
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/5C3C24DA7C3A11F19502E96961A30FBC.roa
File: 5C3C24DA7C3A11F19502E96961A30FBC.roa (raw, json)
Hash identifier: +77vCVU7zK9eDrNIk/k034MQetemZz3M59FaR+fpfgs=
Subject key identifier: 8A:2D:75:7A:FE:CE:57:50:C6:38:9F:E5:0B:D6:5C:BD:2B:B2:E0:2A
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 36A9
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/5C3C24DA7C3A11F19502E96961A30FBC.roa
Signing time: Wed 30 Sep 2026 16:17:25 +0000
ROA not before: Wed 30 Sep 2026 16:17:25 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 55847
IP address blocks: 14.139.1.0/24 maxlen: 24
14.139.2.0/24 maxlen: 24
14.139.7.0/24 maxlen: 24
14.139.40.0/24 maxlen: 24
14.139.43.0/24 maxlen: 24
14.139.45.0/24 maxlen: 24
14.139.46.0/24 maxlen: 24
14.139.47.0/24 maxlen: 24
14.139.128.0/24 maxlen: 24
14.139.196.0/24 maxlen: 24
180.149.50.0/24 maxlen: 24
180.149.53.0/24 maxlen: 24
180.149.58.0/24 maxlen: 24
2405:8a00:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 15:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13993 (0x36a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Sep 30 16:17:25 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd3614-e1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:d1:5c:55:ca:fb:d1:03:c2:e8:d8:5c:f9:
ce:ae:43:3f:70:a4:bc:7f:7d:64:4c:eb:17:2a:20:
68:7c:01:8e:5c:02:40:dc:f9:6c:c0:41:9d:09:26:
64:78:d0:ed:2f:29:32:90:eb:65:fb:c0:5b:cb:a1:
79:2b:4a:2f:82:3a:7e:eb:1a:1c:23:b3:d8:91:a5:
d6:82:42:23:50:94:fd:98:64:79:d3:46:e9:a5:04:
25:c1:44:fd:b9:e6:9a:4b:5d:06:1c:b8:f9:a5:eb:
d9:1f:8e:05:0b:f8:d4:99:24:b8:d7:b2:9a:56:64:
c8:70:2f:81:d5:09:3b:81:ed:06:db:a2:d3:0d:21:
38:61:70:8e:44:9d:6c:99:c1:e0:e4:3a:ca:e1:40:
73:50:be:bf:31:1f:71:e0:39:60:3b:1d:71:81:c2:
ed:88:7b:b7:5e:60:ab:0a:50:7a:33:fe:0b:23:69:
bc:13:e5:26:5c:69:6a:ad:11:15:41:a6:02:61:a7:
b1:2b:67:89:c6:db:00:83:cf:d7:1c:4d:25:ff:a4:
b5:df:7a:04:f9:de:46:b6:91:64:36:80:0b:b7:46:
0e:0e:ac:71:2b:2d:91:97:2e:01:a8:15:e9:ab:d7:
a9:d1:9e:22:ab:f3:83:7e:fc:f5:ce:2d:52:2f:b5:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2D:75:7A:FE:CE:57:50:C6:38:9F:E5:0B:D6:5C:BD:2B:B2:E0:2A
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/5C3C24DA7C3A11F19502E96961A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
14.139.1.0-14.139.2.255
14.139.7.0/24
14.139.40.0/24
14.139.43.0/24
14.139.45.0-14.139.47.255
14.139.128.0/24
14.139.196.0/24
180.149.50.0/24
180.149.53.0/24
180.149.58.0/24
IPv6:
2405:8a00:8000::/48
Signature Algorithm: sha256WithRSAEncryption
c1:0d:ff:e9:2c:79:09:a2:e1:1f:b2:c0:f6:40:17:59:75:ba:
ed:10:f9:ce:6f:91:a7:ea:c4:9a:25:35:c6:17:b4:9e:08:a2:
a0:b5:3d:e9:10:83:ac:84:ea:f1:18:eb:ee:8c:76:59:1d:98:
f3:4c:74:2a:6e:5a:07:ec:82:09:6d:7f:fc:81:46:b6:02:dd:
a4:bb:7e:2a:9c:8b:3b:bf:4b:a3:ea:0f:92:fe:de:93:65:ef:
b1:55:c3:72:77:fe:3d:00:3f:90:c4:ac:b4:ae:18:54:aa:15:
3a:ce:5d:8e:07:c6:35:7e:ab:f9:7f:1f:1e:03:cb:77:0d:33:
ad:c3:f3:8c:41:f2:69:9c:93:eb:44:48:f2:01:cd:1c:a7:a6:
ec:c4:06:56:1e:ed:66:2b:50:ae:3e:ab:f6:40:c4:ae:99:b4:
66:cd:6b:d3:94:59:74:ac:7d:7e:77:be:3f:50:08:c7:c4:9e:
81:6d:f5:7b:91:2e:ef:e4:be:e9:87:5f:4c:86:f0:b4:cf:be:
d0:63:3e:e4:e1:3d:59:05:f5:c1:3f:c1:78:ff:3d:13:b6:de:
c6:98:24:e6:c5:e5:59:65:19:a6:3f:50:8f:96:96:0d:fd:42:
49:33:88:b4:99:20:d4:6d:6a:af:12:d1:78:bd:fe:04:94:5a:
59:b4:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:40:00 2026 by rpki-client