
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0F75123EB42411F19F202BBB3E11F970.roa
File: 0F75123EB42411F19F202BBB3E11F970.roa (raw, json)
Hash identifier: BQywTYTaIfzLIXv+2IvFpwB3ZqqwxbhX2baagaI5MmM=
Subject key identifier: EC:F1:AD:EC:8D:6B:E4:C3:53:A4:23:74:17:56:8D:EB:60:21:DE:81
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 120E
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0F75123EB42411F19F202BBB3E11F970.roa
Signing time: Wed 04 Nov 2026 14:48:14 +0000
ROA not before: Wed 04 Nov 2026 14:48:14 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 141711
IP address blocks: 14.192.136.0/24 maxlen: 24
14.192.138.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.140.0/24 maxlen: 24
14.192.141.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4622 (0x120e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Nov 4 14:48:14 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aeb45ae-d022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:16:5f:c7:4d:12:c3:66:be:5e:95:22:c1:
52:70:40:c4:b0:11:03:7a:5f:dd:61:67:ed:68:4b:
d6:91:ed:68:e0:47:8e:0c:3b:de:2d:bc:f3:83:33:
6b:e9:d8:10:d5:f6:2a:57:aa:64:46:c5:09:51:93:
42:c0:04:cb:5c:45:6e:c3:bb:e8:39:31:63:1f:6c:
eb:74:71:94:7f:ba:61:9e:3d:e7:b6:f6:a0:ba:76:
55:76:5f:6b:d9:0a:11:9f:d0:72:16:0f:a5:c4:93:
ae:b1:43:a1:01:2c:fc:76:ea:73:bc:9a:ba:93:41:
c8:a7:6e:dd:d3:42:3f:0e:82:f9:f8:a4:a0:0c:a3:
55:ff:a8:2e:94:ab:e9:ba:63:f0:d3:0d:e2:aa:79:
20:7f:88:3b:85:bf:60:4d:83:ca:ec:c2:80:af:04:
d6:d1:62:34:0d:98:e5:ce:d9:1e:c0:2b:fb:22:24:
16:48:fc:f5:05:47:fd:71:77:8d:5d:68:45:22:de:
b6:6c:33:fa:dc:4d:52:d6:80:78:b2:0a:0c:af:25:
a4:42:bf:91:af:ef:c3:8c:cd:1c:68:8a:ba:19:25:
35:ad:dc:4f:62:31:77:ce:62:ad:0a:03:2f:78:fe:
ad:4d:8e:2d:21:49:ee:a4:ae:d3:92:ca:9c:92:36:
5c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F1:AD:EC:8D:6B:E4:C3:53:A4:23:74:17:56:8D:EB:60:21:DE:81
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0F75123EB42411F19F202BBB3E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.136.0/24
14.192.138.0-14.192.141.255
14.192.152.0/24
14.192.154.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:4f:ed:30:44:3b:e1:91:5c:ff:29:a7:5d:21:00:6a:7f:fc:
16:83:c4:4d:b9:1d:53:4e:49:aa:4b:02:23:19:7c:65:56:05:
dc:ec:bf:60:53:b6:44:fe:23:78:35:ee:f1:5f:34:12:42:24:
76:31:b7:91:7b:10:85:fb:b4:f8:4d:53:20:aa:c2:ab:b4:fd:
4f:16:a8:1e:18:0a:e9:30:10:d3:22:0a:94:9c:92:eb:a1:82:
55:7d:b5:f4:17:73:e3:a9:db:cb:39:2c:2e:a3:d5:36:04:b8:
5f:4c:6c:c0:9b:3f:ca:18:51:54:f5:27:fc:81:6a:0b:67:76:
3e:44:8e:4e:1d:c1:a8:1b:3e:e4:06:a3:85:06:59:b1:bb:d0:
65:8b:72:fa:4d:30:a7:07:c7:87:f5:27:9d:f9:b6:ae:4f:37:
9c:0a:02:f5:21:c7:3d:8d:36:78:0f:8c:b2:b4:be:96:8c:d2:
a8:96:53:8b:43:95:28:0d:51:38:4f:37:6e:83:21:3b:cf:a0:
ba:9f:2c:00:44:03:0d:4f:5c:f0:ef:32:96:92:50:48:31:86:
5a:eb:e2:df:60:6c:30:ed:ca:15:6f:7e:33:4b:25:79:23:82:
6e:0e:58:42:39:76:7f:25:61:c8:40:4d:05:7a:93:c9:98:fa:
8b:1a:02:e6
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgICEg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjYxMTA0MTQ0ODE0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWViNDVhZS1kMDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv6MWX8dNEsNmvl6VIsFScEDEsBEDel/dYWftaEvWke1o4EeODDveLbzzgzNr
6dgQ1fYqV6pkRsUJUZNCwATLXEVuw7voOTFjH2zrdHGUf7phnj3ntvagunZVdl9r
2QoRn9ByFg+lxJOusUOhASz8dupzvJq6k0HIp27d00I/DoL5+KSgDKNV/6gulKvp
umPw0w3iqnkgf4g7hb9gTYPK7MKArwTW0WI0DZjlztkewCv7IiQWSPz1BUf9cXeN
XWhFIt62bDP63E1S1oB4sgoMryWkQr+Rr+/DjM0caIq6GSU1rdxPYjF3zmKtCgMv
eP6tTY4tIUnupK7TksqckjZc1QIDAQABo4ICejCCAnYwHQYDVR0OBBYEFOzxreyN
a+TDU6QjdBdWjetgId6BMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvMEY3NTEyM0VC
NDI0MTFGMTlGMjAyQkJCM0UxMUY5NzAucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm
BAIAATAgAwQADsCIMAwDBAEOwIoDBAEOwIwDBAAOwJgDBAEOwJowDQYJKoZIhvcN
AQELBQADggEBAC9P7TBEO+GRXP8pp10hAGp//BaDxE25HVNOSapLAiMZfGVWBdzs
v2BTtkT+I3g17vFfNBJCJHYxt5F7EIX7tPhNUyCqwqu0/U8WqB4YCukwENMiCpSc
kuuhglV9tfQXc+Op28s5LC6j1TYEuF9MbMCbP8oYUVT1J/yBagtndj5Ejk4dwagb
PuQGo4UGWbG70GWLcvpNMKcHx4f1J535tq5PN5wKAvUhxz2NNngPjLK0vpaM0qiW
U4tDlSgNUThPN26DITvPoLqfLABEAw1PXPDvMpaSUEgxhlrr4t9gbDDtyhVvfjNL
JXkjgm4OWEI5dn8lYchATQV6k8mY+osaAuY=
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:25:41 2026 by rpki-client