
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1D5C6E6CA0FA11F0B026D133C4F9AE02.roa
File: 1D5C6E6CA0FA11F0B026D133C4F9AE02.roa (raw, json)
Hash identifier: C2XpgyfnYYZHApkuumNQPttPRBeBZUCBK2LL1AJJb7g=
Subject key identifier: BB:6E:17:53:A5:C6:EA:CB:23:2E:8D:F6:AD:9B:EF:90:34:92:91:EA
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0EA5
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1D5C6E6CA0FA11F0B026D133C4F9AE02.roa
Signing time: Sat 04 Oct 2025 08:15:12 +0000
ROA not before: Sat 04 Oct 2025 08:15:12 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 154198
IP address blocks: 14.192.144.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3749 (0xea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Oct 4 08:15:12 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68e0d78f-0aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:b7:31:b6:e1:7a:52:7f:62:6a:35:78:b3:
a6:59:7f:79:9b:e8:f1:20:c4:92:49:42:cf:f3:1b:
cf:76:20:eb:75:04:82:b5:b9:c2:e3:c1:92:b8:16:
10:74:10:94:d8:e3:2e:5c:f8:e9:6d:30:d3:dc:4a:
15:87:dd:58:6e:43:23:67:9a:65:88:19:5e:73:fc:
9e:13:4c:9a:01:1d:d8:c2:a1:3d:49:87:85:a8:90:
73:90:a0:94:0d:57:8c:66:fb:c4:97:71:bd:e8:bc:
a8:e4:ed:17:8f:38:86:c9:07:2f:12:0c:3a:f8:c3:
8a:b7:ff:92:c6:06:78:3a:20:7b:03:5d:f5:15:cc:
8b:17:a0:1c:82:c6:42:31:78:ec:6f:29:60:c2:e0:
da:21:64:3e:2b:17:1c:d2:88:1a:6b:92:dc:5b:98:
2c:e1:58:8e:49:c9:0a:fd:fe:ee:f3:b6:47:e4:d7:
f1:16:38:67:bb:d4:68:b8:60:ae:0f:3f:44:ee:1f:
8e:6a:a1:c8:77:3b:d7:d6:de:02:98:73:60:00:3e:
53:bd:09:60:4c:b0:fc:ab:75:bc:16:fa:92:9d:6c:
0e:1b:da:85:fa:8b:ef:87:02:8b:ce:2f:96:8e:0c:
99:5c:45:49:c3:e9:86:99:38:67:fe:62:2c:19:8c:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6E:17:53:A5:C6:EA:CB:23:2E:8D:F6:AD:9B:EF:90:34:92:91:EA
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1D5C6E6CA0FA11F0B026D133C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.144.0/24
14.192.147.0-14.192.148.255
Signature Algorithm: sha256WithRSAEncryption
aa:49:97:67:cd:0c:79:d2:20:25:f4:66:64:b0:1e:7b:ad:74:
33:b7:20:36:81:c1:46:8b:38:23:e5:56:c3:00:d2:dd:f5:5c:
b5:fe:3c:2d:2f:be:af:b2:08:9d:36:a0:9d:3d:26:46:73:ce:
a0:c3:e7:a8:d6:3a:1f:64:c3:46:aa:b4:d1:22:d8:d9:47:17:
97:66:25:c4:7f:07:0d:8f:b1:7c:93:3b:b3:bd:3d:d6:40:0c:
70:7d:25:53:18:bf:7b:49:5a:91:0c:fb:90:4d:9b:77:14:a8:
7e:77:d5:31:b5:d0:58:f4:26:ee:0f:c3:3b:94:58:50:c1:e3:
65:a0:90:0f:4e:15:59:3c:00:f2:a7:2d:16:aa:c6:d4:68:9b:
87:35:16:15:dc:b4:69:a8:28:aa:f6:f1:6e:be:9e:ca:71:65:
61:ed:f6:6f:44:f3:f5:5e:b9:91:b2:46:f2:c7:4e:02:f2:d2:
97:e2:20:23:ec:39:d5:75:07:6e:17:91:07:99:74:ad:9f:03:
0b:d6:77:a5:17:6f:d5:d6:b4:89:44:57:95:6f:d4:de:5d:63:
99:0b:f5:00:32:a3:ad:43:d6:be:5f:7a:02:5e:f1:63:a2:9a:
cb:80:fb:be:6b:6b:0b:da:db:3a:71:cf:ab:bd:90:8b:ca:55:
94:cc:89:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:24:44 2025 by rpki-client