
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/3C916EA69A7D11EF8450BB33C4F9AE02.roa
File: 3C916EA69A7D11EF8450BB33C4F9AE02.roa (raw, json)
Hash identifier: rchAj9jqPDGZDJRDoGpXWHGS4Jz2guhJrwUw3kOv+ps=
Subject key identifier: 05:58:D1:9B:47:11:F7:9A:94:67:9A:6B:07:E9:57:1D:A9:4C:66:1A
Certificate issuer: /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial: 13F2
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/3C916EA69A7D11EF8450BB33C4F9AE02.roa
Signing time: Thu 19 Jun 2025 15:31:13 +0000
ROA not before: Thu 19 Jun 2025 15:31:13 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 395793
IP address blocks: 14.192.49.0/24 maxlen: 24
14.192.50.0/24 maxlen: 24
14.192.51.0/24 maxlen: 24
103.78.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5106 (0x13f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E93F, serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Validity
Not Before: Jun 19 15:31:13 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68542d40-fffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:da:a9:01:82:67:b8:44:81:a9:ed:cd:0a:
c1:0b:b0:26:f2:8a:1b:48:78:6f:5b:7b:1e:9a:b0:
c5:18:7f:13:a6:05:a6:ac:8a:78:ef:3b:e1:f8:be:
2a:fb:bb:04:7d:8c:7e:4a:28:55:df:ad:81:99:bd:
9d:55:64:3a:87:d3:14:51:26:22:c9:ef:c2:3e:d3:
cd:bd:21:bf:69:82:12:2e:f2:3d:bb:6b:e1:c9:0d:
ff:8a:42:e1:5a:1c:32:ff:01:ca:53:53:2c:02:61:
5d:67:f7:17:17:58:01:5f:7e:89:a8:24:a2:48:09:
0a:ad:ad:43:31:2f:d2:40:14:26:d5:04:61:5b:23:
21:c1:6d:93:7a:02:af:9b:92:8f:d0:1a:90:4c:72:
a7:f9:09:28:08:12:5a:0b:ec:01:f3:ed:9c:0f:31:
17:d7:b4:1b:ba:7c:fa:86:08:ea:9f:f3:3f:63:50:
e0:bd:81:66:95:e8:58:1a:17:25:c3:18:ff:1c:fc:
a3:5c:84:fb:99:7e:bf:af:d8:53:62:cc:e4:b0:36:
9a:6c:f6:17:58:f7:cc:fc:23:cd:9c:93:58:16:36:
16:88:51:6f:1a:c2:56:f7:e6:74:64:8d:ca:9a:08:
38:25:b8:28:1d:02:29:9b:11:ef:0d:b7:42:26:a2:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:58:D1:9B:47:11:F7:9A:94:67:9A:6B:07:E9:57:1D:A9:4C:66:1A
X509v3 Authority Key Identifier:
keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/3C916EA69A7D11EF8450BB33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.49.0-14.192.51.255
103.78.243.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a9:c5:b0:66:1a:7a:e5:a5:a2:38:fd:d7:42:d0:33:e3:6b:
24:61:2b:0e:02:6e:a4:af:a3:87:69:5e:d1:d4:a6:ac:69:ef:
46:9c:d4:f6:16:1f:49:49:dc:c8:4e:1b:f9:7b:c8:f9:a4:c6:
5b:97:9f:04:a3:ac:d5:e2:52:42:e5:de:c6:59:77:ec:00:b2:
d7:5b:29:39:c9:e0:4b:a4:f1:d4:09:55:e1:59:8c:01:a7:f6:
65:8b:6a:16:64:a7:08:71:73:fa:77:f9:eb:46:99:d6:86:8a:
2c:12:9d:5a:9a:c0:65:e5:fb:bf:49:e4:2e:ce:a8:52:3a:b9:
ec:eb:7a:39:72:71:c1:1d:be:6d:e4:1b:a6:74:45:50:eb:33:
ba:b2:4f:2f:2a:0a:6e:5b:f0:c8:f0:b4:78:45:4c:f7:be:52:
75:d9:62:af:01:42:f9:ce:5c:ab:68:8e:ea:35:23:75:bf:77:
74:84:97:d9:5c:e8:17:0f:7e:b1:e8:71:f9:cc:a9:d1:b5:93:
0f:e6:69:36:e1:3e:b6:9a:ef:1c:96:2d:ea:9c:29:b3:85:57:
44:75:3a:13:5e:b4:09:13:fb:42:a7:f3:ad:82:07:db:a6:2e:
9c:ec:07:e2:5a:07:05:7e:a9:bb:95:1e:42:d6:42:c0:24:67:
bd:8b:f2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:01:58 2025 by rpki-client