
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/08C7D93ACE8911EFBEC5D618C4F9AE02.roa
File: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (raw, json)
Hash identifier: G7Bwkehqq1kfSJpx3NYkM02mA2lPINtW/O+sAQ3wQIE=
Subject key identifier: 27:CD:F4:CA:19:2E:2D:10:E5:18:E0:6C:03:96:BA:BB:BA:0C:D1:88
Certificate issuer: /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Certificate serial: DC
Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/08C7D93ACE8911EFBEC5D618C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:15:44 +0000
ROA not before: Thu 29 Jan 2026 05:29:30 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153495
IP address blocks: 161.248.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Validity
Not Before: Jan 29 05:29:30 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a43c00-b2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:22:b1:b8:b4:8b:e5:b9:65:a5:d4:41:fd:
14:ea:50:6b:47:59:00:02:00:71:fb:77:0a:ee:24:
7c:51:10:80:f3:e9:d3:85:b7:59:e1:00:54:73:29:
7f:7b:76:55:7a:91:ec:d3:88:26:ba:07:a4:10:92:
7e:63:b5:5f:00:ad:ba:2f:da:31:cd:ad:e1:84:4f:
0f:d8:d1:5b:b3:10:40:32:54:d8:a4:39:95:dc:f0:
0d:ae:55:fc:a5:cc:be:a2:79:da:47:8b:3c:1e:0c:
ca:aa:b6:03:03:fb:d9:3a:1a:0a:11:8c:66:dc:2f:
09:26:4b:41:bd:9a:ca:92:ee:73:a0:84:6d:72:f4:
52:e6:48:a3:e9:a9:a1:4b:d6:27:e5:9f:0d:c1:de:
0a:a6:d8:08:24:8b:98:53:55:b7:cc:25:70:12:7d:
d5:5a:07:34:03:a9:12:25:a2:2d:4f:99:8a:22:fe:
42:ec:ec:4f:01:1c:c2:83:68:e9:ee:78:ba:84:c7:
d8:f6:29:a6:58:31:44:84:11:fa:b2:92:8b:71:e3:
d7:7c:7b:e8:1e:6a:86:92:dc:4e:e7:2e:79:a6:45:
27:26:f0:70:19:fd:11:ed:35:d8:8e:37:0d:8b:a5:
4c:5e:93:33:7e:eb:b7:36:f6:5c:07:4f:e5:b4:f3:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CD:F4:CA:19:2E:2D:10:E5:18:E0:6C:03:96:BA:BB:BA:0C:D1:88
X509v3 Authority Key Identifier:
keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/08C7D93ACE8911EFBEC5D618C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.130.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:3a:3f:41:02:30:eb:27:a8:08:0d:49:d1:52:3e:df:fc:b1:
1e:ba:03:de:3b:0b:a7:63:9d:3c:07:8b:c2:29:d1:8a:54:74:
a8:e3:54:3d:6c:0f:1d:10:8e:a0:d2:09:bd:65:f8:89:d4:a3:
4d:a6:90:19:d9:94:4c:54:86:eb:ee:63:4d:a7:5d:c2:ae:e0:
99:77:4b:1c:36:51:3d:91:93:a9:ee:b8:94:a7:73:12:03:2e:
2d:42:55:0b:94:9c:30:2b:89:0b:f9:36:e3:56:0d:1d:4d:13:
94:20:59:22:55:3b:3d:c5:55:d7:00:f6:c0:77:4f:56:85:a7:
9c:fd:44:56:50:7a:1d:9a:eb:19:5d:85:92:79:54:d1:7e:5f:
87:e3:25:a3:65:dd:10:61:aa:e1:c0:ac:51:34:46:6f:4c:31:
40:6b:b8:e0:0b:31:3e:05:fc:67:59:b7:2e:d9:86:79:c0:17:
4f:80:7b:1a:d8:08:32:36:0f:a8:74:5d:e8:d9:12:2d:61:b6:
56:7d:c6:19:e0:c9:80:be:9d:4e:90:b6:76:e6:93:c6:cb:b2:
27:01:21:7c:21:64:ad:47:c8:d0:87:a4:2b:a0:cb:12:c0:ca:
ee:e0:5e:31:ba:62:5f:f9:ef:07:17:eb:27:cc:98:40:61:34:
63:95:24:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:16 2026 by rpki-client