
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/2D89A3B4139A11F182E65A043E3D8C67.roa
File: 2D89A3B4139A11F182E65A043E3D8C67.roa (raw, json)
Hash identifier: BbN77RAFkHR083nGQLeFhiO7qnoHJJbIlHS/xJ/7E5c=
Subject key identifier: E5:6A:FB:96:63:75:A2:AF:10:62:2D:05:F0:9A:61:A3:3E:5D:F1:7A
Certificate issuer: /CN=A914C725/serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Certificate serial: 2B
Authority key identifier: 34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/2D89A3B4139A11F182E65A043E3D8C67.roa
Signing time: Wed 29 Apr 2026 05:58:54 +0000
ROA not before: Wed 29 Apr 2026 05:58:54 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 56286
IP address blocks: 167.179.26.0/24 maxlen: 24
205.209.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=34818BCF0D84E1599BD99817995E5EC39B1B014B
Validity
Not Before: Apr 29 05:58:54 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69f19e1e-a211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:ea:a7:1a:71:e6:77:76:e0:2e:73:1c:1f:
cc:bc:15:5b:7f:b4:c1:6d:d1:8c:eb:cd:99:3b:f1:
f4:d9:0b:6e:8c:4d:f7:82:03:f8:69:2f:e1:d8:c2:
77:91:21:e5:05:0b:a2:44:83:1d:58:85:60:47:a5:
d2:3d:a9:59:34:ae:3a:96:be:b2:fa:3a:57:a3:f9:
d1:b9:8e:c4:d0:7b:f5:87:95:c4:ca:f7:fc:7d:e6:
61:91:2c:d7:cd:45:26:00:22:51:a8:d2:a8:86:5c:
ee:08:66:ca:a7:18:df:63:6e:2d:74:46:59:0c:6d:
2d:96:dd:7f:e1:12:b6:9d:34:d3:a8:e7:a3:9c:2f:
3a:d0:66:1c:b8:42:fe:ac:01:3e:47:b4:7d:27:85:
ba:6f:28:8a:66:19:ae:b6:f2:9e:7b:92:71:b7:a8:
d6:79:60:98:97:cf:d4:f7:9e:80:b6:19:e3:cf:c9:
65:64:a1:ac:74:9c:bc:d9:28:82:15:b4:ad:9e:fe:
9f:98:ca:12:e8:43:2b:79:57:fe:e0:4c:ac:79:9d:
45:ed:59:5a:4d:74:db:da:db:e9:d2:e5:0c:5f:9f:
41:af:15:28:ac:c8:f3:15:e7:1c:8e:f0:d6:9d:01:
95:79:68:cd:ef:7b:d9:9a:0e:a4:70:4b:37:a1:82:
d8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6A:FB:96:63:75:A2:AF:10:62:2D:05:F0:9A:61:A3:3E:5D:F1:7A
X509v3 Authority Key Identifier:
keyid:34:81:8B:CF:0D:84:E1:59:9B:D9:98:17:99:5E:5E:C3:9B:1B:01:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIGLzw2E4Vmb2ZgXmV5ew5sbAUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/AC6CD15C139911F19C2470B1B3EE528E/2D89A3B4139A11F182E65A043E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
167.179.26.0/24
205.209.31.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e8:47:cd:46:ca:0f:f0:b3:53:29:39:31:e6:db:f5:87:1f:
