
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/AA14EED2BDE911EFB07EE682C4F9AE02.roa
File: AA14EED2BDE911EFB07EE682C4F9AE02.roa (raw, json)
Hash identifier: AIZFydURKw6XqDJmBOYWV09bdGH4Y4iDWEmfI3xyTSM=
Subject key identifier: 38:2D:8B:82:87:96:F1:4C:51:99:F9:FA:A0:B5:AC:E3:12:60:F2:4C
Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
Certificate serial: ED
Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/AA14EED2BDE911EFB07EE682C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:18:47 +0000
ROA not before: Thu 15 Jan 2026 06:23:58 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 137921
IP address blocks: 160.250.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl
rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
Validity
Not Before: Jan 15 06:23:58 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a466e7-f950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f7:dd:95:12:85:4d:aa:fb:c7:48:1d:85:9e:
58:ee:5c:ce:12:42:6e:0d:9f:c7:2a:69:b2:71:42:
67:28:1b:32:db:07:7f:42:f0:46:f9:e4:4c:f3:05:
6e:8d:79:d7:3f:27:72:79:5c:85:f1:f2:5c:25:07:
e4:aa:4a:da:1b:ed:e9:c6:21:1b:72:8c:f8:01:88:
9d:be:e1:11:4b:ba:50:2e:0a:94:6a:01:d5:b0:05:
73:0c:86:a3:4f:49:ca:f3:91:e8:19:e9:5a:32:d3:
78:48:9b:89:f2:6c:06:85:c7:f1:9d:4a:10:ac:d5:
76:8c:75:5d:e3:bd:24:bf:34:2a:d5:88:4b:f8:b6:
19:25:27:e2:8e:ca:ab:65:de:89:91:14:be:00:7d:
e3:27:20:5f:8a:3d:57:52:73:23:93:f0:6b:e9:d8:
f8:a6:c3:31:06:91:4a:30:9a:be:6a:aa:1c:27:e2:
c1:77:95:a6:28:0a:12:87:c3:db:e5:19:92:c2:92:
11:ae:3c:94:38:09:9c:5b:f7:85:ad:db:90:49:72:
ab:14:94:f0:0a:c3:39:ad:bc:77:f4:95:81:2d:2d:
c0:cd:b3:b9:89:3b:cb:34:83:d3:9a:a8:15:ed:ea:
05:b4:a1:b6:2b:00:40:2a:4d:a5:c1:a8:40:08:87:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2D:8B:82:87:96:F1:4C:51:99:F9:FA:A0:B5:AC:E3:12:60:F2:4C
X509v3 Authority Key Identifier:
keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/AA14EED2BDE911EFB07EE682C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.222.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b1:e2:5f:5b:d8:89:e3:3e:7a:ee:a6:81:ef:98:48:99:f7:
c5:5f:46:f9:e1:96:79:d9:2b:73:67:43:89:bb:83:f7:5a:c0:
55:a3:7a:4b:93:59:5a:a1:57:b2:e4:3b:f0:2e:0f:88:6c:3e:
65:91:d9:74:54:3b:e2:1a:a9:fb:86:a0:8e:51:69:d3:2c:8d:
62:d9:62:fa:74:04:5f:7c:8e:e6:2e:ce:67:b6:c2:43:59:c7:
fb:cf:98:0b:56:81:ad:29:8c:2d:f5:28:d4:af:12:8b:00:d7:
fe:0f:ef:4d:60:77:d7:f0:80:a7:cc:c6:93:2a:2a:e8:7c:bf:
74:ae:50:66:32:58:a6:fd:52:a2:16:06:7d:35:82:63:42:2b:
23:68:24:b5:b8:c3:4d:88:5e:ec:1b:f2:1f:d3:87:ea:7f:6b:
ae:c3:64:1f:9a:74:56:9e:a0:f1:80:ab:4e:a2:2e:50:2e:6b:
52:07:3f:93:82:a0:3f:e7:06:6c:44:4d:5c:e7:8d:52:9a:9d:
2a:c4:31:c4:c2:59:2e:70:c2:71:2b:d9:20:be:b8:bf:21:ad:
03:8e:f9:bf:b0:a9:40:ec:93:7a:ac:8b:2d:fc:2a:84:30:24:
86:71:08:9f:df:7e:c6:8b:13:b9:56:6a:49:cd:88:f1:76:f2:
28:cb:17:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:28 2026 by rpki-client