
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/82F618E6187311F0A89EDE11C4F9AE02.roa
File: 82F618E6187311F0A89EDE11C4F9AE02.roa (raw, json)
Hash identifier: xIQORAl53eQLWRRXQOIoiissQk7N3FpNzgw3AMp5Aho=
Subject key identifier: 4A:50:CC:28:73:C1:D4:B3:DD:05:7E:DF:96:4E:82:AE:6A:68:D5:F6
Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial: 0E01
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/82F618E6187311F0A89EDE11C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:39:53 +0000
ROA not before: Tue 20 Jan 2026 18:15:16 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 59239
IP address blocks: 103.200.37.0/24 maxlen: 24
103.200.38.0/24 maxlen: 24
123.253.66.0/24 maxlen: 24
123.253.67.0/24 maxlen: 24
2401:1040::/48 maxlen: 48
2401:1040:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3585 (0xe01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Validity
Not Before: Jan 20 18:15:16 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a479e9-ca1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:28:04:08:e4:08:08:63:5c:11:5d:47:10:
61:ef:32:41:06:ff:17:9f:4c:42:43:3d:10:c0:f5:
a4:ca:8f:12:84:f5:f3:0d:5e:68:50:a4:06:62:22:
08:f3:b5:aa:a6:1b:1a:0e:e1:46:f4:e7:4a:2a:5c:
f0:c9:61:d7:d8:56:6b:fa:48:2d:9d:82:34:f6:bc:
82:52:93:7b:0f:e1:6a:6c:bd:be:99:25:bb:aa:4c:
a2:f0:d1:c2:11:90:c1:f3:5c:12:87:cc:d8:e9:40:
32:2d:8f:a7:2b:d5:d2:e0:bf:a5:65:ae:aa:b3:dc:
75:8b:00:fe:46:c9:b0:0b:3c:0f:23:e3:4a:5d:bd:
96:9e:bd:0d:3b:99:56:7c:71:ac:c7:d7:95:d9:bd:
f3:5c:d1:8e:7b:f2:68:1a:6c:9b:32:b4:38:e0:a3:
6a:15:82:0c:dc:5c:e0:26:10:ef:fd:5f:3d:1f:bb:
3e:0d:a0:80:e5:d6:e9:0d:a5:e3:d5:d8:af:56:16:
58:63:8e:63:3b:8e:55:b9:b9:ed:f7:8e:36:35:11:
63:6d:af:2a:ac:fb:ac:36:42:ad:c0:2a:2f:81:7c:
51:9a:51:65:ab:35:57:c5:64:5f:a5:60:65:d3:c5:
38:e9:24:71:9a:94:b6:b0:86:a5:ea:a2:f0:3f:8c:
00:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:50:CC:28:73:C1:D4:B3:DD:05:7E:DF:96:4E:82:AE:6A:68:D5:F6
X509v3 Authority Key Identifier:
keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/82F618E6187311F0A89EDE11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.200.37.0-103.200.38.255
123.253.66.0/23
IPv6:
2401:1040::/48
2401:1040:2::/48
Signature Algorithm: sha256WithRSAEncryption
1f:ca:6d:59:35:fe:5e:0d:16:4c:4a:cf:38:52:51:cd:04:d4:
38:bc:c7:b7:d1:d2:08:46:47:db:a4:b0:4f:f4:d5:52:2f:5b:
0a:c7:80:ea:dc:ef:f0:dc:0f:4f:59:24:c1:43:b4:d5:7a:3a:
d1:bf:9f:d3:98:50:7e:8c:e9:e2:88:ab:f4:fc:87:40:64:45:
09:01:75:94:1e:fc:c6:97:71:52:47:99:dd:6e:d0:a5:13:ac:
2b:85:dd:d3:df:b0:07:51:93:57:96:59:98:7c:56:d6:a5:fb:
de:4a:14:ed:81:26:c1:71:97:f5:23:eb:ba:a8:35:2e:10:46:
4a:ed:fd:f3:1a:e9:aa:c8:af:53:ce:82:00:91:7f:dc:69:f6:
f7:22:aa:85:6f:a1:43:d0:77:bc:20:45:2b:14:be:25:91:b1:
18:b3:22:9a:24:37:d6:b6:fb:ca:92:9e:b1:3f:20:66:fc:86:
36:60:5f:60:a6:1b:48:b7:20:c9:d8:d9:66:e5:2c:e5:42:cf:
32:ee:6d:cb:97:48:ea:1b:46:47:e1:5f:eb:2c:b6:9e:94:2d:
b3:7c:68:69:cd:28:5e:53:e0:92:bc:3e:57:9a:f2:26:f0:a6:
45:7a:d6:a2:5e:06:66:b0:d3:32:3d:02:70:55:81:78:43:9d:
bd:f9:56:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:31 2026 by rpki-client