
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/4CBDBA5E3F0011F18130B663C8833773.roa
File: 4CBDBA5E3F0011F18130B663C8833773.roa (raw, json)
Hash identifier: Fj+bRfSzcCaCjFqPxjs4ZGVm3cIIfQYKMPXbwmtBTf8=
Subject key identifier: CE:FC:DA:33:06:C1:65:66:E0:40:8C:55:A5:D9:4C:B8:8F:2A:60:B7
Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Certificate serial: 1DF8
Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/4CBDBA5E3F0011F18130B663C8833773.roa
Signing time: Mon 14 Sep 2026 16:28:41 +0000
ROA not before: Mon 14 Sep 2026 16:28:41 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 138640
IP address blocks: 103.239.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7672 (0x1df8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Validity
Not Before: Sep 14 16:28:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa820b9-ed4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:77:65:a7:42:61:35:b8:2c:36:80:c0:82:
71:e9:2b:3e:42:87:27:3c:05:06:f2:de:2b:0c:20:
f5:16:12:81:2f:a7:d8:44:d9:87:c9:ac:c3:12:85:
57:19:0f:6c:8a:97:40:87:a9:a8:9e:6e:e9:36:96:
87:bb:da:39:ed:b3:44:e7:bf:72:2f:66:c0:c7:84:
08:df:33:11:25:3c:ae:24:e0:e5:c1:42:b4:db:ab:
df:5a:a0:aa:6b:8c:67:1d:cc:96:d5:83:1d:16:53:
b2:69:8f:87:91:c7:ff:71:f4:35:dd:c7:65:a8:19:
92:12:84:54:9e:86:a4:d8:c2:c3:06:6f:3c:ae:76:
af:cb:5d:b4:48:9f:db:72:3f:2d:ee:38:a2:30:23:
f6:f8:b8:50:a2:a0:80:33:c9:93:22:da:18:5a:59:
d3:4a:16:37:54:c4:e4:ec:a5:4d:46:16:66:54:80:
b9:03:6c:15:a5:fb:b6:27:45:72:a2:b0:01:01:ea:
fb:e4:fc:62:dd:ce:4c:e2:24:1c:9c:81:7a:49:4a:
43:2c:c6:bd:9b:d5:c2:21:42:bf:91:d2:4f:6d:35:
2f:7a:3b:3b:c5:54:43:90:de:49:d7:78:c8:29:db:
84:c6:2f:ab:31:74:00:f3:10:4b:25:94:a2:bb:ef:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FC:DA:33:06:C1:65:66:E0:40:8C:55:A5:D9:4C:B8:8F:2A:60:B7
X509v3 Authority Key Identifier:
keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/4CBDBA5E3F0011F18130B663C8833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.239.254.0/24
Signature Algorithm: sha256WithRSAEncryption
84:44:cb:20:12:b1:33:4f:c0:33:05:0b:72:24:1b:c1:5c:cd:
5b:75:8e:0e:34:32:7c:ce:07:90:61:51:25:0a:ee:da:52:1a:
77:a1:4c:3d:be:49:5f:cf:77:79:f6:74:73:09:86:e5:83:97:
6a:8c:a9:20:2a:b4:4e:75:c9:54:f0:00:fb:92:65:44:1c:ad:
9d:25:9d:c2:de:3a:f9:f3:d7:c0:25:0c:a1:52:2b:7e:3f:25:
55:f5:87:54:a2:3e:05:43:52:45:77:65:c3:65:6f:db:bd:a4:
33:59:69:46:42:50:85:cd:f4:01:38:cb:cd:a1:ef:c6:97:98:
df:ec:95:db:9b:8c:d0:9e:6e:bd:4a:5a:d9:85:47:6c:5c:cb:
d4:ea:84:97:55:98:2b:fd:93:9d:48:7d:9a:af:9a:2f:80:d9:
c7:6e:be:19:33:a6:8d:35:9e:52:1d:05:3f:4d:3a:14:bf:ef:
d3:dc:16:d6:9e:02:ae:2a:48:fe:9b:6b:f7:3b:77:97:fc:2f:
6b:ba:ff:f4:43:f7:dc:18:e4:09:49:eb:3f:96:ba:56:16:d1:
c3:74:9e:92:07:02:5d:9b:14:cc:f8:29:0d:0c:1f:3a:3f:38:
04:43:fe:94:6d:b9:e5:89:6f:96:73:f9:84:84:79:64:80:a7:
0f:b6:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:55:52 2026 by rpki-client