
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/BF529990959F11EC844CAD64C4F9AE02.roa
File: BF529990959F11EC844CAD64C4F9AE02.roa (raw, json)
Hash identifier: OcrJ1OdtuDJwFGfS33ae+ZGC3AcOKMEW7bd8MKcrgcg=
Subject key identifier: 39:6E:25:B5:53:17:43:1A:F9:B2:AD:A1:31:50:3C:9A:13:64:A4:46
Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985
Certificate serial: 083F
Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/BF529990959F11EC844CAD64C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:37:27 +0000
ROA not before: Wed 26 Feb 2025 22:20:44 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 399734
IP address blocks: 113.29.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl
rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2111 (0x83f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985
Validity
Not Before: Feb 26 22:20:44 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a408d7-0664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:1b:65:50:21:13:73:f7:91:fc:c3:2d:b4:
cf:bc:0a:2a:10:0d:99:5f:ae:2b:c7:bb:e7:4f:44:
00:ca:c7:aa:5e:71:bc:9b:f5:80:57:c1:e9:c8:02:
5d:c9:af:b4:b8:48:49:01:6c:ea:bf:d4:2c:66:bb:
b6:12:34:47:32:1d:db:82:db:f1:7f:f2:1f:a2:61:
07:f3:3e:49:a2:01:6f:52:75:75:f3:8d:12:5d:ea:
31:3e:0b:79:c6:db:cc:23:3b:94:e5:f6:92:8d:ca:
aa:d6:e4:98:68:77:ae:fb:7d:7f:11:34:68:6b:21:
6c:6d:b3:4e:1b:26:bc:31:01:4f:74:32:6c:d1:5b:
95:04:f4:e4:60:60:bf:08:97:71:6e:d7:3c:bd:42:
da:18:4a:4c:a7:c5:f7:8c:00:61:5d:9b:81:fb:1e:
45:03:31:04:5a:a1:9d:9e:ef:83:3f:7d:49:0d:bd:
c9:f6:e0:db:73:ff:59:9d:23:81:6e:fa:31:d7:69:
39:ac:3d:4a:15:78:9c:19:da:cb:9a:c7:be:92:e9:
1a:70:db:77:b1:5c:be:dd:8f:38:c3:5c:e9:b9:4d:
c2:f1:a7:44:7d:89:60:8e:d2:1e:93:e2:18:8b:ec:
52:99:8f:98:84:dc:fe:60:d9:2f:0d:c3:e3:dd:39:
f0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6E:25:B5:53:17:43:1A:F9:B2:AD:A1:31:50:3C:9A:13:64:A4:46
X509v3 Authority Key Identifier:
keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/BF529990959F11EC844CAD64C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
113.29.58.0/24
Signature Algorithm: sha256WithRSAEncryption
77:4c:f2:bf:39:1b:97:29:d9:34:13:0f:1c:4c:2e:1d:11:21:
33:81:5d:6e:30:c8:d5:e9:77:70:d1:6e:33:07:7e:3a:81:db:
2d:a3:bb:cf:b7:46:af:e8:77:b8:03:c2:59:3e:75:01:bd:75:
62:e8:f7:9f:38:46:5f:c7:f6:cc:68:fe:82:00:f9:8d:eb:0c:
f7:4b:38:3b:72:d0:a2:44:0f:bd:2c:79:f8:57:24:28:3e:b9:
f6:0b:e0:c9:aa:ce:08:df:74:d4:20:07:44:76:08:3f:58:6c:
78:94:a7:08:da:8f:8d:d4:84:47:96:3c:38:8d:07:bc:55:78:
4b:17:ff:14:28:6b:ba:e2:d7:15:55:80:fe:6e:90:ed:ae:f8:
5e:b2:14:8c:27:46:fd:7c:70:ca:54:fe:81:48:c7:ad:2e:3d:
56:81:d4:be:78:a5:a3:92:14:cd:49:d6:53:c4:0b:ba:30:e7:
44:50:38:c8:94:0d:97:84:ca:be:33:f4:fa:3f:77:40:db:d7:
e3:3d:a2:92:79:eb:70:21:0c:e3:38:82:ae:b4:ed:27:64:22:
b5:9e:b9:32:d9:b2:3b:63:33:7d:a7:69:b4:0e:ba:5f:77:63:
b7:92:b4:be:6e:10:56:40:35:00:28:2c:89:94:b9:0d:fd:00:
a1:08:2c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:39 2026 by rpki-client