
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/57F3E1BCC91911F083BE4C6DC4F9AE02.roa
File: 57F3E1BCC91911F083BE4C6DC4F9AE02.roa (raw, json)
Hash identifier: 5dwmeSZ0SRVIGYAiO2cL5WhMdIRKKwW4wqbG2GaMUhM=
Subject key identifier: D9:25:EA:5B:24:72:10:D6:9B:04:90:75:56:47:41:EE:1F:B0:A4:F9
Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial: D7
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/57F3E1BCC91911F083BE4C6DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:11:21 +0000
ROA not before: Mon 24 Nov 2025 09:47:48 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 45806
IP address blocks: 61.7.193.0/24 maxlen: 24
122.155.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Validity
Not Before: Nov 24 09:47:48 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a48f59-cd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:18:05:f2:c6:7d:74:d0:c6:25:60:db:d2:
ff:0f:ac:ce:7f:f7:98:c5:0a:fd:17:ab:04:db:80:
46:ae:49:d6:5e:82:cc:eb:6b:f1:ed:50:1e:d0:e0:
2e:eb:da:93:cc:b1:a8:58:68:b3:49:3a:ca:dd:62:
c8:24:21:08:b1:4d:d7:0f:36:a8:e0:97:10:fe:e3:
de:db:52:51:c7:24:a9:b1:44:4a:a3:e3:5e:59:9a:
53:53:28:fa:6f:5b:31:61:0c:25:5b:cb:60:80:69:
57:6e:5a:09:03:32:fc:47:a6:6e:91:79:58:e3:53:
02:95:1a:d3:57:54:73:26:a6:8e:a4:39:5a:4b:68:
55:c8:07:a0:2b:81:16:ae:92:0a:99:39:9f:f2:22:
cf:25:6f:64:6a:60:7e:4a:42:02:c3:57:2d:95:a8:
85:71:bb:8d:90:eb:36:3b:2b:3b:e3:f6:7c:26:33:
ab:55:23:2a:22:58:9f:75:8e:be:e5:30:2c:ba:ba:
e7:88:bd:15:af:d2:1a:46:b9:1f:a8:53:0a:89:fe:
43:bb:6d:72:7e:d4:1e:5b:c3:cd:32:d2:7d:23:e7:
0e:41:2c:3e:6c:c1:d6:35:7e:10:ac:b7:f9:d2:c5:
26:60:fe:f2:a3:ce:bb:47:2e:c2:00:c1:1d:97:fe:
91:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:25:EA:5B:24:72:10:D6:9B:04:90:75:56:47:41:EE:1F:B0:A4:F9
X509v3 Authority Key Identifier:
keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/57F3E1BCC91911F083BE4C6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.7.193.0/24
122.155.68.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5d:49:69:2f:03:a9:f1:59:63:db:a9:dc:9b:2f:66:26:bf:
b5:8a:82:b7:90:23:ed:34:5c:c6:f9:f7:52:43:3a:6d:87:1e:
f9:b0:46:6a:b7:47:cc:36:6c:11:92:6b:17:1d:8d:1a:04:a6:
bf:78:be:60:35:74:a4:d5:a0:29:d2:94:b0:6e:5c:05:98:c8:
76:5c:62:80:9c:96:bd:6a:a5:59:0c:ab:d4:9f:55:20:be:ab:
c8:20:d2:3e:d3:db:89:96:71:77:6f:f9:07:9f:7b:e3:12:94:
35:ab:46:13:88:68:bd:26:c2:f5:41:f1:da:a6:4e:5d:ca:bf:
d3:cd:85:5c:13:c2:87:54:b0:7f:bd:8d:b7:b4:f2:ea:36:62:
27:4e:50:3b:ff:f5:39:ac:42:60:7b:81:67:e1:39:db:4a:a8:
38:79:47:92:c1:74:9e:fd:ab:29:9f:2d:f8:c2:ea:a3:ed:4f:
16:d4:7a:82:28:b8:0a:c6:fe:17:5f:21:3c:ec:00:5d:89:9e:
d8:5d:43:ca:e5:5d:ce:c0:73:a3:e9:fb:fd:e1:4d:b0:55:95:
83:a4:be:35:cf:ef:5f:f4:1e:95:c3:be:29:19:29:06:34:b2:
f7:64:e4:67:71:79:d4:12:5a:4f:52:63:6f:d5:cf:f5:81:54:
9a:24:ad:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:05 2026 by rpki-client