
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DDFED4E068FA11EFB2CB6E60C4F9AE02.roa
File: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (raw, json)
Hash identifier: xClDM8EpPeO91j0Mezn/P780Xmby1QeCDq53lVbawmM=
Subject key identifier: 73:61:25:02:33:64:38:76:98:C2:0D:3F:5C:27:9E:5D:B5:3D:E9:1E
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 0438
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DDFED4E068FA11EFB2CB6E60C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:49:42 +0000
ROA not before: Tue 02 Dec 2025 23:58:57 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137489
IP address blocks: 116.193.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1080 (0x438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Dec 2 23:58:57 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a48a46-4894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1b:a0:b8:9c:63:4b:58:71:5d:03:31:ad:b8:
37:fe:b2:04:7e:05:1f:0c:22:eb:05:37:86:57:a7:
2e:60:23:74:92:8c:e3:ee:a1:f2:39:51:59:34:c4:
ec:4d:9f:95:99:ad:2e:82:03:8d:c4:a1:4a:6b:f8:
59:86:22:0a:cf:c9:60:2c:af:07:12:f0:6a:d8:c1:
bc:7d:2e:0b:d6:b6:68:f0:d8:2e:a3:96:dc:f4:9d:
e5:b6:81:30:ed:f1:80:94:17:dc:f7:cd:71:c0:e1:
fb:74:7c:9d:97:ac:6e:e3:a3:a5:5e:73:f6:4e:e6:
cf:a0:c2:c5:84:a5:44:af:d4:a3:b3:3e:53:bc:eb:
31:6c:9e:8e:be:0a:0f:06:7d:54:2f:bb:8d:16:56:
77:26:3a:25:55:f4:84:31:74:a1:f2:f7:69:2c:b3:
22:43:ac:b1:e7:e0:ea:05:e8:1e:d9:10:5d:45:5f:
b7:ea:e8:7a:8d:7c:8c:09:6f:ca:75:1a:da:3a:dd:
ce:db:5a:02:4a:d4:93:f9:6c:56:86:98:9a:c3:fe:
5d:aa:0a:a2:1d:e1:a4:c7:b5:3f:d2:c0:43:93:b4:
d5:46:80:1f:41:fc:d0:a3:e5:1d:ef:83:d0:2c:02:
e4:63:06:62:56:13:79:7a:eb:36:09:a0:6f:02:98:
f7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:61:25:02:33:64:38:76:98:C2:0D:3F:5C:27:9E:5D:B5:3D:E9:1E
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DDFED4E068FA11EFB2CB6E60C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.193.148.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b3:3f:21:45:92:30:c6:33:fb:d7:30:3d:ca:bd:2d:dc:3b:
3a:da:b0:82:f2:ed:6b:99:08:7c:d4:06:4a:e7:82:92:fb:fc:
00:5c:ac:38:cb:cb:7c:ae:44:06:84:c1:88:4e:ef:1a:6e:9d:
d5:4a:33:bb:86:72:4d:80:de:97:b0:1e:49:49:9d:da:1c:b2:
60:89:90:2d:46:40:34:b2:7f:9e:31:21:e0:30:2d:42:54:f7:
02:c6:ff:c7:97:0b:9d:2e:86:4a:e8:4e:5d:81:f6:58:9a:f2:
b2:ca:3e:ca:ad:1c:ad:b0:3a:be:d3:08:af:0a:9f:b3:f7:a6:
29:87:61:04:fe:a1:b3:9a:b7:91:d2:0d:58:61:0d:2a:fe:a6:
e3:22:a9:89:03:d0:ca:a5:7a:44:ce:1d:16:bf:2f:b0:8d:0f:
10:2f:dc:dd:d7:d9:93:0c:42:db:33:fc:f0:73:cf:0a:49:39:
1a:18:63:39:69:6d:77:78:a5:b3:2c:e1:22:c8:c8:4f:50:a8:
c8:8a:52:c4:36:7e:55:eb:67:52:0a:64:7f:98:6e:9f:22:43:
a8:40:11:37:5e:da:cb:9c:26:66:2a:53:29:df:a1:0e:cf:f1:
60:d6:f3:9a:cf:e2:ca:ab:fc:76:a1:f7:2e:d3:8e:fa:bd:a6:
07:bb:5b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:13 2026 by rpki-client