
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/2F14B290801B11F0989DCE76C4F9AE02.roa
File: 2F14B290801B11F0989DCE76C4F9AE02.roa (raw, json)
Hash identifier: 2Sh4HNxYtB9dGVF8vJ1SzNebK3nTgLRc3WLrBkkeJGc=
Subject key identifier: 68:FE:FD:7C:76:0A:C7:6C:E9:2C:CA:79:57:D0:76:B3:CE:1C:0E:4D
Certificate issuer: /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
Certificate serial: 67
Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/2F14B290801B11F0989DCE76C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:13:48 +0000
ROA not before: Sat 23 Aug 2025 12:17:49 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 150142
IP address blocks: 49.213.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl
rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:19:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
Validity
Not Before: Aug 23 12:17:49 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3e72c-4ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:2a:de:bb:ba:af:c2:42:e3:06:a7:b6:f7:
fd:d6:08:e5:5d:fc:66:83:3b:b3:00:b5:f3:38:ec:
bb:24:28:7b:77:aa:7d:cd:c9:d8:52:09:83:fb:a6:
8d:18:49:6b:d0:75:8b:d9:7f:20:11:e5:e9:c0:89:
ec:68:ea:80:f9:6b:31:f0:cf:b2:ed:74:96:89:ff:
37:19:cf:4c:f4:3f:82:4d:c9:02:23:6b:b8:77:44:
dc:56:8d:b7:8a:4f:f7:11:10:05:1a:0d:a7:d6:34:
dc:b1:b0:68:84:ce:cf:08:a8:13:86:82:ce:b9:a9:
28:2f:91:52:db:d9:9a:44:b0:76:83:ae:64:13:11:
66:af:b1:1a:bc:fe:5c:72:6d:2c:78:92:55:33:90:
f4:bd:ca:a5:38:e7:82:ab:ba:d9:16:10:91:df:8a:
eb:f8:e0:58:ec:47:59:8c:f1:5c:54:d9:78:e3:d7:
c1:99:1b:f5:07:f7:0d:63:c3:ff:60:f8:0c:50:02:
56:f5:4f:92:ba:a3:ae:a6:b8:0b:b1:ed:94:1c:db:
7b:6c:7a:9a:e2:27:8a:d9:0d:cb:0c:89:ef:36:44:
a3:67:a6:f9:3c:63:58:9f:c4:c4:d3:2f:8b:6a:cc:
6a:a9:72:f5:c2:76:57:d7:45:5c:96:cf:61:6d:ef:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FE:FD:7C:76:0A:C7:6C:E9:2C:CA:79:57:D0:76:B3:CE:1C:0E:4D
X509v3 Authority Key Identifier:
keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/2F14B290801B11F0989DCE76C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.213.52.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:0e:f5:65:cb:15:c1:2b:36:ca:16:a2:55:68:31:d6:88:f1:
51:da:92:11:20:8d:4b:29:1d:7f:81:d5:91:17:ac:57:d4:4b:
ca:cc:f0:3f:fa:37:77:97:f7:7a:89:98:d2:b0:9b:fb:4c:5d:
6e:85:85:11:4a:a4:0e:b6:ae:91:52:ec:98:71:cb:d3:54:51:
c0:72:b6:67:64:dc:bc:53:3f:ec:6d:77:c0:7c:a4:a2:22:27:
30:51:9e:89:d6:22:ae:99:32:6c:c5:a5:e9:2d:19:b6:79:d1:
fe:e2:9e:38:93:25:e1:0f:a6:6c:b0:56:62:a8:98:e6:9b:1a:
cc:d3:d6:6a:d8:ac:ed:b3:14:8e:ef:17:33:23:e6:0b:ea:6c:
01:d9:a8:3d:00:fa:b6:c5:62:50:b1:91:22:2c:4f:28:09:9b:
4b:59:ea:e3:4d:cb:6c:3f:dc:54:c1:32:41:a7:96:ac:59:b8:
8e:a7:b0:28:0f:dc:38:df:7b:8c:1a:aa:b4:1a:ef:93:22:f8:
46:bc:7c:9c:0b:95:02:1c:69:cf:0d:11:aa:de:07:b0:6a:a0:
ec:f2:03:70:e2:5e:90:b5:d2:21:04:33:61:4a:ac:ef:8f:2c:
82:0d:a3:ef:70:38:34:8b:6d:f1:ef:11:d5:22:c3:e4:54:bf:
00:c1:e4:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:56:20 2026 by rpki-client