
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/200B2C4804AB11EB8AAF5923C4F9AE02.roa
File: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (raw, json)
Hash identifier: 09+nWZMjqXfgFdYjvibjiZOGUok2Ho8rCRGwwhhreRA=
Subject key identifier: 0D:1B:DF:D6:6B:51:1D:4F:58:B5:66:E5:63:34:A7:C3:99:4E:08:B1
Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial: 3379
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/200B2C4804AB11EB8AAF5923C4F9AE02.roa
Signing time: Sat 02 May 2026 16:17:58 +0000
ROA not before: Sat 02 May 2026 16:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4797
IP address blocks: 121.240.174.0/24 maxlen: 24
202.54.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13177 (0x3379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Validity
Not Before: May 2 16:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f623b6-27cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:c6:b1:ff:c7:49:52:de:65:57:6a:82:af:
a8:82:53:09:66:ba:1f:8e:58:47:a4:c0:2e:58:b8:
c6:1a:de:45:17:b9:8f:65:27:d4:93:d2:ef:c7:d3:
ea:73:6b:65:82:e2:49:7f:ac:ed:9c:3b:b7:6d:84:
00:67:dc:aa:87:2d:ee:93:68:1f:11:19:23:9f:f5:
e6:4b:7f:b3:94:b5:92:56:82:b5:8c:12:68:7a:4a:
f3:78:ae:78:1b:92:61:98:d4:0d:88:be:55:dc:7e:
b8:4c:fb:d6:ee:86:fb:12:90:7b:e8:f7:aa:b3:21:
7a:7f:98:40:3e:2c:5e:88:2e:86:cc:a8:08:7e:c9:
2d:cb:9f:8f:50:cd:a9:1d:ee:d8:a1:b1:44:5b:f2:
bb:10:04:aa:20:6d:b4:e1:b1:b0:69:1b:58:4f:05:
40:0b:89:44:11:7a:1b:b5:41:c4:27:51:dc:4b:cd:
f5:61:df:9d:8a:48:a0:1c:2e:0c:a8:d1:44:38:63:
dd:93:2c:22:9a:81:46:ac:57:6b:e8:fc:17:9c:37:
db:d6:33:d6:c5:f3:19:ab:fe:65:0f:12:30:b2:a8:
df:ed:25:58:6a:94:6c:a0:22:11:4e:ff:a5:35:c6:
41:fb:e5:fe:ea:bb:50:00:db:22:96:72:2a:c4:5e:
42:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1B:DF:D6:6B:51:1D:4F:58:B5:66:E5:63:34:A7:C3:99:4E:08:B1
X509v3 Authority Key Identifier:
keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/200B2C4804AB11EB8AAF5923C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
121.240.174.0/24
202.54.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f6:4e:4d:b2:cb:68:66:47:00:85:73:4a:a9:a9:ab:97:da:
fd:c2:0b:72:7e:2e:ff:8f:99:2c:59:21:6e:06:08:ba:0d:d6:
2c:9b:3e:88:c7:b8:55:81:b4:dd:55:1a:e9:d3:48:14:29:e1:
6b:09:ad:be:d4:81:67:d1:fb:56:6c:d6:2b:10:6b:91:29:8b:
56:6e:ee:0e:38:c9:56:f6:81:f5:c9:76:15:a5:9a:2f:7b:14:
b7:fd:d8:cc:dd:79:e7:e5:5c:c8:eb:7b:ea:81:45:77:19:37:
bb:99:6c:98:cc:25:93:6e:8a:19:5c:34:14:ba:88:02:14:81:
30:ec:6d:f6:73:02:db:24:68:24:82:25:66:89:ef:0c:04:d8:
4a:07:f2:3a:75:c9:8c:73:36:dc:78:6b:04:65:9f:bf:9e:3b:
7e:6c:5b:18:f0:42:39:c9:0a:7c:77:25:e2:6b:83:3c:59:a3:
6c:50:d9:b9:11:5c:1d:d5:7a:49:44:05:e9:c6:4f:4d:f8:14:
e6:97:c2:f6:a5:14:fd:71:f6:35:78:8b:2c:33:43:d7:9b:e0:
b0:aa:ac:49:e3:dc:03:46:db:08:c7:45:b2:f6:22:b2:3b:31:
d8:7d:0e:32:19:a1:07:b3:76:f9:ec:2e:bb:d7:f2:ef:b2:51:
ed:78:90:76
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICM3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3
OUJFQTZBODUwHhcNMjYwNTAyMTYxNzU4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY2MjNiNi0yN2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArKLGsf/HSVLeZVdqgq+oglMJZrofjlhHpMAuWLjGGt5FF7mPZSfUk9Lvx9Pq
c2tlguJJf6ztnDu3bYQAZ9yqhy3uk2gfERkjn/XmS3+zlLWSVoK1jBJoekrzeK54
G5JhmNQNiL5V3H64TPvW7ob7EpB76PeqsyF6f5hAPixeiC6GzKgIfskty5+PUM2p
He7YobFEW/K7EASqIG204bGwaRtYTwVAC4lEEXobtUHEJ1HcS831Yd+dikigHC4M
qNFEOGPdkywimoFGrFdr6PwXnDfb1jPWxfMZq/5lDxIwsqjf7SVYapRsoCIRTv+l
NcZB++X+6rtQANsilnIqxF5CxwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFA0b39Zr
UR1PWLVm5WM0p8OZTgixMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG
NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh
b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvMjAwQjJDNDgw
NEFCMTFFQjhBQUY1OTIzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAefCuAwQAyjbSMA0GCSqGSIb3DQEBCwUAA4IBAQBc9k5NsstoZkcA
hXNKqamrl9r9wgtyfi7/j5ksWSFuBgi6DdYsmz6Ix7hVgbTdVRrp00gUKeFrCa2+
1IFn0ftWbNYrEGuRKYtWbu4OOMlW9oH1yXYVpZovexS3/djM3Xnn5VzI63vqgUV3
GTe7mWyYzCWTbooZXDQUuogCFIEw7G32cwLbJGgkgiVmie8MBNhKB/I6dcmMczbc
eGsEZZ+/njt+bFsY8EI5yQp8dyXia4M8WaNsUNm5EVwd1XpJRAXpxk9N+BTml8L2
pRT9cfY1eIssM0PXm+CwqqxJ49wDRtsIx0Wy9iKyOzHYfQ4yGaEHs3b57C671/Lv
slHteJB2
-----END CERTIFICATE-----
Generated at Wed May 13 07:06:29 2026 by rpki-client