
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C12F510A05011ED8B25FE52C4F9AE02.roa
File: 1C12F510A05011ED8B25FE52C4F9AE02.roa (raw, json)
Hash identifier: XMI1KTvCzEWPmf/nXyxB8PVlipyP3VcP4SKrfeGweQY=
Subject key identifier: 9F:79:63:D2:BB:B9:FF:B5:F0:C1:66:57:8F:26:B7:17:4F:B1:9D:F2
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2BCA
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C12F510A05011ED8B25FE52C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:23:13 +0000
ROA not before: Fri 02 Jan 2026 16:13:21 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 147187
IP address blocks: 49.231.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11210 (0x2bca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Jan 2 16:13:21 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a49221-eaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:96:57:c3:0c:d2:8a:06:52:5c:cd:ac:90:15:
bf:53:aa:0e:dd:94:45:07:77:ac:09:10:6b:0e:b6:
4c:33:5e:3b:35:c8:5f:d1:34:f6:a7:3b:7b:f2:53:
fe:21:12:5d:bb:ce:49:a5:eb:16:df:37:f9:1e:fe:
9d:84:54:78:82:c5:f9:a2:19:36:2e:89:9c:75:82:
34:4e:53:99:45:70:e6:ca:be:c0:6c:f7:2f:fe:4b:
9b:92:3a:2f:bc:87:54:69:b8:c3:71:26:75:25:85:
1b:a4:14:f4:8e:66:73:70:5f:8b:4b:a6:de:67:7a:
8b:eb:ef:48:e2:05:62:b0:b7:2d:ee:1a:df:ae:d6:
53:e5:64:57:d7:5f:cb:89:9b:8a:89:50:50:b5:01:
ba:d8:6a:eb:69:cb:4b:05:80:d9:12:63:c6:88:8c:
26:3c:cc:cd:25:e6:81:e8:8b:42:61:d8:bf:1c:86:
95:33:fb:80:17:6b:ee:6a:56:ec:da:d2:5b:b4:30:
39:c4:3c:7a:48:cb:ec:1f:1f:e2:18:61:0f:58:39:
48:1f:c7:d9:7f:55:ed:ea:7d:a9:68:4d:2a:74:c9:
4b:da:1e:06:82:8d:f9:e5:37:1f:21:5e:0b:9c:85:
50:a4:0e:bb:e2:f1:66:43:92:00:ce:5b:83:b9:ab:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:79:63:D2:BB:B9:FF:B5:F0:C1:66:57:8F:26:B7:17:4F:B1:9D:F2
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C12F510A05011ED8B25FE52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.231.72.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:fd:77:83:6d:63:38:a6:27:a8:09:1f:82:17:49:22:d9:8a:
12:37:31:30:66:21:50:12:6e:3e:f5:f4:cd:6c:76:8e:73:07:
80:f9:64:a1:f3:b4:d3:de:4b:be:8d:27:28:93:c9:1c:a2:03:
c6:f9:05:e9:3d:c0:4a:bb:95:c1:3d:b0:38:65:b2:44:a1:11:
37:d4:2d:d3:80:7c:18:78:12:8d:e6:c3:c9:51:fe:aa:d9:21:
c2:82:43:40:8c:df:50:40:5a:7b:46:d7:14:61:5e:e5:93:e5:
88:2d:c9:cf:c9:dd:07:90:85:b8:10:bb:6a:95:e1:c2:fc:f2:
1e:92:02:2f:cf:73:f0:59:2b:d7:4e:7e:a2:05:4d:65:98:33:
1f:31:c2:4f:e1:5a:ae:54:fc:15:f9:19:f4:4b:e8:7a:e2:f8:
79:d4:6e:15:34:f9:7c:54:c6:eb:50:5e:fc:f1:43:21:a1:cd:
db:43:0a:9a:7a:cf:c5:32:b6:f6:91:2c:2e:3a:b7:bf:5d:81:
6b:a7:ce:d7:14:f3:21:73:06:d2:d4:1b:61:15:85:1f:c2:60:
19:32:11:b5:83:8f:7b:f0:7d:d7:72:f6:5d:2b:28:2d:e9:99:
d2:eb:32:4f:40:d3:b1:fb:4b:85:d6:14:15:46:a9:85:0a:2c:
4e:69:0c:48
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICK8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzIxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTIyMS1lYWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5JZXwwzSigZSXM2skBW/U6oO3ZRFB3esCRBrDrZMM147Nchf0TT2pzt78lP+
IRJdu85JpesW3zf5Hv6dhFR4gsX5ohk2LomcdYI0TlOZRXDmyr7AbPcv/kubkjov
vIdUabjDcSZ1JYUbpBT0jmZzcF+LS6beZ3qL6+9I4gVisLct7hrfrtZT5WRX11/L
iZuKiVBQtQG62GrractLBYDZEmPGiIwmPMzNJeaB6ItCYdi/HIaVM/uAF2vualbs
2tJbtDA5xDx6SMvsHx/iGGEPWDlIH8fZf1Xt6n2paE0qdMlL2h4Ggo355TcfIV4L
nIVQpA674vFmQ5IAzluDuavIPwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ95Y9K7
uf+18MFmV48mtxdPsZ3yMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvMUMxMkY1MTBB
MDUwMTFFRDhCMjVGRTUyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAMedIMA0GCSqGSIb3DQEBCwUAA4IBAQAN/XeDbWM4pieoCR+CF0ki
2YoSNzEwZiFQEm4+9fTNbHaOcweA+WSh87TT3ku+jScok8kcogPG+QXpPcBKu5XB
PbA4ZbJEoRE31C3TgHwYeBKN5sPJUf6q2SHCgkNAjN9QQFp7RtcUYV7lk+WILcnP
yd0HkIW4ELtqleHC/PIekgIvz3PwWSvXTn6iBU1lmDMfMcJP4VquVPwV+Rn0S+h6
4vh51G4VNPl8VMbrUF788UMhoc3bQwqaes/FMrb2kSwuOre/XYFrp87XFPMhcwbS
1BthFYUfwmAZMhG1g4978H3XcvZdKygt6ZnS6zJPQNOx+0uF1hQVRqmFCixOaQxI
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:11:17 2026 by rpki-client