
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/D1AEBE18070A11EB90C85C2BC4F9AE02.roa
File: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (raw, json)
Hash identifier: rpTh1tyT+irT3guuH3k6qdmgXIOh+Z8Qw6zKxFGPTng=
Subject key identifier: 6A:83:D1:BB:22:A4:C3:F1:83:93:1C:FE:9B:A3:A6:77:33:64:0E:08
Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial: 3372
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/D1AEBE18070A11EB90C85C2BC4F9AE02.roa
Signing time: Sat 02 May 2026 16:17:43 +0000
ROA not before: Sat 02 May 2026 16:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26685
IP address blocks: 59.160.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13170 (0x3372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Validity
Not Before: May 2 16:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f623a7-ee3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:66:02:6f:6a:1d:60:a4:68:66:79:7a:c6:
fb:50:55:a4:5c:a9:96:4e:0c:6c:86:07:04:29:48:
ab:db:f8:a3:02:7c:10:cc:2e:14:f8:4f:8e:01:cb:
a6:71:48:8a:60:64:23:bc:f0:01:54:9f:34:bf:43:
a2:3a:dc:17:97:15:17:17:cd:e7:70:c2:f9:a2:ed:
be:72:35:3e:a0:68:95:f0:36:e5:1b:3c:c5:26:42:
9b:ab:6a:11:89:fd:d1:a6:e2:45:8a:0c:1e:77:f3:
1a:9a:e8:ea:e8:35:7c:d7:a3:6f:8f:2f:79:e4:b5:
26:20:3a:54:94:c5:d3:66:e5:1f:88:69:82:16:80:
95:a0:08:63:d2:bc:ac:f9:ed:ed:ef:c6:8e:62:1d:
92:45:51:9c:c7:27:e1:72:a2:c1:b0:ed:f6:07:89:
93:75:e5:3c:ea:b3:d6:63:3f:a6:f3:c3:f5:78:b8:
67:ec:75:9a:91:d6:89:da:96:cd:d6:6c:75:e9:d7:
68:7f:71:51:1d:dc:7e:00:81:b1:8e:ba:94:6c:7a:
92:bb:2d:6e:26:6c:cf:11:29:6f:dc:31:1a:91:e4:
25:93:0a:10:3b:72:c6:cc:d1:d2:60:7d:e3:d3:f8:
cf:c6:f1:cb:80:15:6e:9e:6b:17:2b:54:18:61:bd:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:83:D1:BB:22:A4:C3:F1:83:93:1C:FE:9B:A3:A6:77:33:64:0E:08
X509v3 Authority Key Identifier:
keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/D1AEBE18070A11EB90C85C2BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
59.160.59.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a4:db:69:48:8e:02:72:f7:d8:39:46:a1:b3:1e:36:a2:3b:
f5:6f:d1:bd:82:95:d8:3e:92:cf:61:76:31:04:64:43:8c:d0:
d7:bc:03:66:96:c8:d4:4b:37:83:0b:d9:fd:6b:5c:74:c0:b0:
a5:df:ac:b5:65:d8:35:84:8d:1b:a1:5d:df:75:5e:1f:5c:46:
df:db:a9:c5:8e:dc:dc:ba:99:cf:f4:0f:84:dc:2e:4c:20:42:
50:3c:06:e3:7b:3d:48:fc:79:2f:b1:85:7e:b3:9b:57:0f:6b:
07:bd:e4:cb:e0:12:c0:10:0e:5a:de:f2:0c:de:19:8d:b4:62:
6a:95:36:ad:3f:1a:20:59:6d:6f:05:76:be:29:40:04:75:34:
5c:02:4a:5f:62:21:85:89:1f:71:5b:a8:7c:c3:7e:94:e5:14:
48:c4:7e:89:d5:aa:10:a7:97:23:07:af:a6:d9:f7:06:fe:91:
eb:8c:05:a1:ba:b2:5d:ba:71:a6:32:6f:d9:47:dd:cc:a7:f4:
36:85:5c:f0:5d:52:1c:d7:2f:04:ce:96:d2:20:4f:f1:cb:b3:
9f:b0:a7:2a:e6:8f:5a:a0:cc:f4:c1:aa:24:7f:29:f5:b6:44:
4b:1c:6b:fc:4e:77:1a:74:e9:68:77:34:7b:7d:db:f6:ab:f0:
63:d3:f5:76
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICM3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3
OUJFQTZBODUwHhcNMjYwNTAyMTYxNzQzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY2MjNhNy1lZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0AJmAm9qHWCkaGZ5esb7UFWkXKmWTgxshgcEKUir2/ijAnwQzC4U+E+OAcum
cUiKYGQjvPABVJ80v0OiOtwXlxUXF83ncML5ou2+cjU+oGiV8DblGzzFJkKbq2oR
if3RpuJFigwed/Mamujq6DV816Nvjy955LUmIDpUlMXTZuUfiGmCFoCVoAhj0rys
+e3t78aOYh2SRVGcxyfhcqLBsO32B4mTdeU86rPWYz+m88P1eLhn7HWakdaJ2pbN
1mx16ddof3FRHdx+AIGxjrqUbHqSuy1uJmzPESlv3DEakeQlkwoQO3LGzNHSYH3j
0/jPxvHLgBVunmsXK1QYYb2emwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGqD0bsi
pMPxg5Mc/pujpnczZA4IMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG
NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh
b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvRDFBRUJFMTgw
NzBBMTFFQjkwQzg1QzJCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAO6A7MA0GCSqGSIb3DQEBCwUAA4IBAQBNpNtpSI4CcvfYOUahsx42
ojv1b9G9gpXYPpLPYXYxBGRDjNDXvANmlsjUSzeDC9n9a1x0wLCl36y1Zdg1hI0b
oV3fdV4fXEbf26nFjtzcupnP9A+E3C5MIEJQPAbjez1I/HkvsYV+s5tXD2sHveTL
4BLAEA5a3vIM3hmNtGJqlTatPxogWW1vBXa+KUAEdTRcAkpfYiGFiR9xW6h8w36U
5RRIxH6J1aoQp5cjB6+m2fcG/pHrjAWhurJdunGmMm/ZR93Mp/Q2hVzwXVIc1y8E
zpbSIE/xy7OfsKcq5o9aoMz0waokfyn1tkRLHGv8TncadOlodzR7fdv2q/Bj0/V2
-----END CERTIFICATE-----
Generated at Wed May 13 11:12:48 2026 by rpki-client