
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/ABE8518A18DA11F08FC68386C4F9AE02.roa
File: ABE8518A18DA11F08FC68386C4F9AE02.roa (raw, json)
Hash identifier: 0OdTWHoxd21Qjwnz0s44P4D4gReHVyaUQbCaa6G9U74=
Subject key identifier: B2:55:B6:F8:42:B2:C2:C7:F3:62:0C:16:9A:CC:66:2E:04:03:5A:3F
Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Certificate serial: 357E
Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/ABE8518A18DA11F08FC68386C4F9AE02.roa
Signing time: Tue 28 Jul 2026 15:17:05 +0000
ROA not before: Tue 28 Jul 2026 15:17:05 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 7700
IP address blocks: 103.30.32.0/22 maxlen: 22
202.63.224.0/20 maxlen: 24
221.120.112.0/21 maxlen: 21
221.120.120.0/21 maxlen: 21
2402:ce00::/32 maxlen: 32
2402:ce01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13694 (0x357e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Validity
Not Before: Jul 28 15:17:05 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a68c7f1-354d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:ab:ec:04:6c:3d:4b:fb:0c:66:89:57:53:
87:dd:be:8b:5b:8b:b4:80:2c:b9:60:03:55:2c:2b:
a0:78:01:ba:34:6e:7b:5e:22:f8:51:2e:d3:69:e5:
03:8c:ee:c1:c8:50:42:64:f7:c9:9d:91:7f:cb:3c:
57:66:b6:13:06:04:4f:b5:08:24:1c:a0:5d:5d:84:
72:5d:3e:b2:d7:2c:bc:4b:cf:a5:78:a7:61:9d:10:
bb:90:13:51:87:93:b0:e2:39:d9:2d:82:59:67:50:
8f:e1:6e:f2:a1:39:83:b4:f6:b3:69:1b:38:7d:90:
7f:02:5e:77:1c:cd:04:eb:be:22:77:d0:3a:24:a0:
42:48:8f:cc:68:53:39:aa:56:2b:7a:07:6d:c0:f1:
bf:38:ed:a3:f5:80:16:44:73:0d:3c:b8:65:e9:b1:
ec:d9:03:ee:85:fb:7b:0b:df:87:0b:69:61:10:ae:
76:dc:2c:bf:72:0f:60:ae:fe:2f:63:fe:05:fc:6d:
16:c4:0c:6b:66:fd:05:40:40:b7:06:f6:af:a6:35:
69:94:06:da:d4:12:4b:78:c7:f5:49:ca:5a:c1:e1:
9d:d7:3e:99:c5:7c:13:7f:98:00:32:75:d7:3b:4b:
51:0e:94:8b:87:be:a6:ea:40:c8:ce:8a:14:7f:68:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:55:B6:F8:42:B2:C2:C7:F3:62:0C:16:9A:CC:66:2E:04:03:5A:3F
X509v3 Authority Key Identifier:
keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/ABE8518A18DA11F08FC68386C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.30.32.0/22
202.63.224.0/20
221.120.112.0/20
IPv6:
2402:ce00::/31
Signature Algorithm: sha256WithRSAEncryption
c5:22:d8:f7:ed:ad:1c:80:d2:6a:d0:6f:0b:71:23:7c:ad:3a:
3d:47:c2:4e:e1:df:d4:48:f9:63:a1:bd:15:57:bb:90:28:d4:
57:66:69:b2:3a:19:ef:6c:e0:11:5a:09:0a:f0:74:c1:b0:8b:
18:fb:68:9f:03:65:52:f1:2d:5b:31:35:c9:fa:e6:e7:28:1f:
0d:e8:76:bd:d1:f5:c5:13:3e:73:e6:06:74:1f:eb:15:c1:dd:
54:72:62:45:1c:fd:49:52:54:a1:2a:04:06:0e:e5:bb:dc:aa:
2b:75:76:af:15:78:33:05:db:f4:9e:e8:6b:e9:24:5e:cb:44:
b6:23:80:d8:6d:46:ba:9e:92:87:2b:c3:27:91:63:37:a9:5a:
1f:13:ed:d3:04:34:86:6e:15:9c:a1:d2:2c:bd:e5:85:82:18:
7a:43:89:eb:f2:70:49:bc:09:e7:b7:4c:93:27:1c:3a:0a:da:
11:d6:e4:51:5a:be:70:6f:2f:c0:f1:e9:29:5b:f9:2a:25:b0:
a5:26:47:de:46:9e:ed:00:da:f6:ac:1a:95:58:e0:23:d1:2c:
5a:fe:ec:05:e2:1f:7b:f7:26:c6:22:0a:0b:69:63:9b:63:1a:
9c:ed:fd:54:b3:06:08:5e:54:e8:1a:54:38:b5:59:51:5e:de:
dc:c4:8f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:54 2026 by rpki-client