
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/7FE5F2CEDB9411E9832A463AC4F9AE02.roa
File: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (raw, json)
Hash identifier: J9d3oCMnh4MCQUF8hvG6C1s4rT5lBz2hVV4fQZpMFs4=
Subject key identifier: CD:CF:07:0A:88:25:28:F9:48:6D:E4:E0:71:39:11:09:85:AF:2F:7E
Certificate issuer: /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
Certificate serial: 3560
Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/7FE5F2CEDB9411E9832A463AC4F9AE02.roa
Signing time: Thu 04 Jun 2026 16:13:10 +0000
ROA not before: Thu 04 Jun 2026 16:13:10 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 56293
IP address blocks: 59.153.84.0/22 maxlen: 24
103.10.20.0/22 maxlen: 24
2400:db80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl
rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13664 (0x3560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B4DB, serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6
Validity
Not Before: Jun 4 16:13:10 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a21a416-2e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:09:d9:19:de:79:1d:a4:34:37:4c:da:2c:98:
c7:86:09:15:c2:1a:e1:39:5e:8a:71:75:db:86:14:
00:b0:1d:af:93:20:1f:55:79:8f:fb:86:52:21:15:
33:80:22:4c:5a:f5:22:7d:b7:49:51:1b:80:04:28:
6e:26:9b:c5:b3:c1:59:47:a2:07:59:83:33:67:97:
52:f6:0a:e1:0c:61:17:87:78:b0:3d:2a:5c:8c:35:
70:22:18:4e:02:79:9a:b3:0b:68:99:d1:16:47:72:
af:04:b4:e0:53:a2:84:1e:23:f7:80:e6:27:a6:e8:
c3:2a:41:b3:8b:43:53:9e:d6:4b:c0:18:6d:6c:bc:
84:6c:74:80:42:e2:7e:7f:80:b5:59:1a:3a:80:fc:
2a:1f:7b:10:b7:1d:1d:7d:65:45:e5:d5:cf:43:b9:
40:9e:01:b9:36:6b:69:57:89:54:76:32:1f:13:78:
a8:74:30:bb:3a:ce:de:70:3a:5f:35:0b:9b:24:a7:
4e:91:5f:58:d7:04:39:cd:3f:ac:b1:60:29:8b:58:
74:d3:7a:21:e5:2a:a4:e6:99:4e:0e:5c:b9:08:14:
cb:ab:20:3a:fa:8a:a8:dd:1f:c2:69:bb:a4:9b:77:
b4:11:b3:f2:2d:c6:69:7b:78:1a:b4:e1:7b:69:31:
fd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CF:07:0A:88:25:28:F9:48:6D:E4:E0:71:39:11:09:85:AF:2F:7E
X509v3 Authority Key Identifier:
keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/7FE5F2CEDB9411E9832A463AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
59.153.84.0/22
103.10.20.0/22
IPv6:
2400:db80::/32
Signature Algorithm: sha256WithRSAEncryption
9e:49:d0:61:ab:28:e7:74:b8:2d:ce:ca:2e:eb:66:3e:4a:29:
6d:fd:a6:89:0b:03:00:85:58:e5:f6:8c:13:c4:ed:d5:64:d2:
02:4a:08:50:9f:9b:82:89:5d:77:3a:89:35:92:68:20:1a:06:
c4:a5:bf:30:19:da:34:2a:60:36:55:53:64:32:2c:fb:eb:a9:
6e:00:96:68:0e:e8:18:9d:d8:df:fa:83:ec:d8:0d:14:d5:89:
59:a3:ce:0b:81:c3:8d:ab:f6:a1:36:d3:c8:f1:9e:18:2d:07:
86:83:be:dc:94:fb:73:ef:30:6c:e7:2c:c3:ad:b1:b3:5b:1c:
cf:39:64:25:1a:84:4e:1e:9b:8f:df:18:fc:5e:30:d3:ba:27:
4b:39:4b:1e:fb:b7:30:b1:ca:ad:1c:57:61:47:93:3d:51:5e:
68:db:78:1e:c3:cf:29:ac:95:27:13:30:48:66:17:19:b8:72:
4b:1c:0f:b4:c2:18:7a:57:be:f1:1f:f5:c1:60:bf:ad:b8:64:
86:df:df:f4:5c:2c:c9:2c:c2:ee:97:b3:7f:01:09:5a:ad:3b:
57:25:a9:dd:82:6d:39:2b:59:f7:b7:95:f6:ee:10:b7:83:f3:
69:a1:42:9f:c9:20:d2:ae:e7:c3:97:6d:b5:c4:fb:a1:92:b7:
45:2b:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:59:13 2026 by rpki-client