
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/2072597E691311EF82B0FC62C4F9AE02.roa
File: 2072597E691311EF82B0FC62C4F9AE02.roa (raw, json)
Hash identifier: wtq9PupYRV4XEewrdMqA8/4bNl2edm+HOBW3n2PpfNo=
Subject key identifier: A1:69:0B:D6:44:43:47:64:8F:02:1F:A9:CE:E9:02:69:AE:C4:9B:E5
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 0439
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/2072597E691311EF82B0FC62C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:49:43 +0000
ROA not before: Tue 02 Dec 2025 23:58:58 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137545
IP address blocks: 223.27.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1081 (0x439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Dec 2 23:58:58 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a48a47-05d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:28:1c:39:cc:f3:3f:42:78:cf:6f:08:ba:
53:8f:f5:e7:0e:0f:a1:c3:b1:34:0c:56:ff:59:5f:
b7:9c:a0:71:9a:82:fb:a6:49:85:1e:99:9f:2a:02:
75:63:6a:2e:10:64:bb:ec:66:54:ca:98:14:31:43:
4d:25:8c:11:82:0e:cf:81:db:f0:9f:89:6f:8c:11:
1c:fb:23:7e:17:16:fe:e3:1b:82:4f:35:ea:be:ff:
88:49:a0:17:bf:f5:46:4e:e2:45:d7:c4:96:1f:41:
0b:ae:1d:52:1b:0b:10:57:75:e2:72:59:74:4e:2a:
b4:cd:97:b3:e7:cd:74:f4:5e:77:26:92:54:7b:3d:
4d:fe:2a:11:17:07:2b:62:41:fd:51:e9:b3:b1:4c:
4f:61:88:83:dd:fa:1b:18:93:49:85:0c:aa:fc:b6:
86:3d:8d:4e:b1:56:79:4f:fe:f8:51:ab:b8:f7:c4:
64:94:2c:d0:80:8c:d9:b0:d7:72:6b:ea:e5:d1:99:
f5:5b:f5:96:dd:e8:91:11:49:22:4e:96:4a:4e:b4:
2b:c9:cc:b4:bb:82:e2:74:66:d9:a1:58:bd:af:30:
fc:f4:72:0a:7b:1e:79:cf:b2:30:67:32:b2:1e:ca:
71:f5:f2:43:80:e9:36:d9:6f:eb:22:43:ec:4e:00:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:69:0B:D6:44:43:47:64:8F:02:1F:A9:CE:E9:02:69:AE:C4:9B:E5
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/2072597E691311EF82B0FC62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
223.27.206.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a4:88:02:c8:95:ae:e7:14:2c:fa:8f:a4:0c:ef:fe:3c:6a:
29:e6:70:89:ac:3f:6a:e9:31:81:8b:e9:91:b3:33:10:5b:22:
f5:34:90:51:2a:39:72:38:03:01:79:c6:c9:13:8b:9c:dd:83:
8c:28:3f:3b:2b:b7:18:74:04:91:3d:35:a7:18:a1:ab:5d:e7:
96:77:21:8b:67:e5:ad:ce:47:9e:5d:9b:46:8d:11:53:9f:65:
24:40:b6:ce:e0:e4:37:56:04:21:06:ea:67:5f:62:d9:f0:45:
4b:4d:0d:9c:5c:98:48:43:df:70:e7:7b:ba:db:fb:97:8c:2a:
b8:44:64:8a:9c:11:4a:f3:92:be:e1:7e:62:0d:5c:3a:fa:4c:
a5:68:6f:d5:d3:c4:50:fa:6b:2a:51:ae:bb:f9:c5:2a:71:88:
7b:45:c9:ac:ca:99:64:a8:c8:bc:23:99:2b:e4:1e:ee:b0:74:
6a:27:72:c4:1b:3f:52:53:39:fa:98:a5:d4:a8:33:72:a5:c5:
6f:e5:1d:2d:56:e5:41:e9:95:ff:c2:10:c1:09:31:97:59:77:
26:53:31:1d:25:e5:9f:e4:e3:12:1e:50:1b:34:45:0e:ea:db:
d1:8b:73:5a:79:c2:66:fa:ca:e1:e0:03:a2:6c:d7:07:2e:75:
d7:61:c5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:18 2026 by rpki-client