
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/5BF38D62058E11EA96051368C4F9AE02.roa
File: 5BF38D62058E11EA96051368C4F9AE02.roa (raw, json)
Hash identifier: mfe6dh8HV+B3Izq2cj3w4opPN3aJ9/HVDtDRjSUh3Hs=
Subject key identifier: F4:E6:BB:99:7F:62:31:8A:64:A8:5D:77:A5:18:A1:87:64:97:10:8F
Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Certificate serial: 0D19
Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/5BF38D62058E11EA96051368C4F9AE02.roa
Signing time: Thu 04 Jun 2026 18:23:08 +0000
ROA not before: Thu 04 Jun 2026 18:23:08 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 58927
IP address blocks: 43.249.116.0/22 maxlen: 23
103.9.68.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3353 (0xd19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Validity
Not Before: Jun 4 18:23:08 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a21c28c-3c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:5d:5d:98:ab:45:1f:13:a4:44:8c:98:87:
1c:a4:79:fc:14:32:c4:2c:9b:96:e3:f3:68:2f:39:
68:9f:db:2d:f4:d3:f5:e4:9e:9a:63:0f:83:ad:ac:
27:7a:3e:79:79:27:f7:c8:b6:bd:76:bf:fa:4c:ee:
18:2e:aa:82:27:66:09:24:88:93:ec:77:6b:31:66:
4a:3b:53:3d:38:fc:00:61:32:9f:1b:b8:4f:79:4a:
ea:80:cd:d4:43:84:5a:21:66:d5:29:69:54:1d:13:
da:37:6b:df:29:b3:dd:4c:7a:0e:7f:05:14:90:df:
be:2b:2d:29:d7:b7:37:c2:3b:94:f2:28:21:be:a5:
dd:dd:6c:c8:60:15:5a:7c:ac:d7:08:53:48:6c:e9:
ac:d5:1c:e6:93:ab:fc:db:88:de:9b:a1:bd:5d:7a:
a2:86:2b:fb:a6:07:3f:e2:16:f6:24:07:92:4f:f1:
f3:ea:46:82:2c:fe:ef:2d:30:f9:36:94:65:36:1c:
f7:b1:bd:53:4b:ef:a8:04:9e:10:8e:17:6b:43:4b:
55:43:71:62:e1:a3:37:f1:27:47:c0:2c:72:0f:f6:
7f:ea:07:79:2a:eb:d1:1f:ad:db:28:d2:a5:ce:b0:
e2:d9:59:07:80:26:75:05:e9:ff:8a:84:fe:eb:f5:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E6:BB:99:7F:62:31:8A:64:A8:5D:77:A5:18:A1:87:64:97:10:8F
X509v3 Authority Key Identifier:
keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/5BF38D62058E11EA96051368C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.249.116.0/22
103.9.68.0/22
Signature Algorithm: sha256WithRSAEncryption
85:46:24:5b:af:59:f2:6b:13:e2:99:1c:14:1a:d2:dc:e3:ae:
91:c2:60:fa:3f:ef:43:fc:05:97:d5:22:11:72:1a:cf:3f:bb:
d0:86:1a:45:2c:18:1d:60:c8:58:04:c6:86:57:a6:d6:17:83:
39:f0:c0:b2:30:3b:45:d7:66:ae:24:ac:41:34:2a:85:84:9e:
ad:45:90:5a:41:53:d9:1d:24:7c:8d:07:e8:23:e1:eb:ef:18:
e1:5f:9d:54:e4:b7:6a:46:f5:3f:83:d3:2d:2a:ac:8c:6f:d2:
71:a3:94:02:65:49:ba:b8:56:ea:49:2f:e3:72:68:f8:b5:bd:
c5:a8:40:61:91:b5:c2:96:e5:86:b6:00:5b:72:60:66:6d:fd:
b6:a7:9c:ee:22:53:5b:ae:47:e0:d9:c5:04:a3:d0:2d:76:d6:
d4:0e:87:19:1f:02:03:81:82:19:ad:10:ff:d6:b5:17:60:83:
2b:bb:6f:e4:35:9a:0a:e9:34:a4:b8:72:f0:df:e6:53:5a:7d:
e3:dd:ed:86:a7:24:c8:97:89:0c:66:6e:72:b8:62:58:43:9d:
af:90:be:26:79:91:9c:d7:47:7e:23:fa:72:03:3b:94:82:44:
58:da:42:d0:9a:c4:3c:0b:45:fa:e2:c0:83:a9:a3:81:b5:0b:
98:7c:d8:77
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE2Q0IxMTAvBgNVBAUTKDY3OUNEQjI1NUI1Qjc3NTgwOTEwNUU5MEUwMDIzNDQ5
RjcxQzZCNkYwHhcNMjYwNjA0MTgyMzA4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIxYzI4Yy0zYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuU1dXZirRR8TpESMmIccpHn8FDLELJuW4/NoLzlon9st9NP15J6aYw+Drawn
ej55eSf3yLa9dr/6TO4YLqqCJ2YJJIiT7HdrMWZKO1M9OPwAYTKfG7hPeUrqgM3U
Q4RaIWbVKWlUHRPaN2vfKbPdTHoOfwUUkN++Ky0p17c3wjuU8ighvqXd3WzIYBVa
fKzXCFNIbOms1Rzmk6v824jem6G9XXqihiv7pgc/4hb2JAeST/Hz6kaCLP7vLTD5
NpRlNhz3sb1TS++oBJ4QjhdrQ0tVQ3Fi4aM38SdHwCxyD/Z/6gd5KuvRH63bKNKl
zrDi2VkHgCZ1Ben/ioT+6/UiWwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPTmu5l/
YjGKZKhdd6UYoYdklxCPMB8GA1UdIwQYMBaAFGec2yVbW3dYCRBekOACNEn3HGtv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTZDQi85NkE2MEJCNjA0
RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQxZ0pFRjZRNEFJMFNmY2Nh
MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1o1emJKVnRiZDFnSkVGNlE0QUkwU2ZjY2EyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkE2Q0IvOTZBNjBCQjYwNEZDMTFFQUIzRDk5NDE1QzRGOUFFMDIvNUJGMzhENjIw
NThFMTFFQTk2MDUxMzY4QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCK/l0AwQCZwlEMA0GCSqGSIb3DQEBCwUAA4IBAQCFRiRbr1nyaxPi
mRwUGtLc466RwmD6P+9D/AWX1SIRchrPP7vQhhpFLBgdYMhYBMaGV6bWF4M58MCy
MDtF12auJKxBNCqFhJ6tRZBaQVPZHSR8jQfoI+Hr7xjhX51U5LdqRvU/g9MtKqyM
b9Jxo5QCZUm6uFbqSS/jcmj4tb3FqEBhkbXCluWGtgBbcmBmbf22p5zuIlNbrkfg
2cUEo9AtdtbUDocZHwIDgYIZrRD/1rUXYIMru2/kNZoK6TSkuHLw3+ZTWn3j3e2G
pyTIl4kMZm5yuGJYQ52vkL4meZGc10d+I/pyAzuUgkRY2kLQmsQ8C0X64sCDqaOB
tQuYfNh3
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:09:30 2026 by rpki-client