
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/5525C30C7C5011F1B4BAB03D68A30FBC.roa
File: 5525C30C7C5011F1B4BAB03D68A30FBC.roa (raw, json)
Hash identifier: z8FOKVvYXByRhy5QCFuuv5pOXxsDGdJf5ZmT4swtT0Y=
Subject key identifier: E8:D7:97:10:9F:7C:DD:9A:FC:5A:F7:F8:3F:ED:E7:0B:83:57:30:98
Certificate issuer: /CN=A914D29B/serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
Certificate serial: 2A
Authority key identifier: 4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/5525C30C7C5011F1B4BAB03D68A30FBC.roa
Signing time: Mon 20 Jul 2026 09:01:18 +0000
ROA not before: Mon 20 Jul 2026 09:01:18 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 9498
IP address blocks: 119.10.128.0/23 maxlen: 24
223.29.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl
rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D29B, serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
Validity
Not Before: Jul 20 09:01:18 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a5de3dd-ed5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f2:b2:e1:a4:85:68:29:3d:a0:22:c9:79:a0:
9f:c0:43:7d:8d:7f:42:b5:a7:61:6d:78:9f:30:51:
e3:f3:20:59:07:43:e6:47:fe:ba:79:22:f9:91:7b:
40:89:8f:2d:b9:3c:44:e7:ed:bd:86:71:f8:d8:20:
7d:f1:9a:2e:3b:25:38:94:9b:6b:3e:22:ed:66:5b:
c6:4d:44:cd:7f:de:b8:0e:41:bf:49:9b:2c:0d:58:
29:4a:b6:fc:84:8e:f4:03:7e:23:ec:63:15:72:ad:
4c:98:d7:17:d3:bc:0d:e8:51:36:e5:b4:79:3c:52:
3c:5b:ea:b7:39:cc:d7:80:90:cc:35:b2:0c:58:9a:
53:94:d4:64:a9:31:0c:c0:66:65:e0:9b:f4:e4:31:
2d:52:bd:66:36:2b:5f:64:1b:64:13:1c:e9:a5:47:
50:3d:2b:d4:a7:dd:ec:fa:e9:29:77:23:d7:af:10:
6a:1e:d9:aa:48:46:bc:07:97:5a:d5:52:cc:0f:c6:
8f:92:75:93:4e:ba:b3:05:be:28:e7:d8:70:c7:4e:
a0:cf:b4:22:ee:4d:9e:4a:10:2d:03:34:2f:f5:0d:
19:6b:00:c4:be:27:b7:4c:09:ab:6f:af:a4:00:f4:
60:aa:59:84:be:8d:25:ad:c0:c7:6c:00:73:7f:aa:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D7:97:10:9F:7C:DD:9A:FC:5A:F7:F8:3F:ED:E7:0B:83:57:30:98
X509v3 Authority Key Identifier:
keyid:4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/5525C30C7C5011F1B4BAB03D68A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
119.10.128.0/23
223.29.220.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c9:e2:26:a6:38:1e:8c:f3:e1:9f:d4:5f:6b:62:1c:c4:07:
83:a0:09:0c:29:ee:f8:67:1f:36:b6:c8:91:da:6e:89:b9:ea:
6f:76:47:65:5f:fd:97:e2:78:ff:2e:16:54:5a:b7:76:e1:dd:
25:8b:77:17:2b:c4:f4:f5:ad:22:70:0c:18:e4:72:7f:6f:ad:
31:0e:08:77:a1:08:4f:c3:17:e2:ac:4d:d3:7f:84:d1:18:12:
9b:fa:bd:a7:ce:9e:1c:b8:41:f5:1f:04:b9:b1:b9:60:c0:fe:
5d:92:8b:be:a3:c7:52:e2:a5:79:ab:c9:11:23:34:32:cb:72:
18:82:4b:1e:e8:51:f2:3a:38:1e:de:93:9d:6b:a8:a6:85:81:
5a:7e:5e:ca:ae:0d:48:97:12:32:81:47:c7:a6:be:ea:28:f6:
76:26:30:7a:f3:d4:38:68:c3:89:b0:ba:f7:2d:3c:0b:96:4c:
3d:0f:ad:0f:1a:9c:4b:61:33:18:4d:0a:c5:05:55:d9:6e:4f:
76:38:33:0a:26:ec:35:55:ba:ac:f1:ba:fb:59:83:92:1f:e1:
84:8b:7b:f8:81:f9:f2:16:fc:1e:fb:e4:cc:b9:d4:2b:9f:a2:
53:36:47:98:db:8a:a8:1b:a0:fe:c7:52:ff:cf:f6:0b:90:5d:
3a:e4:14:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:40 2026 by rpki-client