
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
File: 52040BECDCBF11F0B2EC67DA4A6F56BC.roa (raw, json)
Hash identifier: vUIB033joD05W1vwYQIm56abiliryWD1H/1nkRq8eJQ=
Subject key identifier: 7A:17:EA:1B:B4:34:2F:C4:31:A6:20:18:18:AE:0C:27:13:F3:04:3E
Certificate issuer: /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial: 0130
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
Signing time: Wed 29 Apr 2026 09:59:31 +0000
ROA not before: Wed 29 Apr 2026 09:59:31 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9304
IP address blocks: 202.181.171.0/24 maxlen: 24
202.181.180.0/24 maxlen: 24
202.181.181.0/24 maxlen: 24
202.181.183.0/24 maxlen: 24
202.181.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Validity
Not Before: Apr 29 09:59:31 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69f1d683-b9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:05:b5:9a:95:84:7c:64:a2:e0:a8:38:c1:
5f:91:92:59:e1:da:17:30:c3:d0:f1:ea:80:b7:53:
b1:0f:67:47:c5:7c:e9:af:c9:67:75:64:e8:08:60:
34:6c:e5:2d:4e:10:bf:7c:eb:f5:21:ab:8e:14:37:
e5:9a:79:20:d7:44:0b:c5:e5:6d:be:0d:3d:95:db:
29:5d:52:97:30:d3:b9:33:a8:4d:2e:73:47:78:70:
de:18:78:c0:47:4c:74:6d:44:e4:5a:7a:68:a9:14:
b4:c0:2b:eb:3c:bb:48:d2:d4:1c:bf:7f:86:1c:2c:
0c:0b:46:ca:08:dd:b5:85:81:e3:82:07:25:85:69:
52:5f:4c:be:df:36:d7:84:4d:42:04:c7:4f:4f:19:
68:48:68:24:c4:b4:81:45:c7:75:07:ef:2b:e1:97:
32:95:0f:48:49:f1:17:3e:2d:6e:6d:c1:3a:d2:a7:
eb:d6:6b:79:a5:cb:a1:17:5a:d6:21:71:62:40:6a:
3a:c0:fc:1b:da:9f:49:86:25:e4:14:4d:06:c1:83:
1a:20:69:4f:73:f2:a2:32:99:d4:cd:62:92:f0:70:
99:30:15:68:0c:25:36:bd:f8:54:5b:ce:8f:40:80:
1a:d7:0b:2c:38:3d:30:28:2c:76:ce:26:bc:9c:b1:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:17:EA:1B:B4:34:2F:C4:31:A6:20:18:18:AE:0C:27:13:F3:04:3E
X509v3 Authority Key Identifier:
keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
202.181.171.0/24
202.181.180.0/23
202.181.183.0/24
202.181.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:47:8d:7a:ce:f2:12:91:44:33:6e:95:5e:87:89:27:33:7c:
e7:4c:6f:22:61:65:90:0d:7c:75:71:a2:ac:14:e9:ae:01:08:
46:c8:3a:25:47:af:de:f7:56:e5:e7:7d:eb:d0:db:b8:ff:29:
4d:6e:1d:5c:3c:0d:3b:cf:a0:c1:e8:2f:9b:ca:ba:2d:1c:19:
9d:bc:cb:fc:b3:fc:3e:db:2b:c1:2c:a1:83:c0:db:20:e1:41:
3f:d0:f1:72:af:98:4e:3c:b4:ee:82:77:2f:e4:9e:ed:db:ca:
8f:63:37:da:65:df:6d:e8:f5:03:eb:00:e2:a1:87:63:9e:f7:
91:a9:2b:4c:8a:5d:b6:29:1d:83:67:4c:ec:4d:98:15:05:5f:
6b:b6:e5:86:4d:ce:f0:37:50:81:01:77:f8:bf:85:4b:28:05:
42:ac:eb:b6:67:81:9c:01:89:7d:a2:15:d1:b1:04:63:d7:b0:
ef:26:ad:c4:cb:d1:a3:57:0a:a0:8d:b0:29:e7:4d:10:39:62:
b8:e4:3a:78:0e:a6:4a:f5:75:4a:7d:0b:3c:0b:16:8f:ac:af:
3d:18:6c:91:b2:87:70:b3:08:c6:35:9a:4f:47:8e:28:00:49:
ea:3f:36:b2:e9:6d:d2:4f:ce:d2:df:70:79:92:92:0f:9c:78:
ab:3a:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:36 2026 by rpki-client