
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/510308503E8211EBA910FF57C4F9AE02.roa
File: 510308503E8211EBA910FF57C4F9AE02.roa (raw, json)
Hash identifier: PjHH406K/ka7XNZ7a0h9GqbdKh0e4+H0cJO6YTJYTgA=
Subject key identifier: 55:61:B4:18:C0:1E:EC:8E:8B:50:5B:62:F4:91:FC:ED:85:CB:1E:7A
Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Certificate serial: 070B
Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/510308503E8211EBA910FF57C4F9AE02.roa
Signing time: Wed 02 Apr 2025 19:50:36 +0000
ROA not before: Wed 02 Apr 2025 19:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138915
IP address blocks: 194.26.72.0/24 maxlen: 24
194.26.73.0/24 maxlen: 24
194.26.74.0/24 maxlen: 24
194.26.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1803 (0x70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Validity
Not Before: Apr 2 19:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67ed950c-dddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:11:e1:3e:3f:31:39:bc:07:fe:62:75:b7:
a5:81:5a:44:fe:ec:a1:3a:54:c5:13:9e:08:36:4c:
a3:bb:85:bc:c4:11:74:5a:27:30:65:cc:9e:2b:9c:
51:be:b8:5b:39:1f:b2:c1:7e:b6:76:f5:7b:25:7e:
4e:55:c7:0c:53:d5:45:09:07:96:2d:cf:ed:0f:c6:
ed:2b:e0:a6:b1:29:f6:f7:69:63:89:6d:1c:e0:a8:
87:ee:f3:2c:ea:9e:b4:4f:c3:82:c9:16:c2:7d:ad:
0b:d8:1e:83:97:7f:91:9d:bf:ad:66:72:b6:f9:ad:
74:74:7a:dc:7b:ef:ca:37:31:1e:45:4e:41:f3:39:
01:87:0a:c0:9f:57:7f:35:02:79:02:78:47:ba:5b:
bd:a4:02:a0:76:bb:e0:d8:18:fd:ec:30:12:36:22:
14:60:db:df:25:7a:5f:44:1b:1b:68:3c:e3:86:ce:
01:39:5d:4a:32:dc:12:94:1f:8e:40:ab:c4:30:db:
1e:f7:22:77:25:f7:6c:59:a2:fa:9a:ca:4f:7e:12:
5d:e0:71:bf:5c:92:a5:f8:83:7d:d6:e5:b3:3d:3d:
b6:2e:f7:b4:87:e7:f5:51:e2:ca:be:d8:a3:34:e9:
33:de:00:a3:6e:60:19:cf:2d:e0:38:1f:2a:02:e5:
e4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:61:B4:18:C0:1E:EC:8E:8B:50:5B:62:F4:91:FC:ED:85:CB:1E:7A
X509v3 Authority Key Identifier:
keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/510308503E8211EBA910FF57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
194.26.72.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:25:e6:74:44:39:a5:0d:5b:ed:2a:ee:aa:97:9c:4a:1c:be:
fe:0e:0e:20:09:bf:a7:77:fc:70:da:3c:97:ab:dd:f7:13:f5:
0f:b5:05:ef:a1:fd:af:8b:2b:d7:c9:c9:7a:18:cf:3a:5f:fd:
87:64:f5:e2:e1:49:00:d5:ab:3a:fe:62:d2:c7:dc:d6:eb:fb:
ee:cc:97:da:33:a2:4f:5f:65:d2:d0:02:07:e0:59:68:b9:2f:
29:e0:c8:91:54:2a:1b:f7:04:38:e1:71:e0:46:6c:2c:a3:ae:
0d:86:3d:e7:d8:22:7b:f5:b6:79:56:9e:25:74:ff:05:78:c7:
71:13:31:0f:a9:f6:7d:e9:09:ff:e8:58:0e:04:1f:2b:7b:c4:
db:22:f1:c2:bc:ff:5f:8d:26:62:dc:5b:36:fe:41:8f:9d:f8:
96:a2:77:8b:7c:e8:68:e8:0c:4e:2b:b3:fd:dd:6a:90:31:74:
40:cf:94:13:a8:1b:5f:8f:f0:47:69:9f:cd:7e:a9:47:14:8f:
95:83:fc:05:ba:a0:3e:09:fa:9a:63:b5:f8:c5:66:83:c6:8d:
c8:15:a7:c8:ab:48:39:a3:66:e4:e6:dd:c8:f0:d6:09:36:2f:
a9:00:71:89:8f:78:07:f1:40:36:5b:fe:e1:0b:a6:e5:24:29:
85:7f:9b:ca
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx
NUM0QjUyMDkwHhcNMjUwNDAyMTk1MDM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2VkOTUwYy1kZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwnsR4T4/MTm8B/5idbelgVpE/uyhOlTFE54INkyju4W8xBF0WicwZcyeK5xR
vrhbOR+ywX62dvV7JX5OVccMU9VFCQeWLc/tD8btK+CmsSn292ljiW0c4KiH7vMs
6p60T8OCyRbCfa0L2B6Dl3+Rnb+tZnK2+a10dHrce+/KNzEeRU5B8zkBhwrAn1d/
NQJ5AnhHulu9pAKgdrvg2Bj97DASNiIUYNvfJXpfRBsbaDzjhs4BOV1KMtwSlB+O
QKvEMNse9yJ3JfdsWaL6mspPfhJd4HG/XJKl+IN91uWzPT22Lve0h+f1UeLKvtij
NOkz3gCjbmAZzy3gOB8qAuXkYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFVhtBjA
HuyOi1BbYvSR/O2Fyx56MB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF
ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkM4QUYvRUUwQUVFQ0EzRTgxMTFFQjlBQkQ5MjBGQzRGOUFFMDIvNTEwMzA4NTAz
RTgyMTFFQkE5MTBGRjU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALCGkgwDQYJKoZIhvcNAQELBQADggEBAF8l5nREOaUNW+0q
7qqXnEocvv4ODiAJv6d3/HDaPJer3fcT9Q+1Be+h/a+LK9fJyXoYzzpf/Ydk9eLh
SQDVqzr+YtLH3Nbr++7Ml9ozok9fZdLQAgfgWWi5LyngyJFUKhv3BDjhceBGbCyj
rg2GPefYInv1tnlWniV0/wV4x3ETMQ+p9n3pCf/oWA4EHyt7xNsi8cK8/1+NJmLc
Wzb+QY+d+Jaid4t86GjoDE4rs/3dapAxdEDPlBOoG1+P8Edpn81+qUcUj5WD/AW6
oD4J+ppjtfjFZoPGjcgVp8irSDmjZuTm3cjw1gk2L6kAcYmPeAfxQDZb/uELpuUk
KYV/m8o=
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:53:13 2025 by rpki-client