
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/C38216B8396E11F1992DA1BA96833773.roa
File: C38216B8396E11F1992DA1BA96833773.roa (raw, json)
Hash identifier: /iOQsyc6F1r8WmEZPqbUXMRcjfmcWlpbEB4138jOfIk=
Subject key identifier: CE:EB:07:69:10:D3:B7:B9:2A:1C:4F:83:C3:87:5A:2B:EE:DE:22:F0
Certificate issuer: /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Certificate serial: 0112
Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/C38216B8396E11F1992DA1BA96833773.roa
Signing time: Thu 16 Apr 2026 08:32:11 +0000
ROA not before: Thu 16 Apr 2026 08:32:11 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 38193
IP address blocks: 160.250.114.0/24 maxlen: 24
160.250.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B12A, serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Validity
Not Before: Apr 16 08:32:11 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69e09e8b-f4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:ee:a7:b4:64:ad:c9:a9:9a:4e:73:b8:46:
c1:14:50:19:81:d6:a8:51:5f:7d:00:f4:ee:88:08:
44:3e:b6:98:d7:df:d9:57:83:e8:5f:a3:16:c6:ed:
c9:20:4d:f1:96:dc:38:f9:c6:7f:d0:dc:ed:36:ff:
b5:35:13:ff:30:e5:ed:19:86:40:1f:40:06:24:51:
82:9a:2a:7d:d3:f2:46:68:ce:82:47:e6:64:20:6c:
d9:47:db:00:c2:ef:c5:57:9a:fd:e6:4b:56:26:bf:
01:06:ca:2b:c9:bc:3e:06:c7:0c:9a:4c:c8:9d:c6:
51:ba:7d:a1:9e:d4:b3:f4:f7:24:69:0b:67:f5:cd:
43:14:3c:4e:80:4c:e1:8f:09:46:13:7c:3b:5f:88:
7e:5b:6d:d5:b9:d8:38:77:1c:71:63:7d:fc:0d:50:
d3:35:33:1e:2d:74:fe:3e:8a:84:84:25:75:dc:cd:
b2:74:cf:f1:d4:a8:a2:8e:c6:86:2e:da:eb:2f:40:
67:71:91:7b:29:f6:78:59:76:72:a2:6d:c1:31:da:
15:2f:49:35:8f:7a:97:20:52:9e:9b:99:84:b1:48:
b9:6c:c1:f4:50:4d:e5:a3:5e:ae:97:e0:e5:63:bc:
d4:5f:60:06:de:b5:a6:ae:62:90:2c:88:d2:43:c1:
c5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EB:07:69:10:D3:B7:B9:2A:1C:4F:83:C3:87:5A:2B:EE:DE:22:F0
X509v3 Authority Key Identifier:
keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/C38216B8396E11F1992DA1BA96833773.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.114.0/23
Signature Algorithm: sha256WithRSAEncryption
32:bb:57:72:96:d4:43:3d:f9:f3:d7:1c:60:c5:a5:21:c9:b0:
bd:9e:ac:52:72:a9:17:2b:b8:5c:80:0b:e8:4e:7e:ea:90:a1:
12:82:5f:6f:87:c3:b0:e3:34:02:e9:85:7b:d7:0a:02:17:f9:
9f:c9:23:eb:17:05:20:53:97:5d:4f:9d:c8:85:33:0b:20:06:
e1:4e:7c:6c:35:56:07:70:f8:e7:85:3a:53:65:d7:7a:4d:5b:
91:7e:66:6f:08:68:56:93:40:5c:bc:e6:15:57:00:da:07:1d:
b6:1c:63:8f:8a:76:97:5b:97:a9:63:71:d3:3f:13:5c:26:80:
14:d8:10:54:ca:62:88:88:75:d8:e4:e9:05:12:4a:b3:c2:40:
0f:22:1b:44:fd:ab:17:6c:8c:86:7c:e6:d2:2a:17:1a:3c:c2:
ef:d8:28:95:2a:0f:7c:f2:1a:2d:b6:7e:c6:73:26:ec:0f:7c:
26:9f:d2:a3:91:e8:ae:52:83:66:29:9e:f8:94:7b:a5:bd:ad:
62:9c:a9:ce:a9:0c:0f:7a:b5:b4:b9:cb:5d:84:e9:99:b8:20:
61:3a:37:cc:ef:6d:2f:93:83:70:e3:99:18:be:89:0d:ce:c5:
84:33:49:33:a1:ac:84:07:78:bd:be:cc:44:c9:8f:49:b4:02:
f6:94:1a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:22 2026 by rpki-client