
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/56C4FAF42D4511EAB70F247AC4F9AE02.roa
File: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (raw, json)
Hash identifier: eE89PGe/2iXoWPgaTFIDnebqRit5cWEOVZbQe/DuWbY=
Subject key identifier: 64:4F:54:B9:40:2E:41:9C:4E:21:94:A7:F2:F2:FC:AE:BE:E7:BD:4C
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 36A6
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/56C4FAF42D4511EAB70F247AC4F9AE02.roa
Signing time: Wed 30 Sep 2026 16:17:17 +0000
ROA not before: Wed 30 Sep 2026 16:17:17 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 4758
IP address blocks: 14.139.15.0/24 maxlen: 24
2405:8a00:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 15:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13990 (0x36a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Sep 30 16:17:17 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd360d-f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:13:2a:18:9d:b2:f3:91:3f:d4:e0:43:37:
a5:70:a9:8d:61:2f:a0:dc:f2:ae:94:5d:83:84:c5:
ca:d5:06:91:d1:08:41:00:19:56:34:9d:eb:3e:01:
a9:78:f6:d8:9f:3e:c7:96:e2:ec:21:94:28:63:42:
eb:ba:dc:e2:13:07:d2:3a:e2:ee:0e:ff:01:16:5d:
89:53:3e:d5:5c:91:f8:7b:66:05:2e:0d:16:09:81:
15:c8:b5:cd:cc:df:ff:61:6c:80:a9:13:48:3b:87:
ad:4f:24:3e:92:ba:ea:9a:10:aa:e6:c2:ea:ca:74:
ad:1a:d6:01:28:19:ce:51:65:aa:78:15:f9:f7:18:
bb:db:1d:39:1b:16:6a:d9:fa:eb:6a:ae:fd:d5:de:
0e:01:d3:d0:22:61:08:c7:07:43:36:47:aa:b5:78:
f0:b0:1f:bb:03:24:a5:d9:d7:f6:fe:b1:c8:01:ce:
09:a6:2f:d4:e3:48:f6:85:72:00:52:ad:ad:db:43:
6e:37:ab:e4:62:b8:aa:62:12:c8:97:de:57:a2:3f:
f2:1c:de:32:a5:e8:fb:6f:df:b7:cd:cc:81:91:db:
1f:4d:49:5a:8d:65:5d:6f:c1:bf:f8:e5:23:a4:ba:
ae:d3:a7:68:50:72:85:55:b6:8e:1e:c5:19:c8:c5:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4F:54:B9:40:2E:41:9C:4E:21:94:A7:F2:F2:FC:AE:BE:E7:BD:4C
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/56C4FAF42D4511EAB70F247AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.139.15.0/24
IPv6:
2405:8a00:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
6b:75:f6:1a:06:87:52:69:ac:4b:a6:d1:3c:e7:df:43:c7:a2:
f7:f4:db:86:24:88:61:a8:6c:db:09:96:7b:f4:f5:ca:7b:40:
df:dd:6d:b4:70:51:01:40:68:cd:3d:88:24:38:96:d7:69:e1:
ed:ff:3a:a6:af:89:c3:5f:9a:30:d5:8c:24:13:52:e5:6e:4e:
b6:bb:d1:6b:66:03:c0:fd:6c:7e:4f:36:40:23:59:5d:5a:29:
8b:2d:69:e7:72:bf:f7:6a:99:38:f7:5e:a0:99:52:da:6d:18:
66:b6:65:da:ec:42:fa:40:2e:36:b2:ae:30:65:71:c3:8c:60:
4f:48:bd:37:c9:95:ca:5b:56:a7:71:52:69:27:20:a0:39:d6:
d6:9e:fa:43:22:7a:df:a1:a1:59:69:88:26:01:b9:5b:4e:d5:
7a:01:64:70:c8:a4:e4:5e:a8:5d:ff:81:74:5e:24:62:ab:d8:
a1:5c:32:fc:50:4c:24:97:67:81:ca:66:9c:57:c1:32:cd:d0:
42:be:3f:f5:28:df:0b:c8:73:86:54:77:75:9a:78:1b:d3:ae:
22:3e:06:8e:6a:3b:7c:18:5d:e0:22:5d:d1:23:f9:76:2f:f3:
59:e8:1f:a3:b6:9b:62:1b:46:1b:b1:3d:63:9b:55:9a:a4:c7:
a3:60:6a:aa
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICNqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3
QTQ3QTVGMDkwHhcNMjYwOTMwMTYxNzE3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJkMzYwZC1mMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1bsTKhidsvORP9TgQzelcKmNYS+g3PKulF2DhMXK1QaR0QhBABlWNJ3rPgGp
ePbYnz7HluLsIZQoY0LrutziEwfSOuLuDv8BFl2JUz7VXJH4e2YFLg0WCYEVyLXN
zN//YWyAqRNIO4etTyQ+krrqmhCq5sLqynStGtYBKBnOUWWqeBX59xi72x05GxZq
2frraq791d4OAdPQImEIxwdDNkeqtXjwsB+7AySl2df2/rHIAc4Jpi/U40j2hXIA
Uq2t20NuN6vkYriqYhLIl95Xoj/yHN4ypej7b9+3zcyBkdsfTUlajWVdb8G/+OUj
pLqu06doUHKFVbaOHsUZyMUTlQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGRPVLlA
LkGcTiGUp/Ly/K6+571MMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1
MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY
d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEJDN0EvNEM1MjhGNzg0NTAzMTFFMkJEQ0ExRjczMjk3OUJCMjAvNTZDNEZBRjQy
RDQ1MTFFQUI3MEYyNDdBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQADosPMA8EAgACMAkDBwAkBYoA//8wDQYJKoZIhvcNAQELBQADggEB
AGt19hoGh1JprEum0Tzn30PHovf024YkiGGobNsJlnv09cp7QN/dbbRwUQFAaM09
iCQ4ltdp4e3/OqavicNfmjDVjCQTUuVuTra70WtmA8D9bH5PNkAjWV1aKYstaedy
v/dqmTj3XqCZUtptGGa2ZdrsQvpALjayrjBlccOMYE9IvTfJlcpbVqdxUmknIKA5
1tae+kMiet+hoVlpiCYBuVtO1XoBZHDIpOReqF3/gXReJGKr2KFcMvxQTCSXZ4HK
ZpxXwTLN0EK+P/Uo3wvIc4ZUd3WaeBvTriI+Bo5qO3wYXeAiXdEj+XYv81noH6O2
m2IbRhuxPWObVZqkx6Ngaqo=
-----END CERTIFICATE-----
Generated at Mon Oct 12 15:16:54 2026 by rpki-client