
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/BB684734816B11EFA4D23930C4F9AE02.roa
File: BB684734816B11EFA4D23930C4F9AE02.roa (raw, json)
Hash identifier: ZFPkmcqDjoKsQQuKRApVSD7ZZsh8Yv27krJA8gBgBE8=
Subject key identifier: 94:A0:82:23:A7:BB:58:B7:C2:48:53:7D:4A:A4:49:11:A3:34:3C:86
Certificate issuer: /CN=A912A138/serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Certificate serial: 07CE
Authority key identifier: E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/BB684734816B11EFA4D23930C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:54:07 +0000
ROA not before: Sat 12 Jul 2025 22:02:43 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 139281
IP address blocks: 2405:4c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl
rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:51:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1998 (0x7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A138, serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Validity
Not Before: Jul 12 22:02:43 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4530f-632e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:a9:52:1b:3a:d7:82:62:7d:6a:ab:50:4e:
df:3b:d5:e6:27:fd:53:f5:cb:12:f3:ae:2e:a6:ed:
48:0b:79:b0:25:5f:2d:3e:11:3a:21:30:bc:7b:7e:
3c:d8:de:bc:50:ad:e9:6d:82:61:28:52:1a:3a:f5:
b7:88:b2:6b:5e:53:95:c9:6f:bf:22:44:ff:ff:a7:
43:64:fc:de:4b:e9:e2:84:db:5d:c5:b8:f1:04:e5:
bc:50:49:b5:c2:03:9d:63:a3:1d:6a:48:f8:7a:06:
55:59:2e:e4:0a:7f:7f:7d:8f:41:26:9c:ba:41:81:
e3:ad:b0:fe:25:f1:b9:4e:3c:ad:b6:4a:5f:43:8a:
66:2d:c1:2c:81:e1:4e:6a:f8:10:23:2a:ed:fd:39:
18:4c:b3:bb:ce:d4:20:28:db:64:0b:46:60:a9:5a:
9d:10:bc:b0:2c:ab:43:ed:03:c9:66:d7:82:64:a6:
85:1c:0a:20:fb:e7:24:e9:ea:1d:51:7b:c6:85:f2:
94:f2:43:69:d2:32:e4:b9:77:ca:eb:40:ca:75:74:
db:c4:4d:67:b4:b9:b5:f9:4e:c6:05:5d:35:1b:5e:
ed:2d:20:31:93:1e:74:e7:86:6a:a4:d4:37:3c:6a:
72:d7:1b:9f:18:44:18:24:06:2c:10:ab:cf:18:a2:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A0:82:23:A7:BB:58:B7:C2:48:53:7D:4A:A4:49:11:A3:34:3C:86
X509v3 Authority Key Identifier:
keyid:E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/BB684734816B11EFA4D23930C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:4c0::/32
Signature Algorithm: sha256WithRSAEncryption
42:ba:97:52:b1:22:68:42:df:46:2a:6f:ac:c2:37:09:74:94:
e5:46:7d:ec:98:a7:2c:c3:78:e5:5f:fa:8a:16:d7:bb:ab:07:
f5:49:99:4f:b7:06:0d:1e:87:b7:89:22:ca:01:ae:6a:6c:73:
60:03:f4:f4:24:a7:36:ba:56:e9:9c:a7:7c:f9:58:0f:64:86:
8e:56:3b:d1:b3:42:4e:ee:c1:87:c6:9c:b3:0a:5c:31:e3:d3:
c1:08:d9:b5:62:a0:74:1b:79:75:2a:e9:a0:55:f5:fa:23:d3:
9b:51:71:a4:b2:45:df:33:34:64:94:dc:be:1f:88:4e:ba:a5:
f7:2f:58:e2:03:ac:e8:78:ad:2d:d9:1c:93:67:35:5a:6e:0a:
b2:20:c4:50:9b:6b:8e:6c:25:82:47:b8:e8:fc:9f:42:cc:fe:
0b:9f:f8:cf:4a:cf:6b:98:b7:15:c2:1f:8e:ef:c3:9d:5d:3c:
c4:e6:8b:56:5e:17:e1:33:4d:f7:49:18:03:22:f1:ec:40:c2:
dd:7b:5a:5d:9e:6f:50:be:03:02:af:8a:35:46:2d:4f:d6:29:
7f:86:33:64:78:37:81:82:32:48:cf:f8:73:1b:97:96:1e:d3:
15:01:02:42:0b:36:ad:45:bc:a5:7d:75:af:72:29:53:ac:c2:
c1:2d:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:59 2026 by rpki-client