
$ rpki-client -vvf rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/24241410E2A211EEBFC9412EC4F9AE02.roa
File: 24241410E2A211EEBFC9412EC4F9AE02.roa (raw, json)
Hash identifier: Ai5vDwK8j+bPmD/vS73OlP9MaEpaSxs04+w/LkX/yQ0=
Subject key identifier: 1E:CE:4B:B0:99:A9:A0:1B:97:00:F1:18:EF:CE:5A:20:69:FD:12:F5
Certificate issuer: /CN=A912ECA4/serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B
Certificate serial: 01AE
Authority key identifier: 8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/24241410E2A211EEBFC9412EC4F9AE02.roa
Signing time: Fri 05 Jun 2026 04:35:29 +0000
ROA not before: Fri 05 Jun 2026 04:35:29 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 63981
IP address blocks: 45.251.67.0/24 maxlen: 24
103.206.88.0/22 maxlen: 24
2401:3e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl
rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912ECA4, serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B
Validity
Not Before: Jun 5 04:35:29 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a225211-1162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:e9:d4:84:b8:17:40:e4:bb:ee:d7:cd:59:
f1:40:ef:4f:82:48:40:6f:fc:16:9e:86:6f:53:e9:
1a:11:c1:35:63:6f:83:46:b4:6c:74:fe:89:ca:65:
0a:f7:a5:74:ba:d7:62:94:e5:3a:be:3e:93:47:0a:
ff:d2:f0:ba:6c:99:f1:53:7d:10:82:53:8d:17:54:
dc:5a:d2:32:f8:55:cb:57:e8:02:3b:e3:67:7c:e3:
82:50:3c:94:2d:98:94:bf:49:7a:36:0e:91:72:f0:
57:05:02:cd:da:fe:f5:67:73:d9:ca:a1:db:90:60:
61:fb:1a:a9:4e:86:63:2b:9b:ec:55:cf:bd:0f:41:
1e:38:1b:44:5e:31:bb:de:2f:ae:89:c3:79:73:7e:
59:14:30:7c:ff:7d:0c:83:ee:f5:99:8a:3a:fe:e6:
bf:3b:7c:d4:1c:bf:4d:13:47:a2:74:d2:73:c3:86:
fa:51:ec:fb:5c:17:bc:4b:66:01:07:4a:3a:e7:29:
55:43:7e:dc:69:bd:86:2c:e9:85:56:3f:bd:92:b7:
ae:9c:8c:40:67:bc:fb:d2:3a:6f:72:4b:59:b1:99:
8c:87:21:3c:27:da:cc:54:0d:48:5d:5e:ce:f1:ef:
71:65:c1:f2:9f:e3:b5:fe:d5:51:89:04:7f:d9:14:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CE:4B:B0:99:A9:A0:1B:97:00:F1:18:EF:CE:5A:20:69:FD:12:F5
X509v3 Authority Key Identifier:
keyid:8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/24241410E2A211EEBFC9412EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.251.67.0/24
103.206.88.0/22
IPv6:
2401:3e0::/32
Signature Algorithm: sha256WithRSAEncryption
17:0d:53:da:d0:60:62:9c:9c:a9:aa:be:0d:c1:4c:05:d2:97:
0a:c3:a5:4f:16:94:86:a2:f8:34:40:ae:2a:34:94:81:83:51:
d4:4a:c1:31:c4:f3:24:00:d9:94:29:d6:53:90:bd:02:2b:f6:
23:10:74:f4:d3:09:69:3e:12:4b:bc:a7:7c:2e:4a:6b:08:77:
b1:22:46:86:fc:c2:f0:48:f3:ac:07:fb:e2:3f:15:86:1c:a6:
63:ce:5e:ef:e0:10:64:82:ce:30:07:a7:95:30:38:b4:a4:d9:
29:ae:b6:ee:fe:c2:d1:68:a4:6d:d2:d5:7f:e0:54:4d:a5:2b:
bd:fa:a3:95:06:b6:14:b6:cb:a2:bd:f2:e7:82:e9:a5:d6:3e:
49:3b:7a:2d:84:75:24:26:05:1c:f5:4f:57:71:63:a1:b2:53:
fe:ca:1d:1a:98:bc:36:ea:03:75:c1:7b:af:bf:b4:c6:22:55:
24:64:b3:8f:5a:cb:c6:33:43:32:58:a6:81:28:48:9b:d1:32:
4d:be:6e:91:f4:58:a6:3d:51:c9:cf:0f:12:0b:89:9b:b9:50:
7e:f1:50:23:21:3b:0b:0e:5b:05:81:90:d6:2d:72:d9:da:f4:
c3:10:1b:66:91:ed:93:62:7f:45:60:ff:e1:5d:5e:2c:19:7b:
cb:6f:08:3d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkVDQTQxMTAvBgNVBAUTKDhDMUMxNERDMTY3NERCQjY4QjQ5NDMwMTU4N0IzRDJG
OThFRDcwMUIwHhcNMjYwNjA1MDQzNTI5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIyNTIxMS0xMTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuObp1IS4F0Dku+7XzVnxQO9PgkhAb/wWnoZvU+kaEcE1Y2+DRrRsdP6JymUK
96V0utdilOU6vj6TRwr/0vC6bJnxU30QglONF1TcWtIy+FXLV+gCO+NnfOOCUDyU
LZiUv0l6Ng6RcvBXBQLN2v71Z3PZyqHbkGBh+xqpToZjK5vsVc+9D0EeOBtEXjG7
3i+uicN5c35ZFDB8/30Mg+71mYo6/ua/O3zUHL9NE0eidNJzw4b6Uez7XBe8S2YB
B0o65ylVQ37cab2GLOmFVj+9kreunIxAZ7z70jpvcktZsZmMhyE8J9rMVA1IXV7O
8e9xZcHyn+O1/tVRiQR/2RSFrQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFB7OS7CZ
qaAblwDxGO/OWiBp/RL1MB8GA1UdIwQYMBaAFIwcFNwWdNu2i0lDAVh7PS+Y7XAb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUNBNC80ODVGMzM2QURD
RUQxMUVFQkJCRjQwMkZDNEY5QUUwMi9qQndVM0JaMDI3YUxTVU1CV0hzOUw1anRj
QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pCd1UzQlowMjdhTFNVTUJXSHM5TDVqdGNCcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkVDQTQvNDg1RjMzNkFEQ0VEMTFFRUJCQkY0MDJGQzRGOUFFMDIvMjQyNDE0MTBF
MkEyMTFFRUJGQzk0MTJFQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQALftDAwQCZ85YMA0EAgACMAcDBQAkAQPgMA0GCSqGSIb3DQEBCwUA
A4IBAQAXDVPa0GBinJypqr4NwUwF0pcKw6VPFpSGovg0QK4qNJSBg1HUSsExxPMk
ANmUKdZTkL0CK/YjEHT00wlpPhJLvKd8LkprCHexIkaG/MLwSPOsB/viPxWGHKZj
zl7v4BBkgs4wB6eVMDi0pNkprrbu/sLRaKRt0tV/4FRNpSu9+qOVBrYUtsuivfLn
guml1j5JO3othHUkJgUc9U9XcWOhslP+yh0amLw26gN1wXuvv7TGIlUkZLOPWsvG
M0MyWKaBKEib0TJNvm6R9FimPVHJzw8SC4mbuVB+8VAjITsLDlsFgZDWLXLZ2vTD
EBtmke2TYn9FYP/hXV4sGXvLbwg9
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:22:24 2026 by rpki-client