
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/E9CB3CD8736F11F19F5F3F2B66A30FBC.roa
File: E9CB3CD8736F11F19F5F3F2B66A30FBC.roa (raw, json)
Hash identifier: E0qqNdAzFY6Ek42L49qq+82Xvgfn5OmD/3S06u5kCzU=
Subject key identifier: 14:04:12:44:3E:12:34:43:A5:6B:85:9F:BE:8A:A1:05:F0:72:CE:9D
Certificate issuer: /CN=A914CDF9/serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE
Certificate serial: DD
Authority key identifier: AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/E9CB3CD8736F11F19F5F3F2B66A30FBC.roa
Signing time: Mon 29 Jun 2026 04:06:33 +0000
ROA not before: Mon 29 Jun 2026 04:06:33 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 45189
IP address blocks: 122.99.124.0/23 maxlen: 24
203.175.176.0/24 maxlen: 24
203.185.191.0/24 maxlen: 24
223.26.32.0/20 maxlen: 24
2407:3400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl
rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CDF9, serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE
Validity
Not Before: Jun 29 04:06:33 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a41ef49-399f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:1e:fd:76:a0:7c:d3:1a:6f:a1:01:1a:6e:
28:27:6d:2f:ec:0c:f6:fa:be:e8:af:14:cd:5e:9e:
b3:9e:54:9f:df:86:c8:11:1b:ca:e3:52:27:cb:22:
89:f5:71:ac:4c:2a:24:a4:ad:23:40:82:44:fb:47:
0a:ed:d5:7d:a3:54:3c:f7:fc:ce:4b:d3:9f:be:ec:
80:3a:16:03:d3:1d:5f:86:04:ca:b6:be:06:2e:06:
55:e8:69:b1:2e:70:fc:f5:f6:5d:28:af:69:59:ce:
34:9d:45:34:90:2e:16:b0:12:19:1a:8b:86:b9:fd:
4c:ed:6a:09:c3:b6:a7:36:76:36:4a:85:b1:80:95:
82:30:d4:a0:26:fe:14:6b:97:57:31:96:4d:19:4b:
e7:37:30:a3:c8:97:6b:bd:49:b5:fa:9d:56:c2:62:
0b:81:0b:de:b3:56:0e:b1:78:0d:63:42:cf:91:e4:
f6:12:01:43:01:48:9a:79:d7:67:da:64:68:54:9f:
34:b4:5f:ec:b0:bd:f8:f8:e0:eb:99:93:90:13:fb:
85:3e:fc:f8:2b:eb:9b:50:cb:7e:14:19:1a:6a:68:
62:d9:e6:8b:d4:78:9c:bd:02:b7:c4:1d:7f:21:07:
ba:5d:a5:ee:32:7c:77:5a:04:8d:9c:c4:aa:02:58:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:04:12:44:3E:12:34:43:A5:6B:85:9F:BE:8A:A1:05:F0:72:CE:9D
X509v3 Authority Key Identifier:
keyid:AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/E9CB3CD8736F11F19F5F3F2B66A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
122.99.124.0/23
203.175.176.0/24
203.185.191.0/24
223.26.32.0/20
IPv6:
2407:3400::/32
Signature Algorithm: sha256WithRSAEncryption
76:66:c9:b8:e0:0c:bd:a0:af:2f:82:95:da:66:f1:72:71:02:
49:63:93:0d:cd:50:d7:5a:88:09:a1:ce:18:7b:6a:dd:25:07:
95:ae:30:2d:bc:da:95:3b:54:0c:2e:41:a1:9c:e6:d6:f4:2d:
75:a2:de:0a:8e:df:03:3d:27:41:fc:e8:d6:9a:0f:f9:18:69:
ae:09:1b:91:9a:92:68:a6:ab:33:1e:2c:a9:c4:62:5e:0c:41:
01:f8:b3:2d:ac:f7:e0:f7:61:68:87:5e:4a:cf:78:67:d3:65:
c8:90:50:fe:68:4e:27:1f:6b:6a:e2:61:92:27:f8:6f:35:ac:
52:dd:ac:8a:b3:21:64:08:d7:bf:64:d4:09:d5:8c:92:73:dd:
13:42:41:fb:bf:8e:9e:f4:89:f2:f2:73:94:77:f8:3c:99:5b:
0c:97:ef:26:cd:4b:c6:f6:9f:f6:70:1f:c4:ba:5a:ea:be:ce:
09:9f:81:3a:be:9f:c1:7f:10:5a:3f:41:e6:44:4f:1e:b3:d0:
f9:d5:80:15:29:a2:e5:c0:01:e2:a7:18:fa:4a:86:17:4a:0a:
3f:01:ff:ac:94:5e:f7:a5:e8:e4:cd:46:4a:82:a9:4e:be:3e:
5a:8b:44:a9:55:79:2e:49:af:46:ba:1c:32:63:a4:fd:92:4c:
00:df:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:45 2026 by rpki-client