
$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/E0A4E5182A6011EB8DEF2641C4F9AE02.roa
File: E0A4E5182A6011EB8DEF2641C4F9AE02.roa (raw, json)
Hash identifier: vMX7018Kd0N1Xix15NfjfddYvKRtUxLBkyq1KKi/JO4=
Subject key identifier: CB:6F:5C:A3:A1:84:B8:83:F1:8D:2B:D2:9D:4F:71:45:B3:B4:A6:0B
Certificate issuer: /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Certificate serial: 08D5
Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/E0A4E5182A6011EB8DEF2641C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:33:40 +0000
ROA not before: Fri 02 May 2025 21:32:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1221
IP address blocks: 149.234.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2261 (0x8d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Validity
Not Before: May 2 21:32:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a46a63-df65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:8c:ac:d1:dd:b1:69:b9:ea:3c:83:be:38:
9f:1a:a3:fb:ab:9b:4e:81:24:c9:84:65:52:c4:7a:
ac:02:28:cf:4b:49:7b:ac:9f:3f:d7:f5:40:b2:51:
1b:bb:00:76:71:a6:a5:7e:b9:63:1a:ef:37:8d:e3:
dc:2f:6e:36:4c:26:f2:3d:40:00:77:82:a8:95:d9:
5f:12:34:d2:cd:b8:1d:b6:e9:a2:48:65:ed:a9:a7:
de:7d:be:ee:fc:9d:86:3d:24:78:fc:01:e3:2b:97:
bc:4e:e5:d7:88:b0:79:c1:59:16:74:81:25:11:5b:
5e:82:a0:6f:ef:7d:42:d7:32:bf:fa:d8:92:2e:c8:
8d:46:88:8f:f1:e9:f1:13:5d:91:7d:84:56:09:3e:
98:ed:0a:45:99:77:ec:44:4e:0b:61:2c:1c:51:f7:
8d:08:84:27:32:ff:86:9d:48:b4:8d:7c:b1:70:0d:
8e:ad:70:22:26:db:fe:95:74:99:3e:47:fd:5b:56:
68:6e:bd:d4:9c:a0:e8:7a:49:70:18:26:f0:36:a7:
b0:2d:d0:26:2f:1b:1a:71:17:de:f6:ce:30:6a:ec:
c7:8d:01:89:29:7b:94:e0:f8:9f:63:3d:36:37:ef:
c7:b7:24:b4:ed:2d:30:7d:c2:e9:95:b2:4b:77:06:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6F:5C:A3:A1:84:B8:83:F1:8D:2B:D2:9D:4F:71:45:B3:B4:A6:0B
X509v3 Authority Key Identifier:
keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/E0A4E5182A6011EB8DEF2641C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
149.234.187.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:21:6e:21:1e:42:52:fe:ba:c0:0b:04:ee:d9:3d:9b:83:72:
7e:c7:d9:5e:6d:14:81:3d:c2:6a:6d:49:30:b4:5a:20:2f:46:
3e:f3:42:f7:4f:e5:b1:d5:a3:ff:11:18:a2:3a:84:2f:ad:30:
f4:18:62:46:8e:6e:df:3b:0d:3b:7d:78:da:79:c5:0f:fe:b1:
4a:f8:59:26:78:a9:89:ff:5d:92:3a:1b:38:ac:cb:f5:97:eb:
e4:20:3c:31:d0:f0:5a:d1:1d:ce:3d:8a:d3:87:28:9f:5d:fe:
ff:13:fc:76:2a:4d:56:8b:5c:11:9f:e2:c7:15:44:81:08:39:
ef:fb:d0:52:50:18:af:52:ef:c5:2e:76:7d:98:0d:e8:9b:42:
5d:84:9b:71:08:d0:95:ba:84:f0:87:d6:39:af:ef:e2:02:37:
e7:f0:a8:57:9a:f0:bd:b4:a7:f7:8f:95:ca:47:d2:e7:9e:ec:
dd:4c:ff:7d:1c:a5:1f:f0:bf:f1:5a:dd:cc:f1:72:7f:cc:65:
a2:49:d2:7c:a5:71:2a:62:55:eb:c0:f1:20:ff:3b:82:49:ed:
6c:e6:b8:86:f1:3e:ac:81:30:a9:b3:f4:a3:10:67:55:47:83:
ea:43:47:b0:e1:79:82:88:c0:dc:4c:ae:e2:6c:33:f2:99:a1:
c2:21:de:00
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM4M0IxMTAvBgNVBAUTKDA3MjdBQUM1QjhDRjdGRTY4Q0NENkRFNzdGNkM4QjQ2
RDU3NEZBQTcwHhcNMjUwNTAyMjEzMjM4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmE2My1kZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAohWMrNHdsWm56jyDvjifGqP7q5tOgSTJhGVSxHqsAijPS0l7rJ8/1/VAslEb
uwB2caalfrljGu83jePcL242TCbyPUAAd4KoldlfEjTSzbgdtumiSGXtqafefb7u
/J2GPSR4/AHjK5e8TuXXiLB5wVkWdIElEVtegqBv731C1zK/+tiSLsiNRoiP8enx
E12RfYRWCT6Y7QpFmXfsRE4LYSwcUfeNCIQnMv+GnUi0jXyxcA2OrXAiJtv+lXSZ
Pkf9W1Zobr3UnKDoeklwGCbwNqewLdAmLxsacRfe9s4wauzHjQGJKXuU4PifYz02
N+/HtyS07S0wfcLplbJLdwZgXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMtvXKOh
hLiD8Y0r0p1PcUWztKYLMB8GA1UdIwQYMBaAFAcnqsW4z3/mjM1t539si0bVdPqn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GNEJENTAwOEUw
MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9CeWVxeGJqUGYtYU16VzNuZjJ5TFJ0VjAt
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0J5ZXF4YmpQZi1hTXpXM25mMnlMUnRWMC1xYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjM4M0IvRjRCRDUwMDhFMDIzMTFFQTk5MjJERTQyQzRGOUFFMDIvRTBBNEU1MTgy
QTYwMTFFQjhERUYyNjQxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAleq7MA0GCSqGSIb3DQEBCwUAA4IBAQDRIW4hHkJS/rrACwTu2T2b
g3J+x9lebRSBPcJqbUkwtFogL0Y+80L3T+Wx1aP/ERiiOoQvrTD0GGJGjm7fOw07
fXjaecUP/rFK+FkmeKmJ/12SOhs4rMv1l+vkIDwx0PBa0R3OPYrThyifXf7/E/x2
Kk1Wi1wRn+LHFUSBCDnv+9BSUBivUu/FLnZ9mA3om0JdhJtxCNCVuoTwh9Y5r+/i
Ajfn8KhXmvC9tKf3j5XKR9LnnuzdTP99HKUf8L/xWt3M8XJ/zGWiSdJ8pXEqYlXr
wPEg/zuCSe1s5riG8T6sgTCps/SjEGdVR4PqQ0ew4XmCiMDcTK7ibDPymaHCId4A
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:51 2026 by rpki-client