
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/A44814E8EF8411F087F172675F6F56BC.roa
File: A44814E8EF8411F087F172675F6F56BC.roa (raw, json)
Hash identifier: wvN10FQ8zvYAowPbb2JVqT+LitRhCvH0XZWoM78inD0=
Subject key identifier: CB:FB:70:FC:CD:4B:3D:50:F4:56:15:18:7D:EA:F8:68:2B:38:C0:DD
Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial: 2334
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/A44814E8EF8411F087F172675F6F56BC.roa
Signing time: Sun 01 Mar 2026 18:43:33 +0000
ROA not before: Mon 12 Jan 2026 07:22:19 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 154462
IP address blocks: 59.153.30.0/23 maxlen: 23
59.153.30.0/24 maxlen: 24
59.153.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9012 (0x2334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Validity
Not Before: Jan 12 07:22:19 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a488d5-d633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:cb:d0:02:34:33:b4:51:f5:69:01:84:5f:
cc:3d:24:aa:7c:fc:65:e5:02:e6:41:7f:18:ea:57:
8a:14:15:a6:37:16:8b:9c:25:eb:56:f0:c4:95:5b:
ca:b6:dd:bc:c9:63:b9:af:09:aa:68:c2:b6:77:5d:
a8:b1:37:4c:c6:b6:01:87:53:81:2f:6c:06:04:17:
4d:17:a6:10:5e:5d:b9:97:bf:8d:9d:2a:01:bc:c1:
19:2a:8d:95:f6:e2:6c:ef:c2:af:b3:37:17:2f:52:
1d:08:32:63:eb:2c:2c:36:19:80:c9:90:a6:cb:cb:
e5:10:7c:d0:58:1e:96:2f:17:25:b3:76:84:8a:6e:
55:78:6c:95:da:2a:1b:e4:81:1f:39:4e:81:40:3d:
b7:2f:71:39:b4:71:73:de:22:17:b4:f6:57:64:3e:
e5:6b:e5:50:8d:21:88:15:c7:99:eb:a8:8f:41:bc:
c9:f0:57:06:ef:8f:6c:a7:17:53:09:85:d1:2d:0b:
07:3d:9d:48:90:a8:07:87:b8:cc:1e:54:68:36:dd:
7c:b9:33:38:a6:3b:94:b1:9f:e2:96:c1:53:1b:4f:
cc:68:fd:f1:45:17:9d:7f:e8:0c:86:ca:b6:a0:31:
83:3b:c8:43:e6:cb:80:cc:dd:a4:24:05:27:ff:cf:
ea:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FB:70:FC:CD:4B:3D:50:F4:56:15:18:7D:EA:F8:68:2B:38:C0:DD
X509v3 Authority Key Identifier:
keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/A44814E8EF8411F087F172675F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
59.153.30.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:10:1a:0a:00:65:87:bc:42:bd:81:c3:41:35:84:c6:3f:8c:
df:dc:c7:6b:48:3f:11:a7:f3:1a:07:ef:00:34:a6:7c:b3:3d:
4f:d5:45:68:5b:a2:c0:39:39:a2:b2:98:16:d6:36:21:82:81:
f1:2b:59:6a:40:f1:93:2c:dd:8d:84:9d:0a:b7:bc:de:59:fa:
63:36:12:fd:66:c3:7b:e4:b3:82:5b:cb:d3:f1:42:56:25:10:
79:6f:f5:d8:6e:ae:b3:7b:a8:77:c5:e1:3e:8f:d7:8a:d6:1f:
0f:fe:d7:e3:78:0f:b8:52:6b:6d:bd:b1:30:13:d3:90:df:58:
40:9c:8c:1c:7c:e3:ce:84:1f:2c:38:35:85:cd:a7:75:44:fd:
f9:94:52:93:d1:85:98:5d:94:43:d6:7d:b4:a4:42:e0:62:1f:
63:38:67:13:92:9c:68:77:8c:b1:c2:99:31:5a:df:95:66:c2:
1d:7e:c1:b9:d7:58:4c:74:0d:2d:51:bc:17:ab:cc:a8:02:da:
77:06:a7:89:bf:2b:a0:79:23:cf:f6:0d:ae:39:40:80:ce:60:
db:61:e0:9b:b3:71:94:08:6d:06:29:73:c6:d7:37:5b:de:30:
89:1a:f3:c4:c8:23:05:20:c8:d9:96:b5:14:ca:81:ff:65:55:
0d:84:88:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:19:11 2026 by rpki-client