
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/5FF4FD52704C11ED97935E7DC4F9AE02.roa
File: 5FF4FD52704C11ED97935E7DC4F9AE02.roa (raw, json)
Hash identifier: LdRxke1Bck5JxIBRCGjM9TpaCqk+l96r/JCtzyDPs+0=
Subject key identifier: 6F:1E:86:71:2A:77:EF:03:5F:6E:D1:EC:9E:5C:24:14:D4:1D:66:82
Certificate issuer: /CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277
Certificate serial: 0266
Authority key identifier: E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/5FF4FD52704C11ED97935E7DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:55:39 +0000
ROA not before: Mon 15 Dec 2025 01:21:18 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 7600
IP address blocks: 203.20.226.0/23 maxlen: 23
203.20.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl
rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:51:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E5CB, serialNumber=E1733B970FDDF767FF195428437E1242A3769277
Validity
Not Before: Dec 15 01:21:18 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4374b-f4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:83:9e:74:b1:4e:f5:52:10:3c:3d:c7:8b:
1f:5b:3d:f7:be:0c:bd:e4:02:75:5f:20:18:5a:d5:
66:fa:6c:fe:5b:d8:45:33:84:03:2c:d5:dc:f6:15:
22:95:6e:99:6d:6f:5f:6a:68:1b:12:58:17:ba:4b:
1b:f7:41:cb:9e:cf:41:a7:18:7c:17:29:39:95:23:
73:44:6b:d6:81:66:16:03:c4:e9:2c:94:1d:5f:fe:
b0:f7:36:20:80:0b:90:f8:12:ae:de:e0:3a:ee:8b:
c3:bd:77:8b:20:dc:58:05:f0:d3:1b:5f:0e:e6:2d:
6e:ce:4e:79:ab:f4:2f:0c:d8:06:56:b2:88:04:e4:
ee:05:43:7d:10:00:30:90:bf:34:3c:60:3b:a0:53:
73:6c:18:05:bd:3a:d2:7c:40:e4:e8:ad:d0:b2:f2:
e1:61:c9:88:f5:f8:fb:e7:ab:d0:db:fa:51:0d:3d:
41:a7:07:56:a8:5d:6e:fe:3f:11:c0:86:d7:a3:ff:
c2:86:30:a3:74:a1:11:3a:0a:32:a6:df:70:06:e1:
e8:23:10:c7:64:e5:2c:01:7b:9d:50:97:3f:2e:70:
14:69:04:fd:ba:90:41:11:8d:f1:a9:e7:b3:26:67:
ec:1f:3f:76:36:4d:21:a8:18:d9:54:2b:dd:26:2a:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1E:86:71:2A:77:EF:03:5F:6E:D1:EC:9E:5C:24:14:D4:1D:66:82
X509v3 Authority Key Identifier:
keyid:E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/5FF4FD52704C11ED97935E7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.20.226.0/23
203.20.247.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5f:bf:0e:ec:b9:54:b9:26:20:e5:32:cc:3e:15:2b:51:22:
1c:49:ab:24:18:a1:24:e1:c0:53:b4:3e:83:2d:8d:ea:22:f3:
33:55:03:79:5f:e2:82:1b:56:a2:be:f7:b6:73:cc:a8:10:cc:
d0:97:de:e0:c4:05:6a:08:1d:10:f5:e4:88:59:79:87:e6:8f:
f3:c5:11:08:1e:89:43:63:47:8b:79:02:73:e5:9a:be:d5:af:
80:9d:6e:e7:c5:f4:59:41:54:70:15:a0:ef:c3:0b:62:0f:d7:
13:26:55:21:79:7f:49:2f:ea:dd:57:68:b7:1f:5a:df:22:2e:
bf:d3:7c:aa:52:6d:d7:07:05:1f:3c:56:eb:fc:7f:89:61:18:
6b:57:8e:ea:34:e2:75:69:8c:ee:f4:1a:2b:fc:d3:ff:3a:97:
c4:6f:4a:90:b2:cd:9e:e1:a5:43:a1:e0:e1:56:b8:a2:5c:a6:
1c:c1:72:31:96:64:09:bf:34:38:32:78:f5:40:4f:14:9b:b7:
3f:10:68:ba:e9:35:05:39:64:a7:9c:05:03:4c:99:ab:11:49:
26:8d:5e:ce:6e:97:27:c8:18:93:8b:8c:fb:e2:c5:cd:96:82:
58:56:63:5b:65:0d:4a:e9:4d:21:4f:e8:00:90:6a:8c:73:ab:
93:ec:d9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:59 2026 by rpki-client