
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EAEC9066690E11EF9396CC48C4F9AE02.roa
File: EAEC9066690E11EF9396CC48C4F9AE02.roa (raw, json)
Hash identifier: grW6xPxdsNkObgmvC9oU5U7FXXHibN8xdWW4iVbsRa4=
Subject key identifier: C1:14:F0:31:95:A6:1A:E9:F8:A3:B7:4F:74:DF:C6:53:44:A1:66:05
Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial: 043D
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EAEC9066690E11EF9396CC48C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:49:46 +0000
ROA not before: Tue 02 Dec 2025 23:59:02 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 140662
IP address blocks: 119.63.70.0/24 maxlen: 24
119.63.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1085 (0x43d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Validity
Not Before: Dec 2 23:59:02 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a48a4a-4db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:a9:12:5f:13:e8:b4:d8:a2:af:0b:0d:06:
cb:12:8f:8f:48:b7:97:a5:f2:9c:d3:49:4e:3f:af:
a4:25:b6:89:17:28:fe:33:18:c6:e7:a7:da:68:3c:
aa:a5:35:84:c8:f0:ce:d9:7b:01:71:a5:27:5e:d2:
13:85:f1:91:56:a3:cf:68:b0:57:4b:b0:b0:df:c7:
d0:0c:85:55:5f:c8:14:e5:e5:f4:bf:1e:aa:54:b4:
c9:47:99:c7:24:44:1f:64:a2:1d:ec:9b:88:34:c4:
43:15:ad:ed:40:32:88:6e:63:15:bc:b4:ba:6b:81:
82:40:c2:fd:11:dc:98:f9:2c:e1:1b:c3:df:41:2f:
38:9d:be:5c:c8:7a:d5:2b:9d:8d:b7:9d:5b:3c:15:
0a:60:36:a7:3d:5f:41:23:72:1a:3d:75:04:ef:f4:
05:16:4e:eb:f1:f6:d0:78:78:84:95:0c:0d:a8:e8:
29:97:73:76:dc:19:8b:6b:74:5b:59:a8:26:9e:02:
7c:19:5f:cf:40:23:16:2e:f5:56:3e:f8:88:be:54:
c4:66:4c:66:07:ca:b3:03:8c:1f:cb:37:75:6b:af:
4d:88:3d:49:6c:1b:97:7e:ac:0c:71:9f:47:ae:3c:
8f:17:41:96:48:09:86:74:6c:37:64:aa:20:c4:4f:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:14:F0:31:95:A6:1A:E9:F8:A3:B7:4F:74:DF:C6:53:44:A1:66:05
X509v3 Authority Key Identifier:
keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EAEC9066690E11EF9396CC48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.63.70.0/24
119.63.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c1:dc:6b:4a:ba:8b:fd:59:0c:f7:29:13:27:4f:56:75:69:
cc:65:d9:a8:97:2e:3b:fd:31:a9:af:c5:8e:bc:4d:ff:e0:bb:
3f:24:fc:f1:b5:69:04:fa:41:5f:4e:8c:cf:f0:95:92:d4:45:
7d:62:f6:fb:31:ca:ce:36:ef:b1:5f:cb:bb:cc:99:07:9f:a9:
99:8b:6d:06:c0:58:2e:86:97:37:20:26:59:66:c7:0b:9c:0a:
08:43:17:29:28:6a:5a:80:11:e8:ce:6e:0a:89:43:9f:98:f9:
44:e9:cb:2c:ae:dc:e3:06:b1:2b:54:21:26:c5:34:72:20:eb:
b0:0b:e9:b1:5f:37:f0:6b:ce:7d:f5:bd:88:ca:80:f6:8b:77:
fa:b1:89:fc:ee:ea:11:1e:7c:fe:94:e0:a7:4d:cd:d4:b5:f2:
ca:83:0d:9e:58:85:9b:93:c7:37:1e:a4:d2:7f:3a:3f:f5:6e:
74:11:54:af:36:d9:5a:c8:0a:00:d5:df:0b:d1:52:0d:be:6f:
7b:9e:4b:a3:26:e7:17:64:9f:11:d6:e8:fb:04:fd:a1:65:ef:
a3:0d:f4:3d:56:df:99:89:e8:3e:d2:42:8a:76:05:ee:04:28:
66:90:f5:bd:28:d3:fa:3a:cd:94:af:5d:b8:8f:bd:40:d8:07:
86:5e:54:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:41 2026 by rpki-client