
$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/67591AB22FC911EBA360EC1CC4F9AE02.roa
File: 67591AB22FC911EBA360EC1CC4F9AE02.roa (raw, json)
Hash identifier: +hK2lpFOY0sEGHxcoAnb21JzOENa1sMRcBXQv9Evgv4=
Subject key identifier: 09:0B:67:86:8C:57:06:06:D5:72:75:4F:56:DC:70:2A:56:D4:60:3D
Certificate issuer: /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Certificate serial: 08D7
Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/67591AB22FC911EBA360EC1CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:33:41 +0000
ROA not before: Fri 02 May 2025 21:32:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141364
IP address blocks: 149.234.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2263 (0x8d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Validity
Not Before: May 2 21:32:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a46a65-335d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:a8:74:ed:12:03:a6:12:8d:1c:66:18:e8:
d5:52:7d:e9:b9:0c:f7:03:d9:2b:50:d1:28:1f:c9:
0d:c7:0e:bf:70:6f:11:3e:58:8c:0d:bd:74:34:0a:
0e:11:ae:99:76:eb:6b:d6:32:14:b5:a0:25:56:84:
25:02:1e:f6:b8:ce:ad:bd:13:26:9f:a0:e1:bb:a9:
78:f8:e4:db:b5:4e:51:68:ee:a4:74:06:2f:d8:64:
10:c6:10:12:87:d8:70:a7:55:28:e7:ed:47:a4:3b:
a9:b7:ef:f7:be:0c:f4:40:e0:3a:77:be:b6:41:3d:
fc:8a:5a:66:f7:06:a9:30:5c:9a:34:9e:2d:28:fb:
8e:47:55:45:09:b5:9e:0e:3e:eb:48:a4:68:c7:5a:
9f:2a:62:26:9f:b5:a2:42:7f:64:f9:c1:88:03:48:
1e:8b:e2:2f:3c:d6:58:c4:02:d3:1b:8a:d0:03:87:
a9:63:52:14:13:67:be:a6:bb:54:c8:c3:0b:f3:b6:
1a:57:e1:e4:a3:ec:36:b0:2e:aa:b1:f7:65:5a:03:
61:3a:a5:65:72:0b:82:c5:39:cf:28:27:92:cc:a0:
d1:b9:12:37:47:40:2e:69:70:4d:4d:38:a0:c0:41:
f5:f5:19:1a:5f:50:e8:ef:a0:f1:89:dd:26:e0:fe:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0B:67:86:8C:57:06:06:D5:72:75:4F:56:DC:70:2A:56:D4:60:3D
X509v3 Authority Key Identifier:
keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/67591AB22FC911EBA360EC1CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
149.234.185.0/24
Signature Algorithm: sha256WithRSAEncryption
70:4e:ae:d7:99:b4:8a:4d:01:87:52:f1:0f:e2:52:b0:90:41:
06:18:3c:ff:a2:7f:4a:a2:ae:16:ad:1a:9d:28:be:52:e9:7a:
17:1b:41:4a:5b:d6:9a:84:cb:4a:b3:42:4a:58:7f:7a:bd:68:
66:11:eb:ea:1e:b4:28:14:1c:d5:35:59:a4:19:89:c2:69:68:
30:1d:f7:f3:62:54:45:6b:28:0a:f6:a8:4c:8c:1c:86:62:ee:
75:e0:06:4c:97:be:3c:29:30:3a:5e:00:0d:e7:ef:a8:a6:b7:
6d:05:4d:60:ae:54:89:30:1b:15:15:73:c1:56:ed:de:63:1c:
59:db:6f:32:c2:14:73:37:66:4f:75:87:b0:a4:f1:06:d4:d8:
25:ea:62:24:b3:a6:cb:d7:e1:61:fa:d6:4e:c4:fe:9c:1c:a4:
22:8a:90:38:8c:f6:d3:73:6a:26:54:bc:dc:6a:95:fb:b9:81:
2a:0e:f0:48:da:12:1e:a8:6c:f4:17:c9:85:79:44:fa:c4:71:
86:6a:63:0d:b4:d3:bb:a0:3c:e5:94:6b:48:9a:8f:20:ad:00:
c4:e1:22:94:ba:54:67:ca:9b:94:ff:87:8d:97:a0:21:9e:50:
e2:81:38:27:34:44:26:92:56:28:0b:f8:2f:f9:1f:a6:b6:86:
0c:7a:43:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:29:28 2026 by rpki-client