
$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/681098C2CDA911EF89DEEE2CC4F9AE02.roa
File: 681098C2CDA911EF89DEEE2CC4F9AE02.roa (raw, json)
Hash identifier: 10jgAa/oO9QvVhmXa5ryYi3X/Q5r2nOHe8sXNKlu0sI=
Subject key identifier: 90:DB:36:7B:03:57:CA:A1:74:CF:5C:CB:0D:88:3C:E3:4F:50:AF:A7
Certificate issuer: /CN=A912442A/serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
Certificate serial: 0187
Authority key identifier: 7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/681098C2CDA911EF89DEEE2CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:50:29 +0000
ROA not before: Tue 02 Dec 2025 23:58:49 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 38794
IP address blocks: 85.204.26.0/24 maxlen: 24
85.204.243.0/24 maxlen: 24
85.204.244.0/24 maxlen: 24
85.204.247.0/24 maxlen: 24
85.204.250.0/24 maxlen: 24
85.204.253.0/24 maxlen: 24
86.107.53.0/24 maxlen: 24
89.38.134.0/24 maxlen: 24
89.39.91.0/24 maxlen: 24
89.47.94.0/24 maxlen: 24
92.114.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl
rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912442A, serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
Validity
Not Before: Dec 2 23:58:49 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a46045-ef4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:25:c7:88:6a:35:a0:7a:ff:6e:b6:50:a8:
87:dd:e5:b6:cb:28:fe:bb:81:83:77:78:8b:3e:2d:
2e:89:e9:23:dd:9a:9a:24:ec:c4:b2:9b:34:08:76:
97:52:44:2b:6b:26:e0:d3:b7:03:87:ad:ef:c9:f0:
de:60:80:4e:43:6a:aa:7b:da:37:41:13:78:43:75:
9c:46:c2:30:c0:62:39:d7:91:9b:74:22:25:e6:a4:
a7:f5:af:bf:7e:4d:c0:c3:1d:9c:56:41:7a:8a:1d:
91:d5:75:f6:d7:aa:5d:82:84:35:9f:43:01:d4:00:
46:f6:1c:4b:ea:71:61:28:c2:2e:55:9a:0a:ab:dc:
3b:1f:26:51:23:cb:ab:d7:be:fd:e7:5a:fa:16:c9:
86:a5:48:ec:16:b2:9f:a1:18:d6:95:14:77:e7:95:
2d:a1:f2:4d:df:91:c8:be:31:1b:d6:b2:6a:86:99:
a4:c1:18:b7:26:2d:84:f8:56:58:30:19:9b:61:a6:
ca:19:02:02:59:92:d4:79:3c:fb:7a:90:c0:3f:00:
d1:1d:ac:cd:3e:5f:20:7c:5b:3e:24:9d:47:5d:56:
3f:3e:4c:bb:ba:44:29:d6:5c:f9:d6:a9:65:ad:19:
c1:dd:f5:8b:82:0f:53:e7:4d:d4:f0:b8:67:f3:09:
6d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DB:36:7B:03:57:CA:A1:74:CF:5C:CB:0D:88:3C:E3:4F:50:AF:A7
X509v3 Authority Key Identifier:
keyid:7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/681098C2CDA911EF89DEEE2CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
85.204.26.0/24
85.204.243.0-85.204.244.255
85.204.247.0/24
85.204.250.0/24
85.204.253.0/24
86.107.53.0/24
89.38.134.0/24
89.39.91.0/24
89.47.94.0/24
