
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/72CF780C819311EB8964C17EC4F9AE02.roa
File: 72CF780C819311EB8964C17EC4F9AE02.roa (raw, json)
Hash identifier: ltYps8if0G6nvc97HNna0dOwk3QKPLcJcqz29XZNF8A=
Subject key identifier: 09:EE:4C:0A:31:D0:5A:B3:DA:01:04:BD:E0:41:EE:6F:96:66:2A:38
Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Certificate serial: 0C10
Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/72CF780C819311EB8964C17EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:44:33 +0000
ROA not before: Wed 24 Dec 2025 19:16:04 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4589
IP address blocks: 59.191.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3088 (0xc10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Validity
Not Before: Dec 24 19:16:04 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46cf1-3046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:20:cc:cb:ca:55:f0:70:63:7f:4e:13:6d:
d7:8a:c8:af:10:d0:c5:51:b7:f2:0c:be:5e:fe:9c:
e7:c1:ce:95:45:39:8f:f5:46:9e:e0:e0:81:ee:6b:
bc:c4:03:af:58:11:6f:a0:64:a8:96:89:9f:d4:7f:
5c:8a:97:bb:dd:1b:f4:49:c9:af:12:b5:6f:64:a6:
ff:a0:52:55:c5:f7:b6:57:ff:29:79:da:34:39:9b:
ca:5c:2b:41:b5:9f:b6:3b:bf:e4:eb:1a:ab:7f:77:
ec:f8:c3:29:c8:4a:f6:e9:54:99:c9:de:4c:e1:93:
d3:66:a0:b1:1e:b8:0c:02:f2:85:9a:19:2e:6d:33:
0b:1b:cc:af:73:f2:21:5f:23:cc:05:89:c4:b2:ff:
9c:6a:32:ea:1b:2a:95:00:86:94:10:31:d0:f9:a4:
bc:77:ec:30:56:cf:7c:d9:f9:4c:3d:c9:8b:69:2a:
4e:cd:03:55:e2:e6:b5:fe:bb:33:1a:26:fe:a9:59:
0b:d3:42:f6:b4:b1:cb:48:b1:10:59:d1:48:21:08:
4f:e2:b0:ca:dc:dc:7b:6c:db:c2:5d:5d:a1:18:ae:
e2:81:7c:03:ec:50:8e:97:76:51:16:3a:08:4b:a4:
04:f7:0a:a1:fb:92:48:c3:f0:8b:f9:3e:03:14:9d:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EE:4C:0A:31:D0:5A:B3:DA:01:04:BD:E0:41:EE:6F:96:66:2A:38
X509v3 Authority Key Identifier:
keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/72CF780C819311EB8964C17EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
59.191.240.0/20
Signature Algorithm: sha256WithRSAEncryption
17:c2:20:33:8d:44:12:aa:99:8e:ed:a1:60:6a:4e:c2:ce:c7:
6c:4e:2a:2a:e8:73:6c:b0:ba:96:0e:06:84:1d:90:62:da:1e:
4a:80:37:35:b9:4b:93:00:ac:7d:1a:cb:8e:44:b3:d6:be:ca:
8c:80:7b:5f:7b:0a:9e:d0:b9:9b:d3:8d:80:6d:3d:de:e2:70:
d3:9d:3e:5e:3c:3e:28:6d:2d:9c:b2:a8:c5:b1:1b:9f:bf:4d:
ca:39:e7:e8:c9:0c:78:29:f8:54:10:da:34:60:3e:6f:e8:c5:
b1:f4:e7:7e:e9:26:13:ea:a1:3c:2e:16:08:33:f1:83:df:88:
75:7f:33:ae:06:08:80:7d:2a:cc:32:6b:51:4a:66:d4:89:a7:
c5:c6:d2:a5:62:74:84:12:6b:03:75:12:5e:3a:11:90:22:c5:
ac:4e:74:90:6a:62:1f:9b:fd:1c:b5:4a:f9:b4:80:ee:c9:df:
6e:35:79:4f:f9:64:03:b1:6c:c7:3b:ed:6c:1a:bc:27:fa:ba:
9c:0a:cd:75:64:fe:f9:6f:b6:c1:7e:c7:c2:ba:91:ca:0a:6d:
51:5b:04:ba:6e:d1:5e:42:03:45:0c:72:49:83:3a:5a:ee:5e:
c4:3e:d6:c2:17:3c:f1:59:68:80:5f:7c:5c:dc:02:c5:f9:8e:
ba:e9:93:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:27 2026 by rpki-client