
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/D12CC256A5F011F1A34023553E11F970.roa
File: D12CC256A5F011F1A34023553E11F970.roa (raw, json)
Hash identifier: pSUbkfXFck/jPE3kJOp36sul2ZkNhVQSncLCkFu7R+Y=
Subject key identifier: AD:CA:02:5A:01:D9:D7:76:4B:F4:87:3D:B0:F1:11:B1:CC:90:28:3F
Certificate issuer: /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Certificate serial: 277E
Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/D12CC256A5F011F1A34023553E11F970.roa
Signing time: Mon 28 Sep 2026 07:55:46 +0000
ROA not before: Mon 28 Sep 2026 07:55:46 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 55501
IP address blocks: 203.124.56.0/24 maxlen: 24
203.124.57.0/24 maxlen: 24
203.124.59.0/24 maxlen: 24
203.124.60.0/24 maxlen: 24
210.56.6.0/24 maxlen: 24
210.56.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 15:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10110 (0x277e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Validity
Not Before: Sep 28 07:55:46 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6aba1d82-702d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:29:20:93:0f:8a:8b:a9:61:b3:0f:35:37:f8:
58:f0:bf:29:ba:75:3b:82:05:c7:c7:54:35:25:42:
c3:7c:b8:6d:2d:5d:e1:da:23:3f:e0:e1:cc:f5:1a:
2c:b3:e5:2b:73:a5:59:f7:f1:0d:0d:f2:c3:a1:44:
58:c8:c7:f1:a8:88:31:1e:3c:43:81:59:03:9b:3a:
d2:2d:ca:d9:3e:f4:6f:f9:39:9a:f1:e1:32:56:fa:
b1:9a:fe:99:62:ba:b1:ac:2a:c3:f8:90:33:86:85:
6f:97:fe:aa:20:69:37:1f:01:2c:80:0c:f5:66:9d:
a9:bc:87:e1:ac:15:02:f7:3a:5e:93:e4:c4:85:24:
48:71:22:a8:df:66:a2:72:c1:af:c3:d9:43:83:31:
94:09:e2:74:42:95:56:a8:8d:4e:32:a0:2a:d9:50:
64:d2:e6:5d:67:0c:4a:bb:5d:00:85:8f:ca:99:36:
cf:f6:5c:4e:f6:4f:31:2e:ed:2c:e5:f2:a4:12:bb:
67:0d:54:6e:09:b2:fb:a7:06:2b:f4:6a:1f:86:0b:
01:16:0f:64:03:7a:dc:df:80:b8:a1:78:90:23:bb:
88:bf:43:76:63:06:d2:f4:0e:65:5b:0b:00:61:5c:
2b:f7:ce:06:4c:33:07:fc:c0:c1:b5:58:4c:85:93:
0f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CA:02:5A:01:D9:D7:76:4B:F4:87:3D:B0:F1:11:B1:CC:90:28:3F
X509v3 Authority Key Identifier:
keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/D12CC256A5F011F1A34023553E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
203.124.56.0/23
203.124.59.0-203.124.60.255
210.56.6.0/23
Signature Algorithm: sha256WithRSAEncryption
45:90:7e:e0:f5:09:b9:23:86:c4:a7:e7:57:4c:1f:a8:d1:75:
4a:45:b8:60:ca:6a:2d:77:a3:8f:c6:f7:d0:e9:75:21:eb:90:
cb:5a:43:29:de:98:d1:06:80:59:9f:92:ca:6c:92:c2:fc:02:
c1:d5:9a:f7:2a:a1:e8:01:60:c6:bb:a1:a2:07:97:01:e1:77:
8e:21:3f:51:95:86:a8:25:16:a1:45:37:a9:8c:fd:1f:e9:cc:
68:1f:84:9f:21:d5:d1:9f:7c:98:ab:3a:de:a8:b7:49:5a:bd:
e9:3e:97:0d:6c:b3:ac:58:81:9b:b3:9e:d4:e6:06:04:14:a6:
58:f8:31:8f:32:0c:f5:80:2c:8c:bb:4b:a2:33:12:01:6a:51:
43:d6:31:71:c8:c1:c6:76:ad:dc:d3:ed:f2:78:df:16:ff:12:
46:1b:8b:e6:86:94:50:ec:96:ae:1a:b6:a2:43:d5:d1:4f:1b:
d1:d2:fd:6e:c3:62:cc:5e:a8:74:47:4d:b9:6e:10:7e:50:9e:
8f:eb:3f:b6:e5:5b:b0:f5:73:77:27:dc:90:19:e7:7e:a2:b8:
9d:6e:db:b7:1a:c5:34:86:b8:5b:dd:fc:42:90:3d:c2:c3:0b:
3b:90:29:96:f3:9e:48:24:aa:c7:88:70:ae:b2:24:f5:54:ca:
06:31:1a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:55:28 2026 by rpki-client