
$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/E1E4F9902A6011EB8DEF2641C4F9AE02.roa
File: E1E4F9902A6011EB8DEF2641C4F9AE02.roa (raw, json)
Hash identifier: ubgP4CItUPCnRFkXEzJk4MJzd7wsSTzsN35ft/17QTc=
Subject key identifier: E2:52:1E:B6:F5:D9:F7:E7:BF:4A:DB:79:5B:AF:15:BD:92:A1:D3:4C
Certificate issuer: /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Certificate serial: 08DA
Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/E1E4F9902A6011EB8DEF2641C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:33:44 +0000
ROA not before: Fri 02 May 2025 21:32:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17675
IP address blocks: 149.234.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2266 (0x8da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Validity
Not Before: May 2 21:32:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a46a68-8511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:e2:63:19:e4:b4:54:8d:b0:6e:d1:e8:5a:
4f:3e:f8:90:39:60:ed:ca:60:52:76:d1:c2:d2:dc:
bc:6f:43:35:ec:74:54:1c:b4:8a:d0:34:59:f8:1c:
39:0e:95:12:56:db:1f:db:b9:bc:3e:b2:e1:df:cc:
e7:48:1d:8f:29:68:37:53:2a:8b:69:ee:61:a3:a7:
02:62:7c:2e:a7:69:cf:43:2d:70:ce:82:dc:2c:a5:
97:37:1d:8c:dc:d5:94:c5:91:24:9d:fd:d7:3f:55:
98:b9:32:ec:aa:74:e6:2b:7a:e1:08:50:bb:ff:90:
73:95:33:be:70:f1:ad:7a:c2:7d:95:2a:49:23:7e:
85:a1:90:c5:7c:3b:0f:ca:ac:31:c2:78:81:9e:0a:
57:d1:84:28:ba:08:6e:bf:14:ca:57:79:78:a7:e9:
fd:16:ce:cd:ba:49:f6:42:e3:5b:f8:d2:48:08:ed:
1d:16:1c:07:a9:f8:e6:a9:73:a6:2a:58:6e:75:8f:
b8:40:17:40:b8:22:cd:a1:25:6a:3c:92:0a:0f:f4:
aa:9c:88:ab:cf:bf:62:97:a3:6e:5b:43:95:8c:a6:
84:cf:b8:14:ac:25:53:ea:23:a2:d7:b7:5e:1a:40:
c0:a6:3d:6d:a6:1f:dd:d3:33:ac:cc:ed:dd:c2:0d:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:52:1E:B6:F5:D9:F7:E7:BF:4A:DB:79:5B:AF:15:BD:92:A1:D3:4C
X509v3 Authority Key Identifier:
keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/E1E4F9902A6011EB8DEF2641C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
149.234.185.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:03:23:68:2f:28:08:d0:13:09:da:0d:04:ed:b7:dd:e9:9a:
65:a7:a9:98:14:e5:3b:05:4e:71:11:5d:72:78:eb:81:ec:3f:
b1:87:68:a3:c1:e3:79:33:6b:ff:46:72:f6:83:0d:3c:bf:fb:
45:de:47:96:a4:34:2a:19:36:1a:07:7d:72:43:50:1a:cc:a7:
b9:ad:07:d6:c5:b4:80:cf:62:67:f5:70:28:5a:37:b9:41:08:
45:39:0d:d9:5f:3a:81:50:2b:80:14:bd:37:39:8c:cd:24:33:
11:38:da:03:e8:69:13:8f:f0:d5:d1:8d:e2:28:0e:18:cd:36:
d6:8a:8b:28:d3:f3:54:75:4d:0c:45:7f:b8:80:4d:81:d3:cb:
ec:20:d7:c7:49:c7:26:2a:b9:71:ac:48:13:3a:c0:72:dc:44:
74:c8:25:c8:90:9d:ad:93:50:cc:ac:6c:d5:27:25:85:ae:47:
86:38:a2:bf:31:7d:7f:9a:e8:da:d3:b6:32:8b:fc:c6:c3:6b:
e6:1d:2a:f8:ad:1c:db:cc:9b:a2:b8:dd:63:3b:2a:b7:83:7e:
d4:35:ca:db:4c:78:f2:a2:8a:46:9f:42:49:d9:4f:9a:aa:30:
ad:f4:32:7a:d5:a6:b1:3a:d8:56:95:bd:e0:03:2b:d7:73:ff:
52:21:71:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:17 2026 by rpki-client