
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/4F69940080B811EBBEE2CA7FC4F9AE02.roa
File: 4F69940080B811EBBEE2CA7FC4F9AE02.roa (raw, json)
Hash identifier: rWBDRxRt+OWAOVFVyj2pL7LBcz26nnTnNnRZncE9Poc=
Subject key identifier: 03:36:09:F9:09:0F:01:82:D9:61:BC:87:7C:E7:AC:A6:BE:C4:0E:F8
Certificate issuer: /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
Certificate serial: 078A
Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/4F69940080B811EBBEE2CA7FC4F9AE02.roa
Signing time: Fri 30 Oct 2026 22:42:23 +0000
ROA not before: Fri 30 Oct 2026 22:42:23 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 133206
IP address blocks: 103.75.134.0/23 maxlen: 23
103.204.240.0/22 maxlen: 22
203.76.224.0/22 maxlen: 22
2404:d4c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl
rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 21:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1930 (0x78a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
Validity
Not Before: Oct 30 22:42:23 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ae51d4f-69cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:56:93:c7:a1:c0:f2:87:e4:b6:0f:47:39:
7e:82:de:b1:cd:5c:a1:7b:51:af:79:c9:70:a1:99:
9a:e2:2a:e8:33:af:1b:5a:41:ae:b7:1a:47:d7:00:
8d:56:b7:d5:3f:a1:c3:43:74:a4:b2:59:c9:4c:5d:
8e:35:86:f2:50:d8:25:0a:10:f3:76:37:47:88:f8:
e4:64:d4:11:19:9a:f2:6a:4b:81:ba:61:1b:40:0d:
80:8e:6b:8f:64:30:b1:20:88:ef:f5:2f:16:e5:3a:
1e:57:66:85:c2:98:80:f3:81:e7:f0:8e:83:d2:b2:
3d:ef:cd:4b:70:bf:03:7e:c8:95:c6:37:64:f3:fb:
31:ed:d1:46:c8:2b:59:32:44:e0:78:77:6c:c3:9d:
7d:a2:b1:4e:4b:83:f3:a9:91:d4:46:dd:45:27:50:
51:29:88:67:fa:74:d1:fb:23:58:12:c6:80:fe:ae:
11:8f:ae:90:43:8c:ac:e9:f6:e2:e5:ff:1d:89:b0:
66:e4:c2:2e:1a:69:c9:3e:2f:40:b1:2f:80:a6:6a:
f0:31:39:3f:69:54:f6:c3:b8:1d:cb:1e:d1:5c:c1:
be:a3:a0:c6:61:56:8a:f0:cb:8f:54:dc:91:d7:cd:
9f:4d:2a:a5:e1:f8:72:fe:04:33:db:f9:83:2f:1f:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:36:09:F9:09:0F:01:82:D9:61:BC:87:7C:E7:AC:A6:BE:C4:0E:F8
X509v3 Authority Key Identifier:
keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/4F69940080B811EBBEE2CA7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.75.134.0/23
103.204.240.0/22
203.76.224.0/22
IPv6:
2404:d4c0::/32
Signature Algorithm: sha256WithRSAEncryption
30:b5:9e:6b:5b:70:7d:c1:cb:14:bb:46:9b:21:89:fa:0f:a2:
57:bc:f9:7f:3a:b6:fc:6e:67:6c:1e:cc:cd:41:4a:7d:9f:87:
88:d3:8f:33:51:69:74:8d:6d:79:fc:fe:af:50:d6:e3:c4:cc:
24:b1:05:1f:da:31:ca:e6:a6:bc:5d:7f:e7:d1:ff:6e:b9:d5:
ba:4f:7a:c6:0e:b1:13:eb:8f:c9:46:dd:2a:02:fc:79:84:b4:
1e:9e:f3:8d:f3:a6:df:dc:3e:7e:d6:80:62:5f:c6:64:1c:e4:
63:84:01:80:ed:eb:d8:37:bf:2b:5b:33:e5:35:45:91:33:37:
a2:af:18:37:eb:24:f1:07:3c:b4:9f:35:82:18:a3:6b:cb:81:
d8:0a:d0:5f:4e:28:5e:d9:d3:c9:3c:5a:03:19:8d:98:c8:42:
2e:ca:81:0b:18:8a:98:7c:0b:3f:28:35:93:c2:6e:00:8a:77:
76:3a:48:bd:6c:a4:09:3c:6c:26:d8:08:5a:20:3b:8b:34:cb:
5e:16:e7:a3:6e:67:48:2d:dc:23:36:19:0d:a8:a0:12:6a:37:
8d:8e:7a:5c:cb:85:8c:1c:53:e2:27:8e:b1:53:59:4f:cf:82:
8d:4d:ed:93:ae:cb:e3:dd:20:a2:cb:83:72:5a:82:6c:1d:ce:
ae:4f:40:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:59:50 2026 by rpki-client