
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/ABE8518A18DA11F08FC68386C4F9AE02.roa
File: ABE8518A18DA11F08FC68386C4F9AE02.roa (raw, json)
Hash identifier: FdyevIyWCMU3BsPK8pup9Daz8b6pCeZZ5abWmPf2d1I=
Subject key identifier: 90:C5:30:AB:DF:6A:A7:C3:30:9A:A3:A8:41:A1:8D:43:3C:55:1D:E1
Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Certificate serial: 352E
Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/ABE8518A18DA11F08FC68386C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:34:41 +0000
ROA not before: Tue 16 Sep 2025 14:50:47 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 7700
IP address blocks: 103.30.32.0/22 maxlen: 22
202.63.224.0/20 maxlen: 24
221.120.112.0/21 maxlen: 21
221.120.120.0/21 maxlen: 21
2402:ce00::/32 maxlen: 32
2402:ce01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:58:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13614 (0x352e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Validity
Not Before: Sep 16 14:50:47 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a44071-0b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:ec:83:9a:3c:43:0d:3d:b0:ed:d8:10:b1:
8c:52:b7:9c:01:c6:60:a9:58:9b:10:e6:11:e5:00:
45:0c:25:80:44:ae:e2:88:9f:38:15:e6:54:2d:3e:
ad:95:8d:11:36:5c:15:87:cc:20:5a:af:68:e2:14:
16:96:64:de:98:57:56:4f:02:3c:63:9a:07:bc:a6:
87:86:0a:5d:dd:d7:9f:85:c5:a0:32:ab:64:d9:26:
75:ca:74:75:4d:4f:24:23:f6:5c:ed:7a:5d:4c:58:
0d:19:7c:e2:ce:db:12:7e:5f:39:b1:b5:c8:ab:4c:
d6:89:bd:a6:e1:8b:df:c7:16:83:68:df:ad:60:02:
52:10:4e:6e:ff:87:d2:70:ad:12:f9:6b:29:c4:68:
9d:e6:00:cc:06:f9:c1:1f:d4:35:1c:50:52:27:91:
4f:0f:8f:e8:7f:d5:d9:d1:79:d7:59:af:95:a8:66:
15:da:35:28:dd:37:54:78:6f:3f:95:fa:ed:2c:22:
e0:1a:c7:8a:43:33:20:f4:5b:36:d9:0e:27:0d:76:
f7:9e:68:4e:59:7e:d7:d1:27:9a:7c:a6:1e:52:76:
c8:73:e1:57:63:8f:5c:5a:32:bd:ad:0c:32:1f:22:
a3:f1:80:4e:06:ab:8d:59:8f:d8:d1:dd:5a:82:22:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C5:30:AB:DF:6A:A7:C3:30:9A:A3:A8:41:A1:8D:43:3C:55:1D:E1
X509v3 Authority Key Identifier:
keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/ABE8518A18DA11F08FC68386C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.30.32.0/22
202.63.224.0/20
221.120.112.0/20
IPv6:
2402:ce00::/31
Signature Algorithm: sha256WithRSAEncryption
05:0a:96:24:53:60:62:5e:39:9f:47:d7:7d:a5:06:4e:ae:35:
ca:06:c5:de:78:78:ee:e8:e1:a4:53:2c:fd:47:0d:51:11:22:
85:4a:eb:31:ff:3e:53:87:fc:04:fd:6d:ac:11:61:13:7d:5e:
2c:bf:67:64:80:9c:c0:67:63:2c:07:92:d5:98:e6:9e:a3:1e:
75:db:20:e3:8a:83:60:f4:33:7c:de:3e:a4:eb:22:0f:14:b0:
5c:9b:1d:50:59:4d:5a:87:a6:89:25:fa:a2:87:e5:51:5a:b9:
c4:ff:7c:6a:8c:15:7f:25:08:a6:6a:b2:94:5b:21:11:1a:c5:
6a:a6:2a:33:2f:c0:bf:67:12:38:66:fe:18:a4:3e:b3:74:5c:
74:b2:f8:b8:17:44:49:71:cc:32:5e:f8:be:09:79:05:f5:94:
e3:29:28:8b:0a:25:70:2e:3b:07:08:37:ad:e2:57:31:98:37:
ee:67:3a:21:d1:05:47:9b:28:ed:f6:94:08:fb:88:c9:a7:af:
25:a3:27:75:bc:69:48:ca:7a:d9:27:d7:e9:69:cc:b4:07:d6:
be:1d:b8:93:cf:3b:2f:61:58:a3:0f:82:ad:de:e6:58:60:5f:
3c:ee:88:b9:2d:6a:7b:a0:a6:ae:05:cf:28:f7:4d:01:e6:de:
93:3c:1f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:25 2026 by rpki-client