
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/09EC8E16662211EFB6FA446CC4F9AE02.roa
File: 09EC8E16662211EFB6FA446CC4F9AE02.roa (raw, json)
Hash identifier: GiapmCGsSb4IjewSBG2B8eL/kVf097r86YDyG+LMJHg=
Subject key identifier: 4E:AF:1E:7A:3C:B1:01:6F:4C:E0:E5:AE:7D:1B:EB:89:1E:2B:C4:19
Certificate issuer: /CN=A912DD36/serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
Certificate serial: 01B3
Authority key identifier: 04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/09EC8E16662211EFB6FA446CC4F9AE02.roa
Signing time: Sat 05 Sep 2026 04:54:10 +0000
ROA not before: Sat 05 Sep 2026 04:54:10 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 56106
IP address blocks: 45.124.212.0/22 maxlen: 22
45.124.212.0/24 maxlen: 24
45.124.213.0/24 maxlen: 24
45.124.214.0/24 maxlen: 24
45.124.215.0/24 maxlen: 24
103.193.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl
rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:26:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD36, serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
Validity
Not Before: Sep 5 04:54:10 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9ba071-8741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:6a:5f:3b:cc:6e:ff:57:36:b2:01:9e:17:
7f:8e:e3:7a:33:39:55:dc:03:e6:17:60:fc:0f:b6:
c2:f5:28:bc:f5:10:94:ed:81:83:16:83:07:c9:b5:
5a:7b:1a:eb:b0:f0:7a:e8:8a:0d:1f:37:43:af:45:
44:24:b3:d6:94:55:62:4f:51:6b:80:4e:01:f5:42:
7e:f0:67:e2:03:4a:36:c1:70:6c:1c:c7:dd:42:45:
dc:23:c9:a5:7c:4e:e5:de:bb:2f:84:03:b5:b6:f1:
04:a0:d2:78:4f:81:33:72:e0:9f:d4:ab:35:f9:b6:
35:d7:19:c6:04:fa:88:5f:c5:b7:88:a8:71:84:9f:
91:25:c8:13:e3:4a:0f:61:26:56:5e:dd:78:f8:13:
b7:b7:ed:66:49:49:6a:d6:a2:61:c4:9d:52:70:fd:
a4:74:46:1f:ca:2d:d4:ca:7c:dd:ab:66:3d:5a:ca:
ef:da:82:6c:ca:da:1a:7a:68:1b:91:b4:e5:37:40:
c3:72:d8:a5:da:1b:07:97:ab:91:a2:ac:07:ff:89:
d6:2d:85:8f:81:bd:f7:f6:0a:33:4e:48:16:6d:dc:
3a:ae:df:5c:ef:68:aa:89:0f:a4:5f:f7:b5:2a:15:
25:89:f1:39:52:6b:ae:93:21:cf:0f:07:36:9e:61:
ec:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AF:1E:7A:3C:B1:01:6F:4C:E0:E5:AE:7D:1B:EB:89:1E:2B:C4:19
X509v3 Authority Key Identifier:
keyid:04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/09EC8E16662211EFB6FA446CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.124.212.0/22
103.193.80.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:87:8a:43:3d:59:b4:9a:85:9e:3c:5b:c2:63:d1:94:60:94:
18:3a:52:bc:a4:db:54:d0:ac:85:46:8f:42:a4:04:5c:7d:7c:
dc:f3:81:4c:16:81:3b:99:c5:d8:af:1a:75:73:a2:d4:f8:a1:
eb:4b:b4:be:62:2a:ab:70:f1:0a:54:e2:20:4c:be:a1:cf:a6:
f4:54:82:97:9e:53:1f:57:39:65:d7:d6:c7:fd:00:83:99:ca:
26:78:88:b7:90:ce:4a:04:67:f7:c6:73:4c:68:dc:c6:e5:5e:
a4:7e:e0:00:39:fe:1f:a3:ad:ff:5b:80:a0:6c:3d:db:2b:95:
29:9e:e2:b6:83:cc:dc:48:f4:e1:d1:13:48:92:d8:44:2b:cd:
bd:8d:b4:4f:17:f4:d1:be:05:7f:04:c1:bb:98:17:71:20:e8:
a8:f0:c0:ae:d2:6c:44:e0:75:99:6e:72:62:87:79:cd:5d:9f:
06:2b:92:29:04:fb:ea:83:ca:58:07:e6:3a:cd:6a:41:bf:35:
a1:e6:36:8c:2e:40:29:43:75:e9:08:f4:53:93:87:2f:a1:bc:
40:e1:c7:a0:da:66:f6:8e:11:0c:6f:75:d6:ae:4d:b6:80:25:
8f:48:78:b2:b0:68:ff:60:fb:3c:55:ae:6f:5d:90:a3:3e:50:
b0:ba:1b:75
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkREMzYxMTAvBgNVBAUTKDA0REVEQUNCREJBRkE1QzFDMTRGOTI4MTdCOTZGN0Y1
MDMxMDBBMjgwHhcNMjYwOTA1MDQ1NDEwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTliYTA3MS04NzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoo9qXzvMbv9XNrIBnhd/juN6MzlV3APmF2D8D7bC9Si89RCU7YGDFoMHybVa
exrrsPB66IoNHzdDr0VEJLPWlFViT1FrgE4B9UJ+8GfiA0o2wXBsHMfdQkXcI8ml
fE7l3rsvhAO1tvEEoNJ4T4EzcuCf1Ks1+bY11xnGBPqIX8W3iKhxhJ+RJcgT40oP
YSZWXt14+BO3t+1mSUlq1qJhxJ1ScP2kdEYfyi3Uynzdq2Y9Wsrv2oJsytoaemgb
kbTlN0DDctil2hsHl6uRoqwH/4nWLYWPgb339gozTkgWbdw6rt9c72iqiQ+kX/e1
KhUlifE5UmuukyHPDwc2nmHsowIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFE6vHno8
sQFvTODlrn0b64keK8QZMB8GA1UdIwQYMBaAFATe2svbr6XBwU+SgXuW9/UDEAoo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQzNi83RjQwMjNGMjI1
MzIxMUVGQkM5MzIxMUFDNEY5QUUwMi9CTjdheTl1dnBjSEJUNUtCZTViMzlRTVFD
aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JON2F5OXV2cGNIQlQ1S0JlNWIzOVFNUUNpZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkREMzYvN0Y0MDIzRjIyNTMyMTFFRkJDOTMyMTFBQzRGOUFFMDIvMDlFQzhFMTY2
NjIyMTFFRkI2RkE0NDZDQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCLXzUAwQCZ8FQMA0GCSqGSIb3DQEBCwUAA4IBAQBrh4pDPVm0moWe
PFvCY9GUYJQYOlK8pNtU0KyFRo9CpARcfXzc84FMFoE7mcXYrxp1c6LU+KHrS7S+
YiqrcPEKVOIgTL6hz6b0VIKXnlMfVzll19bH/QCDmcomeIi3kM5KBGf3xnNMaNzG
5V6kfuAAOf4fo63/W4CgbD3bK5UpnuK2g8zcSPTh0RNIkthEK829jbRPF/TRvgV/
BMG7mBdxIOio8MCu0mxE4HWZbnJih3nNXZ8GK5IpBPvqg8pYB+Y6zWpBvzWh5jaM
LkApQ3XpCPRTk4cvobxA4ceg2mb2jhEMb3XWrk22gCWPSHiysGj/YPs8Va5vXZCj
PlCwuht1
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:23:45 2026 by rpki-client