before: Thu 05 Mar 2026 12:20:59 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 399468
IP address blocks: 114.119.192.0/22 maxlen: 24
114.119.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 12:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8556, serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Validity
Not Before: Mar 5 12:20:59 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a9752b-0738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:72:f5:24:9a:ff:21:2d:42:27:88:73:f1:bf:
89:91:99:da:5a:84:a9:89:e6:eb:5a:89:b2:00:a7:
ef:c8:94:21:9c:8a:c2:69:b7:9c:95:b5:ce:89:b8:
01:f4:28:40:cb:09:d9:13:f0:68:4b:a3:da:80:ba:
a6:80:01:7c:ad:9c:8b:27:1e:81:15:09:d8:47:79:
3f:04:0e:d0:4a:c0:9f:54:0c:df:d7:eb:5c:94:b3:
98:b7:83:a5:56:9b:1e:e4:e0:11:ef:86:e1:29:bc:
de:26:8b:76:70:53:38:79:c1:b9:80:f8:a1:18:2a:
a8:ad:33:19:91:73:dc:89:b7:d7:ff:e7:8a:39:a0:
30:41:e8:28:44:20:e9:41:47:27:b7:3e:94:07:74:
6a:e1:d6:99:9e:b9:99:1d:5b:b3:27:04:21:ca:3f:
d1:89:c7:ac:5f:70:01:00:69:9a:e0:ec:9e:09:39:
d6:3e:0f:1c:05:6c:08:e9:f0:39:bd:87:b1:e2:05:
a8:89:46:25:d9:68:94:93:c2:76:05:f6:10:cc:ae:
da:08:78:f4:04:de:33:04:3e:9d:46:bd:e0:ef:0e:
31:43:6d:aa:06:af:c5:97:63:90:e8:8c:a4:50:49:
33:84:92:0d:f6:3b:fc:bc:b0:13:f9:77:14:76:0d:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7F:7B:08:42:DF:24:8A:B5:F4:16:29:91:D1:2B:0C:BB:4F:77:4F
X509v3 Authority Key Identifier:
keyid:2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/C4618A34188D11F1A1D836EC3D3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
114.119.192.0/22
114.119.200.0/22
Signature Algorithm: sha256WithRSAEncryption
78:31:c0:31:04:f5:37:15:cd:9e:0c:d9:c9:51:fb:ad:2f:ac:
be:5a:f5:0b:f4:e0:7f:f5:92:a2:a1:51:b6:10:e1:0a:73:c6:
d7:9a:62:ea:20:4e:95:05:99:6f:5c:55:3a:53:1a:ce:cd:54:
b6:df:2f:f9:b9:75:0d:bd:0e:c5:ec:88:49:35:6b:ef:25:6a:
f8:43:9a:24:8a:27:73:d8:d2:0e:34:ea:d3:b2:32:ce:34:42:
19:5f:9e:fa:85:25:46:cd:7c:99:04:22:96:75:48:7b:e8:27:
60:eb:ff:bf:46:af:6e:c9:ee:d4:30:1b:1e:f4:a0:a2:1b:0d:
14:f9:7b:27:c1:1c:c7:2c:db:01:08:5f:4c:50:63:e1:92:c1:
99:15:1e:8a:97:80:3a:e4:d3:7f:43:cc:44:44:c7:d1:a8:75:
b2:be:1d:04:72:ec:41:ea:e8:60:4a:95:17:b0:9d:4b:b3:84:
33:dc:b9:97:92:c6:2f:77:76:fe:99:d0:2d:66:61:d5:29:31:
50:bb:03:10:bc:d3:be:77:b2:16:fa:22:04:a5:1f:d3:bb:7f:
43:a3:28:6c:10:38:b5:4c:9a:7b:ad:d8:05:db:0c:47:3f:21:
89:cb:d0:40:75:88:fd:21:80:98:d7:3a:e9:b8:68:67:4c:fb:
7e:03:70:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:00:35 2026 by rpki-client