
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/C2E32E34466B11EE988B243DC4F9AE02.roa
File: C2E32E34466B11EE988B243DC4F9AE02.roa (raw, json)
Hash identifier: AIFJy6tyFcteuwDpDTLrXHVY3zOX+wOFLhJqRTUM3mU=
Subject key identifier: 93:10:DA:89:F6:72:53:90:7A:4F:78:0A:A5:D7:65:8A:75:95:53:11
Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Certificate serial: 0AF6
Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/C2E32E34466B11EE988B243DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:00:35 +0000
ROA not before: Sun 22 Feb 2026 19:16:38 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 149419
IP address blocks: 123.108.92.0/24 maxlen: 24
123.108.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2806 (0xaf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Validity
Not Before: Feb 22 19:16:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a462a3-167f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:c4:fb:32:3c:e4:b7:3a:33:74:c4:2c:ef:
ef:16:e8:c8:69:81:e8:44:89:ff:66:aa:8b:bb:5a:
c9:5e:5d:31:a2:01:9d:dd:c7:69:f4:db:b8:0e:a2:
8a:3b:16:8a:88:ad:4b:32:8e:10:97:20:c7:e7:91:
b0:f7:0a:fa:88:f8:68:1e:6d:14:61:1c:2d:ee:05:
0f:49:5e:8b:87:fa:16:69:59:e9:56:3b:a2:72:ba:
a2:da:1f:22:e4:ca:a7:d8:f4:65:40:ca:cb:ba:af:
57:30:4b:82:f2:b7:ad:0f:c5:06:8b:e5:1d:13:91:
de:95:2e:11:09:d2:9c:5b:c2:8c:6d:19:82:2c:69:
4c:20:f7:a8:a2:d0:15:16:8d:9c:0c:88:d3:34:1a:
11:54:86:d3:a9:6e:35:b2:e4:24:84:46:6f:d9:11:
64:fb:58:4a:5e:34:d8:38:1e:58:e9:42:79:7e:36:
2a:b4:c2:32:2d:e6:7f:1a:47:6e:5c:cc:d5:14:c9:
14:5f:0c:69:e7:ec:0a:3a:8a:8e:ea:8f:93:f2:4a:
84:b2:a8:c5:58:3b:3c:ba:50:0f:af:42:ba:19:62:
f4:9b:9c:48:17:c8:e1:e9:f6:9f:35:b1:38:5d:0d:
ce:d8:6f:f9:2c:3d:e1:8b:fd:eb:b7:2c:9e:c1:f6:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:10:DA:89:F6:72:53:90:7A:4F:78:0A:A5:D7:65:8A:75:95:53:11
X509v3 Authority Key Identifier:
keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/C2E32E34466B11EE988B243DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
123.108.92.0/23
Signature Algorithm: sha256WithRSAEncryption
39:e0:e7:5e:1f:db:b4:f0:ee:b6:e1:de:78:dd:82:f1:25:e1:
40:40:cf:4f:da:6d:d8:49:9b:9d:0d:ec:4c:1c:57:06:ff:8e:
41:85:ac:14:05:42:c0:a1:a9:5c:a9:93:e3:67:e5:8f:6f:e3:
61:4e:e9:a1:3c:42:2d:42:b6:a0:5c:41:f3:b0:55:45:02:ae:
92:3f:59:3d:30:ec:65:5a:8d:0f:08:79:db:93:96:6d:d6:99:
88:90:99:2b:dd:28:fb:49:d5:37:cf:56:52:cb:c2:74:0e:35:
35:d3:9a:5c:a7:4e:c9:18:e0:d5:a3:c9:28:ab:39:da:15:d0:
c8:45:a6:11:d2:fd:c8:6a:73:1b:11:7a:f1:a5:27:a2:b5:cb:
28:9d:fe:a2:32:81:80:7f:6a:f0:c9:de:56:3d:01:2e:1b:6c:
2a:62:da:f8:5c:3c:e9:f0:50:ee:83:85:36:55:80:02:aa:2f:
f6:6c:aa:91:65:09:ae:df:bb:3f:69:af:8d:d6:72:39:a1:f9:
fd:bc:16:03:3a:e0:25:c0:0e:a4:92:e3:2e:6d:01:1c:51:c1:
88:8a:09:0f:4c:8e:42:20:75:ad:b4:cb:b6:03:d0:10:e2:df:
5d:57:5c:3a:a5:9f:d0:8b:34:82:61:d6:fe:64:f9:2e:8c:d4:
22:ca:38:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:06 2026 by rpki-client