
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/EB3C8154EC3911EE98E62214C4F9AE02.roa
File: EB3C8154EC3911EE98E62214C4F9AE02.roa (raw, json)
Hash identifier: UdYA7ysQTtwuAPvC1szdIQjTM7ruBUjRZwFCktSblQQ=
Subject key identifier: 30:65:B9:15:03:4B:D9:F5:9B:20:90:BA:9A:53:FE:C0:19:93:57:29
Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial: 01B7
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/EB3C8154EC3911EE98E62214C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:01:11 +0000
ROA not before: Sat 21 Jun 2025 04:33:27 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 139659
IP address blocks: 43.224.224.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Validity
Not Before: Jun 21 04:33:27 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a59827-677d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:2c:6a:90:79:4e:53:9c:f9:90:d8:1d:33:
8c:bb:5a:4b:44:81:ba:79:9f:5c:1d:b9:23:4e:64:
1e:d7:3f:e1:bd:c9:12:ec:cb:ea:0d:c2:e3:45:53:
59:be:24:69:d4:5d:d9:53:77:ba:36:65:57:16:a4:
2a:48:2b:db:38:55:8e:5d:6c:d3:9a:d3:99:c2:30:
1f:60:17:16:36:23:a7:b0:d3:be:ec:22:bf:e6:e7:
62:a4:14:9a:37:66:1c:2c:85:42:f9:98:fa:52:a5:
59:32:b7:65:89:62:df:73:ea:7e:14:57:34:a5:be:
47:3f:d1:b0:8a:9a:42:a8:19:04:13:f4:a3:06:e9:
1b:34:b1:72:03:92:0f:e7:a7:dc:be:04:e3:7a:f1:
87:45:2a:49:21:7b:7a:3c:19:34:04:51:da:fb:42:
62:3b:31:25:87:d5:86:66:3f:41:01:52:7f:e8:35:
87:cd:6f:fa:d0:d7:e7:4e:71:04:0c:ea:61:29:3a:
fa:a4:57:fc:20:51:69:b1:d4:4b:a4:d7:6f:46:d6:
39:cf:a8:15:bd:f2:9c:7c:03:58:c3:a8:88:d4:c1:
60:1e:f9:44:9d:4d:04:2f:20:5e:7e:df:65:40:66:
1c:dc:cf:ab:d9:ee:73:69:db:4a:54:91:1d:7e:12:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:65:B9:15:03:4B:D9:F5:9B:20:90:BA:9A:53:FE:C0:19:93:57:29
X509v3 Authority Key Identifier:
keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/EB3C8154EC3911EE98E62214C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.224.224.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:7b:2c:b8:e7:a4:de:51:2b:0a:8d:cf:fa:6d:8d:34:4f:9d:
20:95:8b:db:f7:ad:94:ee:a4:a5:f5:1e:64:ef:01:e0:bc:0d:
5e:b3:9c:0c:e4:68:95:e3:4a:96:b9:05:b1:4e:f1:d0:f1:fe:
6d:9c:f1:cc:df:56:e4:73:d2:c7:04:ee:56:47:ed:d4:1a:56:
e1:fd:8f:d8:41:cc:fa:56:97:ad:9b:f1:2c:2b:f8:50:46:65:
0e:c7:f7:a0:ad:d4:9e:f2:67:c2:53:9f:29:0f:42:6f:26:2d:
b4:7c:5d:e7:7c:00:ce:96:fc:b8:46:ef:a8:75:31:f5:86:e2:
0c:15:f7:dd:23:f2:7e:7d:25:bd:1a:d4:e7:85:c9:ae:08:44:
d5:2b:37:84:a7:29:69:31:9e:58:17:f9:66:47:06:57:4b:4b:
06:33:7c:3b:d6:3a:bf:01:62:a3:27:fc:47:7d:8c:ca:20:92:
43:e6:ae:01:87:54:ee:9e:1b:60:a5:26:e9:6f:39:1e:27:cd:
a2:53:53:8d:e6:97:37:4c:00:b5:c1:9d:7c:15:42:ac:07:a6:
c5:b9:a4:4b:1b:b2:c8:33:e3:99:f7:bf:fb:d1:b6:80:4b:0b:
11:43:9c:c5:f7:18:69:8d:30:4d:9e:30:e9:5d:89:71:0c:ad:
13:e0:24:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:28 2026 by rpki-client