92.114.109.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e4:e5:1a:0c:31:b4:5f:ae:ea:f6:04:5b:78:b4:37:17:86:
82:e1:70:ba:34:3c:f8:89:4a:49:8b:78:12:c4:83:1d:b8:20:
4f:c1:f9:06:94:18:9c:b1:c7:0f:d8:5d:ac:83:31:9c:4d:c9:
94:ae:5f:ab:aa:f7:a4:a2:1f:92:ba:7e:d1:4c:04:35:49:62:
77:b4:18:98:96:35:37:07:30:9b:be:d1:58:26:4c:e8:fd:f8:
42:d4:6a:98:ea:3e:cd:27:a7:02:3c:b7:ee:5a:12:64:2e:ca:
bc:83:b0:d6:b9:bf:da:14:d8:6f:87:16:0e:ed:0f:cb:3e:de:
fa:5d:90:45:a2:1c:0e:3a:82:e4:3c:b5:2f:8c:aa:5f:19:27:
01:f9:61:d0:8a:1d:fb:b0:1f:f5:9f:5f:d7:6b:c8:05:75:d6:
d5:ca:51:bf:e8:88:1f:6b:68:0d:ae:e6:a6:21:08:6b:ce:78:
43:aa:68:eb:04:95:8e:01:a5:7b:b1:5b:d2:d8:92:5c:95:27:
ac:d3:63:92:70:ea:64:0e:f7:b1:81:cf:32:c5:5f:d4:5f:03:
a5:50:5e:31:47:5a:4f:09:c4:a7:4a:33:f3:4d:7b:80:0b:7a:
05:74:b7:89:55:56:6b:65:b8:89:3f:bc:37:0f:48:96:d9:b6:
b8:2d:59:97
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDdERTYwN0M0NjE1RDdBMDFGQkRENEE4NkFENTQ1OTQw
MUE3NTk5MjEwHhcNMjUxMjAyMjM1ODQ5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjA0NS1lZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsCslx4hqNaB6/262UKiH3eW2yyj+u4GDd3iLPi0uiekj3ZqaJOzEsps0CHaX
UkQraybg07cDh63vyfDeYIBOQ2qqe9o3QRN4Q3WcRsIwwGI515GbdCIl5qSn9a+/
fk3Awx2cVkF6ih2R1XX216pdgoQ1n0MB1ABG9hxL6nFhKMIuVZoKq9w7HyZRI8ur
177951r6FsmGpUjsFrKfoRjWlRR355UtofJN35HIvjEb1rJqhpmkwRi3Ji2E+FZY
MBmbYabKGQICWZLUeTz7epDAPwDRHazNPl8gfFs+JJ1HXVY/Pky7ukQp1lz51qll
rRnB3fWLgg9T503U8Lhn8wltewIDAQABo4ICnjCCApowHQYDVR0OBBYEFJDbNnsD
V8qhdM9cyw2IPONPUK+nMB8GA1UdIwQYMBaAFH3mB8RhXXoB+91Khq1UWUAadZkh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS9FN0M0RjlERUY2
MjUxMUVFOERBRDhFMzVDNEY5QUUwMi9mZVlIeEdGZGVnSDczVXFHclZSWlFCcDFt
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2ZlWUh4R0ZkZWdINzNVcUdyVlJaUUJwMW1TRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjQ0MkEvRTdDNEY5REVGNjI1MTFFRThEQUQ4RTM1QzRGOUFFMDIvNjgxMDk4QzJD
REE5MTFFRjg5REVFRTJDQzRGOUFFMDIucm9hMF0GCCsGAQUFBwEHAQH/BE4wTDBK
BAIAATBEAwQAVcwaMAwDBABVzPMDBABVzPQDBABVzPcDBABVzPoDBABVzP0DBABW
azUDBABZJoYDBABZJ1sDBABZL14DBABccm0wDQYJKoZIhvcNAQELBQADggEBAH7k
5RoMMbRfrur2BFt4tDcXhoLhcLo0PPiJSkmLeBLEgx24IE/B+QaUGJyxxw/YXayD
MZxNyZSuX6uq96SiH5K6ftFMBDVJYne0GJiWNTcHMJu+0VgmTOj9+ELUapjqPs0n
pwI8t+5aEmQuyryDsNa5v9oU2G+HFg7tD8s+3vpdkEWiHA46guQ8tS+Mql8ZJwH5
YdCKHfuwH/WfX9dryAV11tXKUb/oiB9raA2u5qYhCGvOeEOqaOsElY4BpXuxW9LY
klyVJ6zTY5Jw6mQO97GBzzLFX9RfA6VQXjFHWk8JxKdKM/NNe4ALegV0t4lVVmtl
uIk/vDcPSJbZtrgtWZc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:05 2026 by rpki-client