9a:b5:f3:0c:fb:e8:52:64:fd:d8:46:50:a8:13:86:20:ae:00:
59:62:40:a3:4f:45:f1:00:4d:e1:67:ba:95:3c:c4:9f:d6:50:
e6:74:26:ef:bf:30:3a:12:58:f0:22:a9:ee:91:d4:b0:e7:63:
2d:c9:88:0d:1e:d5:ac:38:e3:e4:b4:87:76:81:d3:db:22:61:
f0:4b:54:25:e0:0d:c0:d2:23:e2:2d:d5:77:ee:d1:5f:38:f4:
8e:95:67:88:19:2a:ee:70:3b:c1:d9:4e:db:f8:55:69:96:3a:
d9:39:fb:f5:b9:0d:e5:1a:8a:33:01:75:e2:48:bf:91:55:09:
f9:b3:2c:2a:bc:b9:2b:64:69:c1:22:7d:ca:a9:e6:33:cb:6f:
2d:7f:e8:c4:a3:c7:8a:c9:64:3a:77:15:b9:32:4e:e3:03:cd:
10:ee:29:2f:cc:71:4c:45:b7:40:5d:84:56:54:1a:85:4b:05:
33:54:c5:72:9f:e2:bf:43:32:d0:90:4c:aa:c4:53:3a:76:72:
5f:67:25:5f:07:da:e6:08:94:e4:f6:bb:73:25:cf:f6:d4:f2:
ee:0d:d0:8b:53:af:91:10:ae:b7:71:d4:e5:e2:64:da:b3:7b:
13:72:ea:23
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QzcyNTExMC8GA1UEBRMoMzQ4MThCQ0YwRDg0RTE1OTlCRDk5ODE3OTk1RTVFQzM5
QjFCMDE0QjAeFw0yNjA0MjkwNTU4NTRaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZjE5ZTFlLWEyMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZD+qnGnHmd3bgLnMcH8y8FVt/tMFt0YzrzZk78fTZC26MTfeCA/hpL+HYwneR
IeUFC6JEgx1YhWBHpdI9qVk0rjqWvrL6Olej+dG5jsTQe/WHlcTK9/x95mGRLNfN
RSYAIlGo0qiGXO4IZsqnGN9jbi10RlkMbS2W3X/hEradNNOo56OcLzrQZhy4Qv6s
AT5HtH0nhbpvKIpmGa628p57knG3qNZ5YJiXz9T3noC2GePPyWVkoax0nLzZKIIV
tK2e/p+YyhLoQyt5V/7gTKx5nUXtWVpNdNva2+nS5Qxfn0GvFSisyPMV5xyO8Nad
AZV5aM3ve9maDqRwSzehgtixAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQU5Wr7lmN1
oq8QYi0F8Jphoz5d8XowHwYDVR0jBBgwFoAUNIGLzw2E4Vmb2ZgXmV5ew5sbAUsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDNzI1L0FDNkNEMTVDMTM5
OTExRjE5QzI0NzBCMUIzRUU1MjhFL05JR0x6dzJFNFZtYjJaZ1htVjVldzVzYkFV
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTklHTHp3MkU0Vm1iMlpnWG1WNWV3NXNiQVVzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzcyNS9BQzZDRDE1QzEzOTkxMUYxOUMyNDcwQjFCM0VFNTI4RS8yRDg5QTNCNDEz
OUExMUYxODJFNjVBMDQzRTNEOEM2Ny5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBACnsxoDBADN0R8wDQYJKoZIhvcNAQELBQADggEBAEDoR81Gyg/ws1Mp
OTHm2/WHH5q18wz76FJk/dhGUKgThiCuAFliQKNPRfEATeFnupU8xJ/WUOZ0Ju+/
MDoSWPAiqe6R1LDnYy3JiA0e1aw44+S0h3aB09siYfBLVCXgDcDSI+It1Xfu0V84
9I6VZ4gZKu5wO8HZTtv4VWmWOtk5+/W5DeUaijMBdeJIv5FVCfmzLCq8uStkacEi
fcqp5jPLby1/6MSjx4rJZDp3FbkyTuMDzRDuKS/McUxFt0BdhFZUGoVLBTNUxXKf
4r9DMtCQTKrEUzp2cl9nJV8H2uYIlOT2u3Mlz/bU8u4N0ItTr5EQrrdx1OXiZNqz
exNy6iM=
-----END CERTIFICATE-----
Generated at Wed May 13 08:54:53 2026 by rpki-client