
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/744F6602B5B511EEACE32B4DC4F9AE02.roa
File: 744F6602B5B511EEACE32B4DC4F9AE02.roa (raw, json)
Hash identifier: 2Lw/zrNhfXPZUVb6tJNCIUuOt97MTrdaQiGSvEdRrSg=
Subject key identifier: 18:0C:23:98:E7:98:FD:71:2E:1F:40:6F:00:E8:18:9C:14:12:E1:64
Certificate issuer: /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Certificate serial: 0193
Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/744F6602B5B511EEACE32B4DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:02:42 +0000
ROA not before: Mon 05 Jan 2026 03:23:03 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 56304
IP address blocks: 192.156.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl
rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Validity
Not Before: Jan 5 03:23:03 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a41cd2-5ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:71:0c:4d:7e:a9:a0:7d:f0:0b:d4:90:02:
ce:5c:89:b0:c4:fd:23:09:33:f6:9d:db:9a:d7:cf:
b1:30:19:d9:16:15:90:e4:81:2a:9b:dd:84:93:6c:
eb:45:d7:13:70:2d:07:cb:51:be:ea:36:5e:5d:36:
17:dd:a7:f6:3f:c2:4b:16:b6:f2:09:63:07:a5:63:
9e:a3:88:c1:26:af:66:dc:fb:c5:07:a7:b9:b4:56:
b7:cf:03:8e:99:5d:15:69:36:1a:b8:05:05:5a:5c:
ec:91:90:5a:f5:e4:53:cf:70:7a:47:35:e0:8c:42:
3e:03:5f:3d:e8:18:16:d9:54:fd:05:d5:e1:47:fc:
5b:17:3b:73:cc:ee:d2:7f:57:c7:56:2a:92:42:f5:
aa:e2:a3:01:ef:46:7a:46:c2:6c:4e:ca:6b:76:15:
04:cd:9b:89:d6:1f:e5:8e:9f:aa:bd:79:df:79:ca:
72:ed:64:a4:8b:65:08:59:91:41:d3:04:56:20:0d:
7e:d7:4a:c8:d6:0f:0a:c9:60:d9:e4:ea:f8:4c:7d:
0a:70:35:eb:d7:89:3a:1e:17:54:1f:68:b7:84:1c:
c2:2a:7f:1e:38:31:72:b5:e0:a0:a3:a0:73:74:ad:
78:d4:22:0c:52:d2:3d:1d:ad:dd:2e:e9:7a:dd:47:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0C:23:98:E7:98:FD:71:2E:1F:40:6F:00:E8:18:9C:14:12:E1:64
X509v3 Authority Key Identifier:
keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/744F6602B5B511EEACE32B4DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.156.225.0/24
Signature Algorithm: sha256WithRSAEncryption
69:aa:33:8d:97:6d:37:eb:b0:6a:f8:9d:54:98:e7:94:9e:b3:
16:df:0b:0f:58:23:1a:3d:8c:51:20:1b:24:a9:38:20:38:cf:
f8:b5:2c:75:33:81:4d:06:8a:95:77:4d:03:a6:03:fe:f9:18:
14:83:aa:3a:da:21:7f:08:f0:d5:59:fc:21:27:de:39:f7:38:
ca:59:ba:24:c0:ad:26:cf:60:c0:5e:f8:29:cc:8f:79:81:8b:
75:07:02:88:3d:f6:a6:4d:e6:87:fa:57:f0:2b:89:e6:2e:c4:
e7:2f:e1:6c:89:3e:75:c7:54:b9:32:97:2b:b1:00:8f:57:d1:
30:ae:aa:e6:af:65:64:64:eb:85:a1:d0:f4:92:17:b2:17:31:
e5:6a:5b:0d:5d:8a:f4:00:7e:98:0c:e9:df:70:9d:43:1b:85:
83:26:9a:3b:dd:10:b9:6a:25:f7:74:e0:5b:8b:71:3f:d6:63:
13:fb:43:55:8b:b3:fa:81:0c:59:6f:e8:2f:b9:4f:3c:e8:a9:
89:04:c5:d6:54:b5:3a:8b:8f:56:4e:b3:98:fd:78:db:a4:e0:
74:06:94:69:cc:e4:bd:b7:d7:6c:54:38:50:00:a2:06:84:23:
80:1f:93:57:49:9f:bc:fb:eb:84:f8:3b:19:8d:d1:8d:bc:9d:
c4:c0:40:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:58 2026 by rpki-client