
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0F75123EB42411F19F202BBB3E11F970.roa
File: 0F75123EB42411F19F202BBB3E11F970.roa (raw, json)
Hash identifier: JNL6WqomlW19XznMLYXyyQo8z6bj0pJRq0tJqCedMSI=
Subject key identifier: 50:7F:63:1C:F0:99:2F:66:13:5D:B8:8B:25:18:DD:5F:47:8C:64:44
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 1139
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0F75123EB42411F19F202BBB3E11F970.roa
Signing time: Sat 19 Sep 2026 12:17:20 +0000
ROA not before: Sat 19 Sep 2026 12:17:20 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 141711
IP address blocks: 14.192.152.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4409 (0x1139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Sep 19 12:17:20 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aae7d4f-a31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:6d:63:24:af:a6:dd:69:3d:d1:ce:1c:e7:
76:f0:ab:53:62:b6:50:64:80:4a:5c:c0:53:48:f2:
8d:44:ef:e7:38:71:52:54:4a:09:0e:87:21:c7:6d:
6a:93:32:15:b8:d9:7e:23:a0:1b:6e:25:53:6a:28:
b1:e1:00:c5:1f:24:5a:c1:e4:d3:3b:f4:d8:fb:2b:
f1:6e:47:73:fc:00:a1:4d:ac:cb:b1:6f:42:81:b2:
c7:04:7f:df:be:ed:20:40:fa:3a:56:d8:0c:93:40:
33:26:cb:1d:0e:dc:a6:82:ab:64:01:55:16:3b:88:
2e:d6:fc:5d:ed:7d:32:49:7b:a0:2e:d1:1c:bf:e8:
02:c6:bb:c2:89:b3:14:31:10:8c:c6:d6:19:29:16:
86:42:05:93:69:64:d9:fc:2e:a6:9b:45:d2:2f:e8:
a3:e9:1d:b8:0c:42:1d:28:b8:dc:68:d5:ab:ba:d6:
aa:3f:28:ca:dd:5f:5b:82:16:96:ff:fd:71:6b:36:
e9:09:18:65:93:a0:32:49:59:13:5a:bb:87:39:0e:
23:b2:0d:ec:b6:cb:4e:11:3e:5d:fa:49:20:c6:58:
71:c3:16:5d:62:8b:6e:17:2f:43:68:b2:0b:9c:ad:
ec:27:fb:d6:e1:23:cd:f6:e2:6f:e7:2b:36:63:62:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7F:63:1C:F0:99:2F:66:13:5D:B8:8B:25:18:DD:5F:47:8C:64:44
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0F75123EB42411F19F202BBB3E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.152.0/24
14.192.154.0/23
Signature Algorithm: sha256WithRSAEncryption
68:61:72:b6:fc:d9:4c:c8:92:73:c0:6d:e6:9a:c2:fe:d5:a0:
83:b1:f1:5b:73:35:5c:88:b4:8c:2b:1c:87:26:3d:ca:7f:8a:
46:62:c3:4f:a1:d9:76:a3:72:c8:a6:22:01:8f:94:a4:0e:04:
39:8c:ce:23:12:37:fb:d8:0b:62:24:35:41:78:45:d3:fd:a7:
62:49:6c:f6:57:dd:ae:57:a5:23:71:27:6e:a2:06:d2:6e:55:
5f:ef:66:5f:e5:a6:8a:f9:7b:ad:21:9f:18:a8:76:e0:e4:c8:
c0:4c:66:c9:ed:58:60:45:9f:a9:4e:76:f3:fc:8f:90:31:c6:
a0:46:a6:ba:e2:5d:55:6a:f1:a2:e3:0c:d3:e7:d5:93:d2:8d:
40:cc:fd:3e:0c:5f:61:28:fe:e7:99:b9:5e:8c:dd:25:25:f0:
b6:9c:dd:76:4a:16:fe:32:7e:53:21:28:2f:5c:f7:c6:aa:f0:
f1:5b:23:65:5a:af:46:9d:1a:5f:56:a9:79:00:15:76:c4:28:
8e:e0:c9:f6:54:fa:fd:50:5a:f1:0d:94:e2:90:1b:bf:ad:7b:
89:0d:ce:ac:08:88:24:1a:d0:3e:4e:6b:f5:1c:8f:bd:cc:64:
2f:64:f0:8a:28:88:30:8a:97:d4:b9:f0:74:55:b6:c3:55:48:
36:7d:3a:ee
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICETkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjYwOTE5MTIxNzIwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFlN2Q0Zi1hMzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSptYySvpt1pPdHOHOd28KtTYrZQZIBKXMBTSPKNRO/nOHFSVEoJDochx21q
kzIVuNl+I6AbbiVTaiix4QDFHyRaweTTO/TY+yvxbkdz/AChTazLsW9CgbLHBH/f
vu0gQPo6VtgMk0AzJssdDtymgqtkAVUWO4gu1vxd7X0ySXugLtEcv+gCxrvCibMU
MRCMxtYZKRaGQgWTaWTZ/C6mm0XSL+ij6R24DEIdKLjcaNWrutaqPyjK3V9bghaW
//1xazbpCRhlk6AySVkTWruHOQ4jsg3ststOET5d+kkgxlhxwxZdYotuFy9DaLIL
nK3sJ/vW4SPN9uJv5ys2Y2LgFwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFB/Yxzw
mS9mE124iyUY3V9HjGREMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvMEY3NTEyM0VC
NDI0MTFGMTlGMjAyQkJCM0UxMUY5NzAucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQADsCYAwQBDsCaMA0GCSqGSIb3DQEBCwUAA4IBAQBoYXK2/NlMyJJz
wG3mmsL+1aCDsfFbczVciLSMKxyHJj3Kf4pGYsNPodl2o3LIpiIBj5SkDgQ5jM4j
Ejf72AtiJDVBeEXT/adiSWz2V92uV6UjcSduogbSblVf72Zf5aaK+XutIZ8YqHbg
5MjATGbJ7VhgRZ+pTnbz/I+QMcagRqa64l1VavGi4wzT59WT0o1AzP0+DF9hKP7n
mblejN0lJfC2nN12Shb+Mn5TISgvXPfGqvDxWyNlWq9GnRpfVql5ABV2xCiO4Mn2
VPr9UFrxDZTikBu/rXuJDc6sCIgkGtA+Tmv1HI+9zGQvZPCKKIgwipfUufB0VbbD
VUg2fTru
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:06:21 2026 by rpki-client