
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/14FFD39467BE11E8910CB13EC4F9AE02.roa
File: 14FFD39467BE11E8910CB13EC4F9AE02.roa (raw, json)
Hash identifier: aoK1qMo+XLiglTyrOyoKUd3w0AOhsSnhUEAZl5VjK2k=
Subject key identifier: 6A:57:2D:E7:2D:44:D3:74:0D:37:12:4A:E0:7A:13:6E:9F:1F:65:30
Certificate issuer: /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D
Certificate serial: 1DAB
Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/14FFD39467BE11E8910CB13EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:28:49 +0000
ROA not before: Fri 30 Jan 2026 16:14:10 +0000
ROA not after: Tue 02 Jun 2026 00:00:00 +0000
asID: 9988
IP address blocks: 45.112.176.0/22 maxlen: 24
103.52.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl
rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:59:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7595 (0x1dab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D
Validity
Not Before: Jan 30 16:14:10 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=69a45b31-809c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:c9:df:32:ef:13:f7:44:b7:b4:67:2d:a7:
8e:b1:fa:61:8e:c5:38:16:15:54:9f:25:8b:f6:d7:
58:2f:e7:6c:2d:bd:cb:4f:3b:e4:b2:d0:35:4b:09:
6d:ec:bf:df:02:ab:3a:a8:13:f8:8a:5d:21:75:5f:
32:11:31:b2:af:f7:39:13:0a:9a:38:a9:fe:33:15:
0f:56:4a:87:b0:f3:ce:9b:81:2d:6e:c3:19:fa:08:
e4:2c:3a:7e:cc:47:11:d3:83:9b:27:b0:39:0b:27:
44:80:e4:d8:61:68:fd:ea:04:60:30:f6:11:c5:29:
b8:6a:cf:bb:a2:d8:3e:8b:f7:4a:33:b9:4e:ac:17:
5a:6d:83:a5:2a:3a:d0:d6:5a:22:74:7a:26:92:ef:
99:4b:9b:1a:99:aa:bb:6e:17:30:d7:bc:47:d0:c7:
71:68:64:96:8d:62:0d:aa:77:0e:0b:d0:88:2b:b9:
83:45:0c:67:a6:f6:12:38:37:82:61:8e:79:01:62:
b4:3f:96:20:81:76:be:5d:ca:e9:f1:95:e6:c5:8d:
f7:ac:1d:35:c5:ea:85:1d:45:69:45:be:24:fc:50:
73:9b:a1:5f:a2:e2:a3:c5:0b:8c:f8:e8:bd:cc:61:
d3:98:b1:4c:02:10:eb:98:d2:ec:aa:fb:61:ff:31:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:57:2D:E7:2D:44:D3:74:0D:37:12:4A:E0:7A:13:6E:9F:1F:65:30
X509v3 Authority Key Identifier:
keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/14FFD39467BE11E8910CB13EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.112.176.0/22
103.52.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:2e:b7:4e:86:78:dd:6e:61:68:2f:e0:e0:41:81:b0:1c:36:
c9:fe:35:19:3b:79:ca:ba:fa:43:4d:fc:20:1b:44:e3:29:1f:
90:ca:0d:d5:1b:ea:e1:f6:22:55:6f:92:c8:d4:c9:10:86:d4:
97:1e:91:c1:3f:a2:d4:ee:de:91:91:80:15:96:35:d5:a2:07:
03:64:d9:43:54:14:a9:52:e7:be:ec:fc:f3:f1:86:6f:22:1e:
2c:a8:24:60:e7:e4:e6:ab:29:3c:e8:8a:4d:8f:a0:28:7c:2f:
b2:bc:28:ef:d8:e3:5b:7c:81:c1:4e:4d:13:70:7a:ff:b7:2f:
e7:f0:6b:41:f1:2e:94:18:71:35:65:9d:80:76:73:4d:ed:a0:
f7:b7:07:0e:0c:2a:df:92:4e:ad:c3:be:e9:6a:7f:6e:4f:82:
d8:56:d4:2b:b6:94:d1:49:83:5d:b8:45:ec:51:32:d2:e2:5d:
80:2b:c3:d7:79:0f:4c:8a:9a:0d:b6:98:9e:0d:de:e3:87:01:
67:7d:51:f2:7e:34:eb:8b:10:df:d4:5c:22:4f:56:e4:ff:c0:
ab:9e:85:f1:17:c5:68:d8:6b:e2:7e:30:40:e2:d2:34:d6:0f:
ad:a0:f2:b1:a3:b3:6e:eb:42:7a:5d:33:62:64:9b:69:0f:3e:
c1:27:aa:1d
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICHaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODFFQUExMTAvBgNVBAUTKDY3M0QwNTU0OUQ0MTM0RDBBQzM1NUREOUI2NTBERjND
MUM2OEFBNUQwHhcNMjYwMTMwMTYxNDEwWhcNMjYwNjAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWIzMS04MDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoa3J3zLvE/dEt7RnLaeOsfphjsU4FhVUnyWL9tdYL+dsLb3LTzvkstA1Swlt
7L/fAqs6qBP4il0hdV8yETGyr/c5EwqaOKn+MxUPVkqHsPPOm4EtbsMZ+gjkLDp+
zEcR04ObJ7A5CydEgOTYYWj96gRgMPYRxSm4as+7otg+i/dKM7lOrBdabYOlKjrQ
1loidHomku+ZS5samaq7bhcw17xH0MdxaGSWjWINqncOC9CIK7mDRQxnpvYSODeC
YY55AWK0P5YggXa+Xcrp8ZXmxY33rB01xeqFHUVpRb4k/FBzm6FfouKjxQuM+Oi9
zGHTmLFMAhDrmNLsqvth/zG9pQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGpXLect
RNN0DTcSSuB6E26fH2UwMB8GA1UdIwQYMBaAFGc9BVSdQTTQrDVd2bZQ3zwcaKpd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS84ODI4RDBGNEJC
NzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5OQ3NOVjNadGxEZlBCeG9x
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p6MEZWSjFCTk5Dc05WM1p0bERmUEJ4b3FsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODFFQUEvODgyOEQwRjRCQjc3MTFFNjk1NjM2MzM4QzRGOUFFMDIvMTRGRkQzOTQ2
N0JFMTFFODkxMENCMTNFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCLXCwAwQCZzQMMA0GCSqGSIb3DQEBCwUAA4IBAQAaLrdOhnjdbmFo
L+DgQYGwHDbJ/jUZO3nKuvpDTfwgG0TjKR+Qyg3VG+rh9iJVb5LI1MkQhtSXHpHB
P6LU7t6RkYAVljXVogcDZNlDVBSpUue+7Pzz8YZvIh4sqCRg5+Tmqyk86IpNj6Ao
fC+yvCjv2ONbfIHBTk0TcHr/ty/n8GtB8S6UGHE1ZZ2AdnNN7aD3twcODCrfkk6t
w77pan9uT4LYVtQrtpTRSYNduEXsUTLS4l2AK8PXeQ9MipoNtpieDd7jhwFnfVHy
fjTrixDf1FwiT1bk/8CrnoXxF8Vo2GvifjBA4tI01g+toPKxo7Nu60J6XTNiZJtp
Dz7BJ6od
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:38 2026 by rpki-client