
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/E58351049F2011EE8D92FF5EC4F9AE02.roa
File: E58351049F2011EE8D92FF5EC4F9AE02.roa (raw, json)
Hash identifier: 371rZFT06QQZXuImrGUztiEpwJgbqjigOCtsTXlfZ5Q=
Subject key identifier: 51:5E:B0:4C:CB:C1:EC:4C:69:E3:51:5D:29:6A:25:CB:38:5A:F8:3A
Certificate issuer: /CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
Certificate serial: 025B
Authority key identifier: E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/E58351049F2011EE8D92FF5EC4F9AE02.roa
Signing time: Tue 15 Sep 2026 02:52:33 +0000
ROA not before: Tue 15 Sep 2026 02:52:33 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 45650
IP address blocks: 103.246.64.0/23 maxlen: 24
2001:df2:c540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl
rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB99, serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
Validity
Not Before: Sep 15 02:52:33 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa8b2f1-e401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:ba:98:12:61:a5:02:f4:e3:4f:a6:fa:bb:
e0:57:c7:22:4a:a1:d3:97:09:b8:d4:57:d8:52:98:
b7:19:df:e5:de:e9:a5:24:a8:33:35:af:e9:3c:fc:
4f:2f:c9:7b:ee:3b:19:bd:bd:8a:cf:f8:9e:79:df:
33:de:4b:f8:b3:2a:f0:5e:f9:39:52:3b:54:2f:b8:
73:3e:fc:4d:c5:86:b3:f8:62:5b:c9:3a:7a:6b:21:
19:0e:69:33:58:83:68:49:00:26:b9:66:db:67:f4:
c0:a5:57:4f:95:da:48:2f:2b:3c:b6:d2:c8:c5:b8:
7d:b6:02:4e:47:09:be:17:fb:7d:fe:11:49:54:ce:
e7:3a:93:a8:9b:c6:2f:17:a5:b9:f8:2d:91:ab:d0:
d7:bf:41:7f:26:cd:b0:b9:8a:71:d3:af:9d:40:d0:
54:18:65:0c:7f:ee:88:83:ba:6c:98:cb:08:ae:52:
13:b0:1d:9c:e1:50:e8:a8:86:4e:7c:b3:0a:be:35:
b0:11:6e:3f:2b:cc:ee:63:35:7a:8c:48:eb:1c:ab:
69:57:01:a4:b6:94:fd:64:24:a8:76:36:8d:3e:43:
27:a5:df:35:db:9a:c9:01:9d:c3:eb:86:fc:82:8c:
22:eb:fb:7e:ee:7e:93:2b:3a:71:20:74:3b:8b:71:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5E:B0:4C:CB:C1:EC:4C:69:E3:51:5D:29:6A:25:CB:38:5A:F8:3A
X509v3 Authority Key Identifier:
keyid:E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/E58351049F2011EE8D92FF5EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.246.64.0/23
IPv6:
2001:df2:c540::/48
Signature Algorithm: sha256WithRSAEncryption
40:e9:18:55:06:6f:05:fd:0e:95:b3:31:1c:5c:5d:0c:14:0c:
48:3b:3e:57:f3:4d:8c:af:5a:a3:40:aa:1b:4c:11:09:53:cd:
4b:61:7b:7f:b6:be:3a:cb:41:85:cb:76:55:1b:83:5b:f8:84:
91:ec:6a:ef:a8:2a:e2:10:a7:52:33:89:44:a8:a1:cb:07:f5:
e4:b1:69:52:61:50:74:e5:bb:61:9e:7b:07:32:7f:0f:25:47:
b7:f1:3a:4a:d8:82:3c:74:40:d2:bb:20:5e:1e:41:00:76:2a:
72:d9:e2:8e:88:79:c7:c4:4d:c3:e0:0d:04:ff:53:46:61:e7:
b0:0d:20:83:45:46:5f:e0:f3:80:a3:17:51:d0:99:b3:a1:3e:
bf:97:c7:da:70:61:b0:11:7c:5a:f0:ce:ba:b0:27:af:a6:d0:
b4:cd:b5:1e:5c:d1:d4:f9:3f:3c:b0:7e:41:fd:17:07:56:0e:
d2:89:42:6d:94:b1:57:44:b4:db:74:8c:20:05:98:9f:69:f6:
63:dc:b9:a5:ae:07:b3:72:08:37:c8:3e:eb:ec:4b:81:fa:1b:
fd:20:73:85:a8:f6:ba:45:02:09:24:14:88:1c:a8:0c:80:ff:
7c:91:bc:d6:74:fb:cf:d5:e2:b4:95:6a:d6:b7:2b:90:f6:7f:
73:85:51:39
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRCOTkxMTAvBgNVBAUTKEU5ODYxMkVFRUE0QUU3MEQxRkI1QjY1MjRCOTY5RDQ3
NDJEQ0U4MTAwHhcNMjYwOTE1MDI1MjMzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWE4YjJmMS1lNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAljq6mBJhpQL040+m+rvgV8ciSqHTlwm41FfYUpi3Gd/l3umlJKgzNa/pPPxP
L8l77jsZvb2Kz/ieed8z3kv4syrwXvk5UjtUL7hzPvxNxYaz+GJbyTp6ayEZDmkz
WINoSQAmuWbbZ/TApVdPldpILys8ttLIxbh9tgJORwm+F/t9/hFJVM7nOpOom8Yv
F6W5+C2Rq9DXv0F/Js2wuYpx06+dQNBUGGUMf+6Ig7psmMsIrlITsB2c4VDoqIZO
fLMKvjWwEW4/K8zuYzV6jEjrHKtpVwGktpT9ZCSodjaNPkMnpd8125rJAZ3D64b8
gowi6/t+7n6TKzpxIHQ7i3G/FwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFFesEzL
wexMaeNRXSlqJcs4Wvg6MB8GA1UdIwQYMBaAFOmGEu7qSucNH7W2UkuWnUdC3OgQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI5OS9CQzY1OUJDNjMx
QjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3MGZ0YlpTUzVhZFIwTGM2
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZZWVM3dXBLNXcwZnRiWlNTNWFkUjBMYzZCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkRCOTkvQkM2NTlCQzYzMUI0MTFFRUI1NTFGMjExQzRGOUFFMDIvRTU4MzUxMDQ5
RjIwMTFFRThEOTJGRjVFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ/ZAMA8EAgACMAkDBwAgAQ3yxUAwDQYJKoZIhvcNAQELBQADggEB
AEDpGFUGbwX9DpWzMRxcXQwUDEg7PlfzTYyvWqNAqhtMEQlTzUthe3+2vjrLQYXL
dlUbg1v4hJHsau+oKuIQp1IziUSoocsH9eSxaVJhUHTlu2Geewcyfw8lR7fxOkrY
gjx0QNK7IF4eQQB2KnLZ4o6IecfETcPgDQT/U0Zh57ANIINFRl/g84CjF1HQmbOh
Pr+Xx9pwYbARfFrwzrqwJ6+m0LTNtR5c0dT5PzywfkH9FwdWDtKJQm2UsVdEtNt0
jCAFmJ9p9mPcuaWuB7NyCDfIPuvsS4H6G/0gc4Wo9rpFAgkkFIgcqAyA/3yRvNZ0
+8/V4rSVata3K5D2f3OFUTk=
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:39:37 2026 by rpki-client