
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E48E2E94017211EBA18CC269C4F9AE02.roa
File: E48E2E94017211EBA18CC269C4F9AE02.roa (raw, json)
Hash identifier: mVGA78Zl2U0B3hkzOEy3AAD5vMNBI+xTYAZL5c4Orlk=
Subject key identifier: 62:C8:85:D8:70:61:D0:90:C0:5C:11:D5:6B:EB:4E:0A:E7:20:00:44
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 3607
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E48E2E94017211EBA18CC269C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:26:05 +0000
ROA not before: Thu 30 Oct 2025 15:31:28 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 55847
IP address blocks: 14.139.1.0/24 maxlen: 24
14.139.2.0/24 maxlen: 24
14.139.7.0/24 maxlen: 24
14.139.40.0/24 maxlen: 24
14.139.43.0/24 maxlen: 24
14.139.45.0/24 maxlen: 24
14.139.46.0/24 maxlen: 24
14.139.47.0/24 maxlen: 24
14.139.128.0/24 maxlen: 24
14.139.196.0/24 maxlen: 24
180.149.50.0/24 maxlen: 24
180.149.53.0/24 maxlen: 24
180.149.57.0/24 maxlen: 24
180.149.58.0/24 maxlen: 24
2405:8a00:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13831 (0x3607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Oct 30 15:31:28 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a484bd-859f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:3a:5c:9e:aa:8a:53:57:cc:bf:3c:77:bc:
c9:3d:fa:a8:3e:5c:b7:0a:64:25:86:9b:65:0a:94:
54:57:0e:76:d6:38:e8:3e:f2:5d:05:b8:d5:7b:95:
36:e9:fe:5e:e6:23:64:86:28:4a:41:1b:d0:8a:5e:
4f:6d:47:c8:02:c7:67:e4:3a:21:15:21:df:8a:77:
b7:7a:c8:77:87:22:5d:21:9f:74:ab:85:20:a8:ab:
58:96:5b:5b:05:0e:cc:95:a4:90:90:6d:15:fe:97:
3d:75:61:d9:26:ec:8f:a7:6f:86:25:2b:ce:50:63:
13:0a:6a:b3:e2:41:0a:ec:9c:9a:11:7f:c7:af:dc:
c3:cf:99:86:21:16:24:6f:8d:5f:98:9f:54:47:7a:
d0:8f:35:98:7a:93:7b:0d:79:e4:01:02:18:d4:73:
81:42:ba:32:05:97:d3:6d:88:f2:10:35:9a:fd:5f:
60:83:cf:28:7f:10:df:18:3b:92:29:e0:82:80:1e:
99:8e:8f:d2:71:f9:c5:7e:60:49:72:29:d3:ee:ad:
42:82:ce:c7:1a:a5:0d:17:07:9f:7c:ab:7b:7d:e1:
26:20:cc:6f:05:39:82:68:8b:9f:ac:e3:be:6f:f3:
6b:6b:c0:8c:8c:2e:05:ca:14:7e:d2:1a:cc:5a:35:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C8:85:D8:70:61:D0:90:C0:5C:11:D5:6B:EB:4E:0A:E7:20:00:44
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E48E2E94017211EBA18CC269C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.139.1.0-14.139.2.255
14.139.7.0/24
14.139.40.0/24
14.139.43.0/24
14.139.45.0-14.139.47.255
14.139.128.0/24
14.139.196.0/24
180.149.50.0/24
180.149.53.0/24
180.149.57.0-180.149.58.255
IPv6:
2405:8a00:8000::/48
Signature Algorithm: sha256WithRSAEncryption
62:13:38:a8:44:6f:92:03:c9:4e:d1:60:5d:a0:66:40:71:98:
7e:9d:c6:cd:3a:aa:fb:00:a9:20:79:f4:58:3c:2a:3f:75:ef:
74:b5:a0:30:ad:f0:32:3f:11:b9:1f:10:00:c2:33:f9:88:68:
d7:1f:44:4b:73:b8:4e:7e:75:47:d2:00:77:a8:9e:ef:98:24:
57:d5:bc:29:26:90:14:70:ab:89:1f:c0:f9:73:20:2c:89:58:
1f:23:7c:79:26:9c:45:93:b3:b4:bc:08:a2:18:0b:3e:bf:0b:
05:02:71:c8:af:b2:52:82:9b:f5:0a:b3:0a:78:19:89:38:bc:
dd:2b:7c:87:14:c7:9d:e1:67:68:8b:36:22:f6:2a:d9:64:ac:
7e:19:dc:95:3f:cc:9b:9e:75:57:ab:10:e8:2f:c7:fb:f8:65:
57:94:ee:8f:6b:6a:19:af:42:fe:71:b9:69:45:f3:db:18:d6:
64:26:93:84:e7:f8:ca:63:78:37:d0:7e:fb:a7:5b:b9:e0:84:
7b:93:f8:58:b8:6f:6e:c9:38:4e:56:e2:70:09:16:28:e1:1b:
ca:2c:b7:49:da:98:64:29:fc:3d:02:8f:c9:26:c6:b9:41:bc:
5f:17:a5:fd:f3:c1:90:72:99:a5:69:73:68:9f:a3:02:d8:84:
b8:ef:ae:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:57 2026 by rpki-client