
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/6DE5D7943FA311EDABCBBA25C4F9AE02.roa
File: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (raw, json)
Hash identifier: /IrNKQvpTsDj67fXbpZCLhjHZ4y9EpJo1SBu1q2vy7M=
Subject key identifier: D5:C8:66:1E:07:09:62:6D:6F:65:35:74:3B:98:7F:65:84:9B:99:6D
Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Certificate serial: 051C
Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/6DE5D7943FA311EDABCBBA25C4F9AE02.roa
Signing time: Wed 01 Jul 2026 01:25:08 +0000
ROA not before: Wed 01 Jul 2026 01:25:08 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 14618
IP address blocks: 202.50.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1308 (0x51c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Validity
Not Before: Jul 1 01:25:08 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a446c74-5024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dc:56:04:59:4e:59:ca:55:f0:d7:f6:a7:39:
51:41:7a:73:9c:ab:bc:7b:50:4e:f0:43:aa:30:82:
9b:a9:06:e4:f3:03:22:a9:6a:fa:b8:59:42:a1:b8:
4b:12:ae:6c:53:fd:15:f5:6d:e4:f7:3f:4b:5f:07:
81:72:ff:9f:f9:60:77:fa:88:0b:79:be:80:a5:65:
0c:4e:87:80:52:9c:83:89:2f:c7:33:4e:52:39:61:
6c:12:5b:fa:c7:9f:1e:16:49:9a:c8:82:59:27:db:
97:3e:68:b4:ba:e0:6a:9b:16:93:65:95:35:ae:35:
65:c7:80:73:cb:9f:32:ca:37:59:22:cf:5f:1d:5d:
e6:2a:26:7c:9f:76:9a:7b:21:ec:13:ab:b1:0d:fc:
13:93:20:79:c7:88:c4:ee:a3:03:93:fc:50:93:26:
ea:1d:a3:1f:4d:2b:c6:8b:d8:7d:e2:0b:8d:8e:27:
97:dd:de:3e:79:6f:50:72:c6:4b:15:bd:2f:ec:44:
c6:75:c8:61:6f:21:50:d5:2d:f1:f3:ae:02:d9:a5:
4c:68:49:98:81:45:72:8c:96:c9:01:b7:aa:b3:75:
38:06:be:af:ae:98:e2:55:1e:6a:4f:c8:0a:3a:bf:
19:24:0e:13:bd:49:f8:42:a7:5c:9d:f4:8f:91:c0:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C8:66:1E:07:09:62:6D:6F:65:35:74:3B:98:7F:65:84:9B:99:6D
X509v3 Authority Key Identifier:
keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/6DE5D7943FA311EDABCBBA25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.50.194.0/24
Signature Algorithm: sha256WithRSAEncryption
01:4c:9a:d9:fe:8e:2c:19:14:79:c3:cb:c7:79:53:a5:71:7c:
38:82:a6:29:ce:51:5e:43:e3:b5:4d:8b:b7:33:5c:19:bc:64:
5a:0e:b8:9b:42:7e:c0:c0:9e:ac:5b:6d:93:e3:b9:6a:5e:cd:
ce:df:76:57:3a:3e:de:dc:3b:76:c0:8c:b5:11:d4:fd:d9:d7:
31:8e:e0:8c:a2:9f:45:35:b1:3a:60:19:ec:73:4d:ff:7d:5d:
f7:0d:3b:95:87:06:56:fd:2d:62:ab:7f:67:e0:3f:7b:fe:28:
4c:46:74:92:b7:30:b9:d0:ce:2d:96:7b:ed:32:c0:56:ad:d1:
46:62:0a:8a:f7:30:ea:f1:b1:94:4e:79:db:6d:b4:99:99:e8:
2b:f5:38:79:91:43:73:b0:da:74:e1:2b:93:df:fa:95:06:bf:
ae:51:88:2f:b9:a7:e4:63:ba:11:bf:1d:44:7d:ce:b2:58:b4:
d5:c3:b8:b7:90:d9:bd:1c:22:00:a9:92:0a:f3:31:91:26:c3:
72:27:55:72:2b:45:36:a1:e2:a8:a4:0b:ba:73:07:a1:be:15:
0d:d4:a7:4c:77:e4:13:ca:e2:24:cf:13:9f:8d:74:f6:aa:4a:
d3:b2:7a:bf:42:0d:e4:3a:3d:9c:89:bc:2e:87:c2:ee:14:b7:
22:1b:cd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:33:24 2026 by rpki-client