
$ rpki-client -vvf rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/021496F2A4EC11F0A8EB5F7EC4F9AE02.roa
File: 021496F2A4EC11F0A8EB5F7EC4F9AE02.roa (raw, json)
Hash identifier: wgK4ZuIIb0twemfmKGJQ9J4VlAgOAeotYnSBFamHuz8=
Subject key identifier: 63:66:E4:E5:84:B2:A3:56:E7:95:F2:18:02:B7:2B:D9:C9:67:FA:72
Certificate issuer: /CN=A914AE22/serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4
Certificate serial: 0C8D
Authority key identifier: 72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/021496F2A4EC11F0A8EB5F7EC4F9AE02.roa
Signing time: Sat 02 May 2026 19:22:41 +0000
ROA not before: Sat 02 May 2026 19:22:41 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 135386
IP address blocks: 45.248.68.0/22 maxlen: 24
103.9.192.0/22 maxlen: 24
103.73.96.0/22 maxlen: 24
103.216.216.0/22 maxlen: 24
2404:f880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl
rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3213 (0xc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AE22, serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4
Validity
Not Before: May 2 19:22:41 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f64f01-699e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:be:68:a3:7b:3d:73:ad:b3:b4:3e:e4:2c:17:
61:25:c7:bb:7c:59:95:63:55:ff:8e:bc:bb:c2:b6:
cb:50:f3:b2:24:f4:65:f7:07:d2:85:02:0f:15:e4:
99:31:82:82:4b:76:11:05:52:65:b0:51:1f:ed:db:
ee:c7:bf:b5:a0:26:ee:2f:23:29:de:72:94:44:61:
3f:b8:4a:41:97:1b:aa:d6:61:81:81:9b:b4:d7:8c:
e1:3d:50:95:35:08:c7:70:1b:05:70:c7:cd:82:bd:
91:ef:7f:e4:a7:78:9f:ef:1f:d9:43:d4:ac:ac:72:
92:07:22:0b:e3:2f:fd:cb:30:66:07:1c:65:40:b2:
c6:84:c8:98:be:fb:d7:39:ce:57:7c:78:eb:29:e2:
df:4e:50:ab:f4:e0:32:94:1a:22:3d:46:65:83:de:
11:9b:39:90:67:29:fb:35:f2:4c:ae:55:7f:df:ee:
ae:ac:55:ff:1e:1b:e1:b7:25:2e:48:fe:e4:2e:9a:
d5:0b:79:07:7c:7b:15:96:23:7c:ba:4c:c8:92:25:
c6:8b:52:a1:70:a3:ee:d0:e2:c3:29:71:f8:de:c7:
93:00:dd:3a:a4:99:b1:f3:0f:fe:11:c6:f2:0d:3d:
44:93:ae:48:3a:5e:b2:ac:10:94:a8:b0:51:97:21:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:66:E4:E5:84:B2:A3:56:E7:95:F2:18:02:B7:2B:D9:C9:67:FA:72
X509v3 Authority Key Identifier:
keyid:72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/021496F2A4EC11F0A8EB5F7EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.248.68.0/22
103.9.192.0/22
103.73.96.0/22
103.216.216.0/22
IPv6:
2404:f880::/32
Signature Algorithm: sha256WithRSAEncryption
5e:63:1f:2c:6e:c4:a5:61:b2:27:66:34:09:e9:2a:e7:44:bb:
fe:84:64:d9:f5:cd:4f:74:be:f2:c1:3b:c9:09:d0:7b:cf:01:
c6:24:28:63:48:b6:38:b8:50:17:b0:2c:e3:91:bf:e7:68:87:
6d:5a:dd:74:a9:4e:6e:93:92:4f:e8:5d:d8:dc:28:c3:1e:8e:
d5:32:16:32:ef:3e:1a:3b:62:e9:e0:4e:7a:31:e9:fe:ac:af:
e3:e6:ba:bd:e6:30:b3:9b:e1:31:46:cf:be:be:ab:70:7a:bb:
08:a7:29:a8:68:c7:8e:96:0b:db:dc:af:de:d5:a6:93:1a:77:
5e:c9:0c:1d:ec:a8:18:60:8d:0c:20:6b:05:fc:5a:c9:99:12:
78:ec:58:30:c4:41:9b:5f:78:f4:da:76:87:fc:51:e0:95:d6:
93:5c:82:88:54:9e:25:c8:22:44:20:13:a0:1c:7f:f1:ad:50:
7b:d1:ac:21:0a:ec:2a:03:c2:26:d8:93:1b:c4:2e:9d:6a:19:
e9:ee:50:5e:50:11:02:f9:60:6e:2b:c2:74:bc:21:cd:b8:9f:
21:32:72:b5:0a:4a:99:43:b9:0a:8a:73:35:17:c4:66:e3:49:
33:2a:cd:a6:fa:c2:0d:71:27:d4:32:22:56:0e:cf:c0:08:3b:
fa:bc:f2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:44:01 2026 by rpki-client