
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/8A0E66D647FC11EE838F6160C4F9AE02.roa
File: 8A0E66D647FC11EE838F6160C4F9AE02.roa (raw, json)
Hash identifier: G3bEqsGPHDTNrrpeTJ909el+rTlfPgko1ln0WcNdDDs=
Subject key identifier: FD:88:C5:5F:CD:BE:AF:45:9A:0A:88:1E:83:B9:E6:8E:7E:0C:D3:99
Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
Certificate serial: 0755
Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/8A0E66D647FC11EE838F6160C4F9AE02.roa
Signing time: Thu 04 Jun 2026 01:10:46 +0000
ROA not before: Thu 04 Jun 2026 01:10:46 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 150139
IP address blocks: 210.56.159.0/24 maxlen: 24
2403:6900:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl
rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1877 (0x755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
Validity
Not Before: Jun 4 01:10:46 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a20d096-11c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:a6:56:7b:37:f7:eb:f1:fc:45:5e:f8:a2:
70:c9:38:5b:2d:e7:7a:58:21:ba:b4:9b:8e:c3:6a:
11:72:9f:bb:0a:23:f4:8f:63:df:7d:13:24:1a:5a:
9e:2a:c2:98:7e:48:e3:c6:65:bc:60:0a:77:28:f2:
d6:ff:64:33:ed:ae:c3:72:ed:98:87:48:ff:6d:bf:
32:24:95:8d:36:67:d9:0a:ef:7d:db:7a:75:ab:79:
d2:2e:7e:ec:3f:e4:92:fe:5b:a0:fe:dd:1d:73:73:
46:85:25:80:8c:f3:72:ea:68:95:6c:ca:2e:16:3c:
86:a8:7b:83:73:04:5b:13:ee:a7:5d:05:ce:0b:e3:
a6:a7:9c:2a:7a:8d:6a:91:85:28:d4:0c:07:e2:fa:
a5:ba:69:c5:75:8b:8a:f8:e2:56:72:97:47:92:a0:
d8:2b:5e:f7:12:bc:a4:a7:cf:df:f3:d1:e1:b4:fe:
c8:94:8d:97:5b:25:8b:99:26:da:e1:17:18:88:01:
fe:27:50:4d:59:59:53:7a:ca:53:bc:cf:59:c5:3b:
77:92:e1:1b:e9:c2:c5:17:9b:8f:dc:e1:72:e3:b7:
62:e7:78:6d:a3:50:87:25:16:16:fd:a1:12:78:6a:
0a:a1:85:97:31:db:4d:86:51:3e:18:52:cd:e7:26:
52:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:88:C5:5F:CD:BE:AF:45:9A:0A:88:1E:83:B9:E6:8E:7E:0C:D3:99
X509v3 Authority Key Identifier:
keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/8A0E66D647FC11EE838F6160C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.56.159.0/24
IPv6:
2403:6900:c000::/36
Signature Algorithm: sha256WithRSAEncryption
3b:ab:93:60:ec:b6:20:a3:b1:95:24:77:92:49:41:44:69:1d:
c2:eb:fa:65:99:7a:05:1b:aa:20:ed:91:a5:66:f3:65:50:ed:
c9:95:64:4c:cb:42:f7:1f:db:5f:6b:d8:95:a3:35:7d:86:4a:
67:4d:72:0e:41:5b:2d:40:1b:ea:94:fa:73:ab:23:cf:02:8e:
63:58:85:0a:1d:f1:34:67:e9:2b:7f:9c:ba:0b:80:69:46:6f:
a4:40:2f:a4:77:20:22:ff:19:8d:9a:87:e7:02:1e:47:9b:ae:
65:fd:10:65:68:89:93:f1:fb:71:57:6a:b7:87:48:01:11:eb:
47:f4:c6:f4:10:a3:87:fa:35:cd:83:fd:64:2a:2e:70:3b:dc:
78:56:8f:d9:7b:50:2c:4d:71:af:db:fe:0a:26:00:a7:29:c4:
4c:14:53:88:cb:89:2b:8e:0e:92:c8:6c:11:97:e0:4c:51:ae:
8e:2e:20:34:d8:15:24:23:e7:84:65:82:85:4e:1b:da:0d:04:
0b:80:cd:66:61:75:aa:b6:d7:14:a2:31:19:47:c5:78:a0:1a:
62:49:b1:da:a6:4c:6b:7c:12:a4:f1:c5:1c:24:50:30:94:58:
5d:0c:a8:22:31:74:ac:54:20:0a:52:20:86:86:e6:69:91:6b:
b1:f9:41:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:51:14 2026 by rpki-client