
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/200B2C4804AB11EB8AAF5923C4F9AE02.roa
File: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (raw, json)
Hash identifier: u0qwTK26crlyMuoa9QfDuqp5CWzIdI2WQad6/Sn3dko=
Subject key identifier: 96:AF:D4:CA:3E:28:8F:2A:FB:C6:91:D3:FF:64:10:D1:97:7E:4C:15
Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial: 3319
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/200B2C4804AB11EB8AAF5923C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:10:56 +0000
ROA not before: Wed 30 Apr 2025 15:52:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4797
IP address blocks: 121.240.174.0/24 maxlen: 24
202.54.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13081 (0x3319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Validity
Not Before: Apr 30 15:52:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48f40-919a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:b9:1f:fb:e5:aa:90:be:fe:0c:1c:87:dc:
d2:bd:00:fd:42:86:8c:73:a0:03:dd:10:09:7c:c3:
94:98:6a:10:92:bd:fe:e6:39:c8:b8:74:fb:6e:e2:
f6:b5:63:c8:40:b0:33:93:4a:4b:a1:12:38:25:41:
29:48:72:e6:5e:7c:88:d5:6d:e0:4a:de:b0:a2:6c:
96:d7:08:b2:a1:15:ef:c9:98:7b:b4:d8:1e:01:90:
da:ca:13:de:fe:74:3d:77:37:60:77:97:54:02:d8:
43:a7:1b:59:b5:57:01:f3:67:25:df:07:19:cd:0c:
d9:7d:81:ea:00:08:f8:30:b1:72:b0:dc:b7:10:41:
33:0a:8e:1f:ad:cb:39:92:15:54:eb:96:d5:d4:ef:
d0:fa:57:91:6d:71:3a:14:2b:ce:df:e6:67:76:76:
fa:75:d5:3e:5d:a9:85:c3:37:92:94:a5:80:5b:2e:
68:71:dd:b4:3f:af:37:f1:6c:d1:8a:a4:2e:29:3d:
9d:dd:9e:18:79:e7:be:30:55:9d:02:71:e0:f7:41:
d4:81:06:74:b4:45:0a:b1:6d:12:2a:7c:de:ea:17:
f9:b9:22:06:a1:8c:9d:3b:34:c7:fc:68:97:57:51:
cf:68:4c:2d:34:aa:bb:36:33:91:e3:ba:92:18:36:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AF:D4:CA:3E:28:8F:2A:FB:C6:91:D3:FF:64:10:D1:97:7E:4C:15
X509v3 Authority Key Identifier:
keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/200B2C4804AB11EB8AAF5923C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
121.240.174.0/24
202.54.210.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1e:44:fd:3b:be:e4:ae:34:a9:de:b6:07:97:62:1a:f0:d8:
7c:c9:18:6b:7c:94:2e:6c:5d:22:b1:a7:5f:a7:87:c4:a6:24:
68:47:74:97:cb:5a:a8:ed:ce:e9:a3:48:c5:4d:ba:ab:d4:2b:
32:4a:aa:0d:76:e8:51:f2:b2:84:d9:9b:d0:05:57:71:32:30:
ea:43:c5:40:64:61:fb:27:a5:56:fb:d0:80:98:3e:6d:00:16:
b7:3d:0c:60:50:b1:02:63:69:fb:3b:2e:91:4d:5f:df:9f:33:
7c:20:31:61:e8:27:13:bb:8a:85:c9:56:8c:0b:88:d6:1d:19:
a5:f6:59:d4:be:4d:f8:21:96:23:e8:8b:68:56:f9:39:d3:d9:
eb:dd:5f:7a:da:69:4e:53:19:9d:ad:ed:bb:9e:ee:13:ed:4e:
a2:38:87:5a:45:08:14:04:86:8a:0a:79:8f:6e:8d:2d:9c:56:
09:af:42:77:b3:66:b0:df:ea:f9:c5:02:8b:14:db:27:0a:7d:
b9:55:9a:1d:68:69:51:6e:93:1b:6e:2c:0d:7b:a5:62:ef:10:
5f:35:90:43:84:f4:51:dd:14:7d:7a:81:56:52:0e:93:91:18:
b4:45:18:a8:f4:fc:69:bb:18:98:83:11:19:fd:d4:e9:26:5d:
63:dc:98:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:27 2026 by rpki-client