
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/4499D9921F4A11F0AF06577CC4F9AE02.roa
File: 4499D9921F4A11F0AF06577CC4F9AE02.roa (raw, json)
Hash identifier: Nrn9HJKbbAN6/WO7m56GfRo1g91ZrJZGME+tEexROGo=
Subject key identifier: A7:A1:00:7E:7D:D4:29:CA:80:60:F7:E5:15:37:15:A5:82:CB:23:5F
Certificate issuer: /CN=A914A514/serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5
Certificate serial: AC
Authority key identifier: 55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/4499D9921F4A11F0AF06577CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:17:44 +0000
ROA not before: Fri 13 Feb 2026 06:26:06 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 133925
IP address blocks: 163.61.118.0/23 maxlen: 23
163.61.118.0/24 maxlen: 24
163.61.119.0/24 maxlen: 24
2001:df5:1540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl
rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A514, serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5
Validity
Not Before: Feb 13 06:26:06 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a43c78-7ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:b3:eb:20:43:b5:12:a7:d9:bd:3b:2a:a0:
9b:62:b3:69:6e:dc:7e:20:e0:99:ce:91:0b:fc:97:
3c:a4:5b:ff:8a:d2:ed:b3:b3:81:db:7e:8e:87:32:
e2:b2:ff:a7:6d:96:c2:01:97:c4:b5:cc:86:c3:0f:
a2:4f:2b:3e:9a:61:5f:c3:df:fb:43:a2:47:7d:ee:
07:64:63:39:2e:50:a1:88:84:e8:7a:61:0f:6a:4d:
d5:32:83:fa:36:66:de:16:25:00:ae:bd:65:83:c5:
b4:7f:39:fa:5b:28:ee:cb:00:2a:33:fe:e9:66:aa:
01:42:67:81:54:65:d3:24:c8:31:19:c7:c4:0c:83:
ee:6f:3a:99:2e:1e:34:c7:22:07:be:09:de:8a:76:
6a:99:91:9a:7c:9f:29:15:92:a3:2c:f6:0a:37:5f:
80:ec:24:e1:b9:a3:13:18:09:14:4e:2f:db:9d:d2:
7b:99:14:6e:92:10:fd:13:1f:6f:51:3c:92:13:e0:
e4:b4:7a:4d:db:05:7c:5b:71:f2:71:c0:8e:67:da:
28:8c:bc:f4:c5:64:9b:9e:57:52:a3:9d:39:82:98:
ad:ea:05:c0:d4:b8:98:27:6c:99:6d:bf:08:8b:bd:
f9:97:32:15:30:18:e8:5f:f8:74:d2:0e:03:52:ec:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A1:00:7E:7D:D4:29:CA:80:60:F7:E5:15:37:15:A5:82:CB:23:5F
X509v3 Authority Key Identifier:
keyid:55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/4499D9921F4A11F0AF06577CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.118.0/23
IPv6:
2001:df5:1540::/48
Signature Algorithm: sha256WithRSAEncryption
a6:dc:93:97:80:e2:cf:50:45:6e:ea:3d:54:cc:f9:96:74:db:
24:65:34:55:bb:6f:da:9c:63:b1:8f:16:0f:12:ac:dd:39:5e:
95:71:fc:64:25:f1:33:12:ec:f0:80:49:e7:28:8f:3d:98:ea:
59:49:88:46:9b:e7:50:32:d5:d1:a0:8c:ad:4f:7f:18:44:45:
43:92:ac:f6:87:37:d3:a5:cd:15:6e:40:cd:d4:af:a8:cb:e0:
9c:08:4a:e8:be:61:f2:53:9d:7b:af:07:e3:c5:7f:d8:68:92:
04:d9:24:45:00:8b:94:f9:f7:79:5a:a5:af:b1:ee:ad:25:d3:
b7:77:9f:ef:64:4e:b7:d9:06:52:74:d5:01:2e:01:42:0d:c1:
48:b7:f7:6a:bd:e5:cc:37:39:86:7f:86:42:fc:d4:d5:6d:9d:
fa:54:86:3b:ca:c7:08:3c:19:a1:84:cb:79:07:9b:30:10:ac:
83:de:59:23:54:be:ef:f6:fe:bb:3f:ec:a7:92:c4:0e:f6:7b:
8a:fb:6d:6b:68:88:1c:44:7e:26:1a:9f:cd:70:a5:5e:71:33:
9d:8a:79:65:ba:38:f0:6b:81:78:05:9d:b5:de:0e:65:f0:ae:
17:6c:d4:94:15:2b:f8:8f:19:32:af:21:27:fc:4f:70:b6:be:
99:eb:bf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:52 2026 by rpki-client