
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/86F9BD94674311EA8AB4D96BC4F9AE02.roa
File: 86F9BD94674311EA8AB4D96BC4F9AE02.roa (raw, json)
Hash identifier: fm0R5XYACyGWOjGxcFpd6WBXOBzM7wfEVwBzjqumUE0=
Subject key identifier: 83:70:CB:C1:77:40:85:45:03:3C:CE:06:3E:59:68:21:E9:01:F7:7D
Certificate issuer: /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
Certificate serial: 0B10
Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/86F9BD94674311EA8AB4D96BC4F9AE02.roa
Signing time: Tue 12 May 2026 20:23:38 +0000
ROA not before: Tue 12 May 2026 20:23:38 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 135336
IP address blocks: 103.114.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl
rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2832 (0xb10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BAE3, serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A
Validity
Not Before: May 12 20:23:38 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a038c4a-dbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:75:24:7b:e1:c6:9f:08:b7:fe:45:f4:46:
ff:c7:06:8e:d2:12:0b:23:2b:39:f1:b8:2a:df:dd:
7e:5c:2d:cd:0c:1f:64:c6:4d:1a:b6:57:80:b6:ea:
f0:8a:e2:39:2a:23:11:8a:96:ce:a0:4f:d9:d7:58:
82:42:2e:3a:f7:ae:c0:eb:47:39:3c:ad:17:9e:46:
d8:c1:ff:fa:40:c3:7d:1d:b0:f4:05:24:0f:b8:b6:
55:58:1c:0a:31:0b:8e:79:55:87:fa:c6:50:db:c4:
85:a4:04:af:e4:fe:5e:3c:7e:47:8d:ec:c2:05:5e:
83:0b:2d:f6:bc:f9:e9:f5:17:11:56:73:29:01:26:
84:1e:eb:63:d5:1c:84:4d:40:66:51:3c:54:9b:98:
3b:9c:c6:eb:ad:de:00:7a:88:4e:c9:18:2e:84:27:
b6:5f:7a:1b:49:3d:e4:a9:23:ee:49:fd:f8:f5:49:
ef:53:2c:a9:0d:5b:02:62:02:ba:62:72:ee:15:f0:
8e:ee:7e:b5:e3:d1:ba:0c:0e:a3:16:3d:b8:b8:e4:
fc:92:b2:c5:f3:5f:3b:a3:30:5a:1c:b3:5e:86:11:
29:24:40:1a:40:b9:91:73:f7:37:2e:d2:db:bc:17:
cb:0c:ee:8e:25:1d:87:c5:39:50:c8:b2:05:3f:6a:
45:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:70:CB:C1:77:40:85:45:03:3C:CE:06:3E:59:68:21:E9:01:F7:7D
X509v3 Authority Key Identifier:
keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/86F9BD94674311EA8AB4D96BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.114.145.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c3:b2:1d:43:c3:56:04:83:ad:73:97:5f:f8:34:59:36:65:
d5:89:34:a9:54:14:7b:a8:40:9a:19:31:b3:81:42:11:92:ed:
8c:14:ea:8b:e9:7f:ed:d8:9a:8a:a4:04:c3:8f:2f:8e:1f:13:
f1:b4:89:e4:fa:c9:90:93:fd:a2:98:cc:22:c6:a5:2f:2b:72:
bc:50:8c:e3:61:0f:d0:c8:db:6c:71:9b:e2:1c:bb:ce:28:a2:
ce:79:ad:f0:6e:ed:00:25:c9:43:ba:4a:6a:41:2b:d7:d4:09:
02:3f:89:f0:f3:89:40:ff:5e:f0:26:aa:a0:f4:7c:d5:ec:64:
12:e6:f4:d1:75:ee:4d:c6:64:49:49:ca:ef:70:15:18:bc:cd:
5c:e4:07:e8:8a:c9:56:ae:99:41:65:9f:9f:aa:83:a8:4d:55:
e8:b4:1d:22:99:a4:db:55:09:fa:3c:fc:92:f1:91:ef:62:87:
8e:1e:25:57:63:46:33:d6:ab:cc:7f:2a:d7:16:51:f9:54:a6:
3e:0e:d7:8d:eb:11:ad:a9:76:1c:38:4c:3f:f2:61:33:71:64:
64:5e:98:76:50:1d:b5:d3:e7:da:60:87:31:32:cb:74:d5:da:
f9:a7:09:e3:cb:39:e5:2a:cc:96:51:0d:90:af:25:2f:20:a3:
86:12:71:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:50:06 2026 by rpki-client