
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/007F2494585411F192FCAD7CB9833773.roa
File: 007F2494585411F192FCAD7CB9833773.roa (raw, json)
Hash identifier: +W10DfYbjJq+2ypS2aUsflyv7vRCW+EYOSfAxH7oJP8=
Subject key identifier: 50:CF:C0:F4:6B:6C:2E:31:FD:B8:C3:C9:1A:EB:E7:A3:08:6C:06:2B
Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial: 2389
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/007F2494585411F192FCAD7CB9833773.roa
Signing time: Wed 10 Jun 2026 16:28:47 +0000
ROA not before: Wed 10 Jun 2026 16:28:47 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 134128
IP address blocks: 59.153.28.0/23 maxlen: 23
59.153.28.0/24 maxlen: 24
2402:3b80::/32 maxlen: 32
2402:3b80::/48 maxlen: 48
2402:3b80:1::/48 maxlen: 48
2402:3b80:2::/48 maxlen: 48
2402:3b80:3::/48 maxlen: 48
2402:3b80:4::/48 maxlen: 48
2402:3b80:5::/48 maxlen: 48
2402:3b80:6::/48 maxlen: 48
2402:3b80:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9097 (0x2389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Validity
Not Before: Jun 10 16:28:47 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2990bf-ca7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:42:87:78:ce:7d:f7:eb:43:1a:59:bb:9b:
32:50:28:3d:ee:7a:30:59:7b:e6:d3:e8:33:8c:a8:
f3:a6:59:ed:24:81:12:55:7a:c7:c4:24:9b:86:8f:
ff:2c:45:48:69:16:cc:44:ab:28:1d:15:47:89:8e:
d7:17:f6:e6:16:ee:23:f7:16:c3:aa:9c:09:87:f6:
17:a7:a5:b9:c1:40:b7:d0:98:0b:03:d1:08:30:c0:
97:b2:fb:61:1e:11:ac:fb:73:40:7e:8f:19:19:bc:
f3:b9:02:67:2a:db:0d:35:38:c3:5e:b1:df:0d:b2:
a9:dc:d8:b3:e7:77:bf:48:ec:2a:24:94:63:a0:8b:
fd:1e:84:43:80:88:31:38:e8:38:6e:36:7a:41:02:
de:b4:38:41:9b:1c:75:d1:e6:7e:67:89:e2:b2:52:
88:23:24:13:ae:7a:c8:b7:4e:dc:b9:4d:26:0e:a3:
17:59:06:32:25:91:f1:8f:40:ed:99:26:ee:3e:e6:
35:d9:b8:7a:c5:f6:1f:e1:02:79:4f:32:dc:3b:c4:
12:77:02:a8:09:a5:98:ed:13:52:15:8f:65:c1:36:
c6:7f:46:1e:93:05:75:9e:91:13:d2:25:d3:eb:fc:
13:33:29:4a:36:6b:cb:50:02:d0:a3:07:92:1b:04:
ed:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CF:C0:F4:6B:6C:2E:31:FD:B8:C3:C9:1A:EB:E7:A3:08:6C:06:2B
X509v3 Authority Key Identifier:
keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/007F2494585411F192FCAD7CB9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
59.153.28.0/23
IPv6:
2402:3b80::/32
Signature Algorithm: sha256WithRSAEncryption
58:e5:70:83:35:55:5e:8e:ff:86:a2:1d:8f:ca:39:24:e5:2e:
4f:ee:61:ed:8a:ed:7d:e1:00:96:20:83:54:e9:53:13:2a:60:
7e:d5:76:9b:07:ee:40:00:fe:d8:a5:ab:70:98:cc:ff:1c:70:
17:72:8c:db:83:41:4d:ac:a2:f0:b0:6d:fd:f5:03:19:fc:27:
a6:05:7a:8d:ee:ee:54:73:ba:f4:bf:6f:7c:68:a0:61:69:cb:
55:8d:be:3f:7a:cd:14:70:29:05:8c:2a:e6:ec:3f:6c:fa:23:
5e:44:0d:df:0f:c5:9e:32:75:dd:b0:e0:62:06:62:d5:1e:8b:
7d:a5:fe:07:12:b1:c0:6a:35:62:ab:16:3a:5e:d4:52:41:dd:
c4:ae:b0:b9:3f:4f:e5:1d:9d:0d:da:66:24:bc:4a:96:4a:dd:
d3:07:b7:c3:d7:f4:89:1a:b3:55:e1:49:a6:68:77:9e:95:94:
e9:c3:52:4e:9f:82:6e:4e:f5:0f:8b:ae:94:ab:2f:a8:0c:4a:
36:f6:63:5f:69:cf:7c:62:d4:e7:a3:e7:4d:01:43:59:30:aa:
76:37:51:a6:d7:d6:c4:a8:cd:5f:b3:c0:db:59:54:cb:2d:9b:
cc:e6:2e:34:7d:7e:ca:d4:88:a7:c8:c7:15:08:de:6c:74:d8:
ad:1b:ea:bf
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICI4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2
OEY2OTg1M0IwHhcNMjYwNjEwMTYyODQ3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI5OTBiZi1jYTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvMpCh3jOfffrQxpZu5syUCg97nowWXvm0+gzjKjzplntJIESVXrHxCSbho//
LEVIaRbMRKsoHRVHiY7XF/bmFu4j9xbDqpwJh/YXp6W5wUC30JgLA9EIMMCXsvth
HhGs+3NAfo8ZGbzzuQJnKtsNNTjDXrHfDbKp3Niz53e/SOwqJJRjoIv9HoRDgIgx
OOg4bjZ6QQLetDhBmxx10eZ+Z4nislKIIyQTrnrIt07cuU0mDqMXWQYyJZHxj0Dt
mSbuPuY12bh6xfYf4QJ5TzLcO8QSdwKoCaWY7RNSFY9lwTbGf0YekwV1npET0iXT
6/wTMylKNmvLUALQoweSGwTthwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFDPwPRr
bC4x/bjDyRrr56MIbAYrMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy
RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZDRDYvMUU5RTFBQUNEMkVBMTFFNUFGQjFFMjRDQzRGOUFFMDIvMDA3RjI0OTQ1
ODU0MTFGMTkyRkNBRDdDQjk4MzM3NzMucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBO5kcMA0EAgACMAcDBQAkAjuAMA0GCSqGSIb3DQEBCwUAA4IBAQBY
5XCDNVVejv+Goh2Pyjkk5S5P7mHtiu194QCWIINU6VMTKmB+1XabB+5AAP7Ypatw
mMz/HHAXcozbg0FNrKLwsG399QMZ/CemBXqN7u5Uc7r0v298aKBhactVjb4/es0U
cCkFjCrm7D9s+iNeRA3fD8WeMnXdsOBiBmLVHot9pf4HErHAajViqxY6XtRSQd3E
rrC5P0/lHZ0N2mYkvEqWSt3TB7fD1/SJGrNV4UmmaHeelZTpw1JOn4JuTvUPi66U
qy+oDEo29mNfac98YtTno+dNAUNZMKp2N1Gm19bEqM1fs8DbWVTLLZvM5i40fX7K
1IinyMcVCN5sdNitG+q/
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:50:32 2026 by rpki-client