
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/29C3BF9E691411EF8D868864C4F9AE02.roa
File: 29C3BF9E691411EF8D868864C4F9AE02.roa (raw, json)
Hash identifier: BF86pvfpbRBo9qXutEzgqO61bS2nTEWr+T+kabrPp1I=
Subject key identifier: D2:8A:D4:F7:3A:BC:1C:6D:7A:0E:A0:DA:35:8C:8E:2C:5C:49:CE:1F
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 0437
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/29C3BF9E691411EF8D868864C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:49:41 +0000
ROA not before: Tue 02 Dec 2025 23:58:56 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 136897
IP address blocks: 202.94.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079 (0x437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Dec 2 23:58:56 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a48a45-268a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:32:c9:88:d6:22:bc:87:ba:91:76:9e:cb:52:
5a:b4:f7:6d:7f:ad:74:28:02:aa:1a:f5:74:23:89:
9b:d2:48:1e:a4:87:f8:91:2b:db:d9:d4:8d:a5:29:
32:5d:0d:da:58:c2:a5:de:c2:d6:55:e1:0a:76:67:
c7:8f:b8:28:80:f6:67:7e:ef:67:57:a2:91:47:90:
eb:83:14:dd:3e:89:08:0a:27:ab:be:d3:33:d1:44:
ba:3b:f9:84:ca:bc:78:1f:f9:48:9d:ec:b8:8f:10:
74:c7:4a:a9:be:f7:74:89:ae:2d:9f:46:de:08:8a:
e5:8c:75:87:42:56:08:8b:db:b2:26:11:45:66:77:
0b:3f:d8:bb:9c:1d:9c:52:aa:6a:a6:9c:19:06:56:
98:71:54:e7:ad:fe:c4:19:40:45:b7:66:8a:ec:f5:
e0:db:95:06:ba:98:a6:5f:66:e3:7e:07:b9:de:57:
69:72:32:28:b5:5e:ad:a0:a9:60:e9:04:2f:24:17:
63:b2:1b:86:03:03:54:ef:e5:15:4d:74:1b:c7:0a:
e5:9d:a9:b9:c6:32:cd:45:e3:65:1b:ff:8b:8d:47:
1f:0d:0d:a2:b2:e3:3c:50:90:0c:03:c5:13:1a:a9:
64:47:73:db:ca:ec:6f:b9:87:58:9b:5a:0c:5f:d6:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8A:D4:F7:3A:BC:1C:6D:7A:0E:A0:DA:35:8C:8E:2C:5C:49:CE:1F
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/29C3BF9E691411EF8D868864C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.94.246.0/24
Signature Algorithm: sha256WithRSAEncryption
99:24:55:ae:5e:ed:38:d1:c9:71:e5:a7:3d:7b:f3:ef:ea:d3:
41:ea:d9:81:c8:15:dc:a1:8d:15:47:b4:31:59:da:22:31:8e:
90:9c:13:0c:20:74:ca:24:4f:6f:0e:d9:0c:03:29:89:b5:e9:
2a:0a:58:eb:ea:1d:40:b9:11:64:41:df:f3:d8:e4:0a:be:ca:
fe:47:42:79:34:a3:9b:04:58:df:c9:b4:8d:2a:e2:6c:ce:a5:
8b:19:d0:3a:b9:76:05:e2:da:89:bc:a0:c2:5e:04:09:20:82:
78:75:2b:38:c0:1c:a1:8f:90:0c:2c:a9:0a:ca:2f:30:2a:53:
40:08:0a:7e:eb:ee:e1:a2:75:b0:54:b9:cc:d8:88:90:fc:a5:
5f:25:5f:65:e8:2c:31:e9:55:d6:97:81:db:b3:f4:a4:43:a9:
a8:ad:d8:6b:70:17:8c:91:4e:3b:d2:7f:f1:e5:92:2c:c4:fe:
8f:99:60:43:98:42:77:94:ce:61:a8:23:c7:ac:fc:ae:5d:34:
d2:34:3a:25:83:ac:95:4a:64:2b:c2:7f:9c:25:1c:ed:b9:d0:
f3:0e:f6:09:74:5f:4c:e0:72:10:bc:7e:7e:96:51:59:65:65:
49:d5:5e:25:7a:33:23:b9:e1:67:1e:19:f1:31:08:b8:28:e4:
9c:6d:d9:f0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG
NUMyMDE1NzAwHhcNMjUxMjAyMjM1ODU2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGE0NS0yNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkDLJiNYivIe6kXaey1JatPdtf610KAKqGvV0I4mb0kgepIf4kSvb2dSNpSky
XQ3aWMKl3sLWVeEKdmfHj7gogPZnfu9nV6KRR5DrgxTdPokICiervtMz0US6O/mE
yrx4H/lIney4jxB0x0qpvvd0ia4tn0beCIrljHWHQlYIi9uyJhFFZncLP9i7nB2c
UqpqppwZBlaYcVTnrf7EGUBFt2aK7PXg25UGupimX2bjfge53ldpcjIotV6toKlg
6QQvJBdjshuGAwNU7+UVTXQbxwrlnam5xjLNReNlG/+LjUcfDQ2isuM8UJAMA8UT
GqlkR3PbyuxvuYdYm1oMX9Z/BwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNKK1Pc6
vBxteg6g2jWMjixcSc4fMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC
OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvMjlDM0JGOUU2
OTE0MTFFRjhEODY4ODY0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyl72MA0GCSqGSIb3DQEBCwUAA4IBAQCZJFWuXu040clx5ac9e/Pv
6tNB6tmByBXcoY0VR7QxWdoiMY6QnBMMIHTKJE9vDtkMAymJtekqCljr6h1AuRFk
Qd/z2OQKvsr+R0J5NKObBFjfybSNKuJszqWLGdA6uXYF4tqJvKDCXgQJIIJ4dSs4
wByhj5AMLKkKyi8wKlNACAp+6+7honWwVLnM2IiQ/KVfJV9l6Cwx6VXWl4Hbs/Sk
Q6mordhrcBeMkU470n/x5ZIsxP6PmWBDmEJ3lM5hqCPHrPyuXTTSNDolg6yVSmQr
wn+cJRztudDzDvYJdF9M4HIQvH5+llFZZWVJ1V4lejMjueFnHhnxMQi4KOScbdnw
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:35:12 2026 by rpki-client