
$ rpki-client -vvf rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/2012E112712611EB8BCB2B84C4F9AE02.roa
File: 2012E112712611EB8BCB2B84C4F9AE02.roa (raw, json)
Hash identifier: n7fP3pLJmaEqQfXLTPU4EWpKBPZOXZFY26Hn4DvO7dw=
Subject key identifier: E2:30:B6:D0:08:11:4B:16:7F:CC:16:CE:79:D2:C4:A3:18:53:F1:46
Certificate issuer: /CN=A914275E/serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
Certificate serial: 0F46
Authority key identifier: 62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/2012E112712611EB8BCB2B84C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:09:12 +0000
ROA not before: Fri 20 Feb 2026 18:15:13 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 58955
IP address blocks: 116.206.124.0/22 maxlen: 22
116.206.124.0/24 maxlen: 24
116.206.125.0/24 maxlen: 24
116.206.126.0/24 maxlen: 24
116.206.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl
rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3910 (0xf46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914275E, serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
Validity
Not Before: Feb 20 18:15:13 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a472b7-d428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:42:b9:84:3e:84:6b:d7:b3:ae:11:db:59:
9b:d7:5a:12:67:8a:10:56:92:67:fc:ca:20:2d:7c:
39:2b:b8:50:2b:55:94:75:14:10:4d:d2:fa:76:25:
bb:5c:e5:ce:82:58:7e:15:73:8a:66:63:2d:79:c4:
b8:db:6e:f9:32:2f:63:94:d8:9c:7c:4f:9e:2a:bd:
dd:f4:94:ab:30:33:75:55:ae:a6:3a:db:4d:d6:5d:
02:69:7c:98:d3:33:5d:37:ea:00:db:e2:ef:75:f2:
37:9c:24:a1:ea:d4:18:8c:9b:47:86:d0:bd:f2:3e:
3d:be:78:c3:49:87:ba:86:ba:f4:10:a4:6b:fa:16:
d9:7e:d1:aa:d2:64:2d:8a:80:99:4e:4d:34:51:6f:
87:b4:d7:82:c2:78:c6:8e:35:15:b7:3f:89:fb:de:
b7:d3:79:2a:17:68:b2:94:1f:9a:79:1e:76:c9:d3:
59:37:b1:06:30:ac:05:80:d9:e9:b2:f4:6c:f7:21:
ef:20:91:2b:3f:5a:fc:05:42:6a:9d:ca:e5:69:17:
e4:e4:ba:fb:f7:d2:39:87:98:a4:ea:f0:2b:f1:06:
34:79:97:9b:ee:59:c7:09:bf:c0:4d:a8:61:80:f4:
4e:d9:08:17:05:58:49:4c:10:a1:1f:0b:bf:ee:3a:
a1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:30:B6:D0:08:11:4B:16:7F:CC:16:CE:79:D2:C4:A3:18:53:F1:46
X509v3 Authority Key Identifier:
keyid:62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/2012E112712611EB8BCB2B84C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.206.124.0/22
Signature Algorithm: sha256WithRSAEncryption
22:0c:92:de:00:01:11:92:61:63:37:3f:3b:63:04:3a:5b:9b:
a4:8f:3d:e8:d1:3e:5c:00:b6:50:97:b8:9f:21:3c:bd:16:ea:
1f:fe:a6:fe:9b:7f:0e:a1:2b:a7:e2:c0:a3:36:a6:86:b0:25:
7e:a6:4c:08:6a:3f:b0:ab:d5:62:03:e6:64:9e:77:87:70:35:
39:80:64:23:c2:a3:5b:f1:3c:8a:f0:22:90:b4:e2:26:7e:31:
34:e2:6b:d5:b5:3b:64:e3:01:36:85:62:9f:73:7f:80:ff:08:
37:05:f7:a8:da:98:93:2d:b3:42:90:67:fa:55:bb:8b:3e:25:
b1:b1:47:a3:e5:d0:0f:cc:84:6c:53:e4:a9:67:9b:b5:a5:a3:
b9:1a:33:39:94:bb:6c:d0:5c:eb:28:f9:d3:cb:81:e3:8d:b5:
b6:a2:1c:af:0a:39:7d:53:bf:08:b7:34:62:37:4e:fe:16:68:
f4:87:22:34:42:11:34:85:d1:74:7b:1e:9c:c6:01:94:85:ad:
41:11:4b:fc:60:b5:20:c1:f7:68:5e:3c:09:62:aa:59:8e:06:
d2:ca:30:18:10:24:79:0d:24:64:f4:9d:97:91:86:90:13:de:
cc:e8:66:b3:39:32:b2:98:cf:c6:c7:b7:ab:12:29:4c:0a:bb:
56:12:b1:5d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICD0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI3NUUxMTAvBgNVBAUTKDYyODQyMDdEMEQyN0EyRThCRjREMkVCMTRGQjEyOUNB
RDRGNkNDM0YwHhcNMjYwMjIwMTgxNTEzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzJiNy1kNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApAxCuYQ+hGvXs64R21mb11oSZ4oQVpJn/MogLXw5K7hQK1WUdRQQTdL6diW7
XOXOglh+FXOKZmMtecS42275Mi9jlNicfE+eKr3d9JSrMDN1Va6mOttN1l0CaXyY
0zNdN+oA2+LvdfI3nCSh6tQYjJtHhtC98j49vnjDSYe6hrr0EKRr+hbZftGq0mQt
ioCZTk00UW+HtNeCwnjGjjUVtz+J+96303kqF2iylB+aeR52ydNZN7EGMKwFgNnp
svRs9yHvIJErP1r8BUJqncrlaRfk5Lr799I5h5ik6vAr8QY0eZeb7lnHCb/ATahh
gPRO2QgXBVhJTBChHwu/7jqhDQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOIwttAI
EUsWf8wWznnSxKMYU/FGMB8GA1UdIwQYMBaAFGKEIH0NJ6Lov00usU+xKcrU9sw/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc1RS80REY3REIwNDkx
MTgxMUU5OTQ3OTNDNERDNEY5QUUwMi9Zb1FnZlEwbm91aV9UUzZ4VDdFcHl0VDJ6
RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lvUWdmUTBub3VpX1RTNnhUN0VweXRUMnpEOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDI3NUUvNERGN0RCMDQ5MTE4MTFFOTk0NzkzQzREQzRGOUFFMDIvMjAxMkUxMTI3
MTI2MTFFQjhCQ0IyQjg0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCdM58MA0GCSqGSIb3DQEBCwUAA4IBAQAiDJLeAAERkmFjNz87YwQ6
W5ukjz3o0T5cALZQl7ifITy9Fuof/qb+m38OoSun4sCjNqaGsCV+pkwIaj+wq9Vi
A+ZknneHcDU5gGQjwqNb8TyK8CKQtOImfjE04mvVtTtk4wE2hWKfc3+A/wg3Bfeo
2piTLbNCkGf6VbuLPiWxsUej5dAPzIRsU+SpZ5u1paO5GjM5lLts0FzrKPnTy4Hj
jbW2ohyvCjl9U78ItzRiN07+Fmj0hyI0QhE0hdF0ex6cxgGUha1BEUv8YLUgwfdo
XjwJYqpZjgbSyjAYECR5DSRk9J2XkYaQE97M6GazOTKymM/Gx7erEilMCrtWErFd
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:02 2026 by rpki-client