
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/5F57D01A5EA511EFB0E1B468C4F9AE02.roa
File: 5F57D01A5EA511EFB0E1B468C4F9AE02.roa (raw, json)
Hash identifier: oILwHunfjRZCku3Ta2X5ncJFaBfa3eMCSs+5uDaH9RM=
Subject key identifier: 1C:44:30:FA:BA:50:A9:DE:2A:14:23:CE:3A:59:41:92:2C:6A:B8:63
Certificate issuer: /CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
Certificate serial: 020F
Authority key identifier: EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/5F57D01A5EA511EFB0E1B468C4F9AE02.roa
Signing time: Wed 19 Aug 2026 03:53:04 +0000
ROA not before: Wed 19 Aug 2026 03:53:04 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 151552
IP address blocks: 103.68.106.0/24 maxlen: 24
2001:df2:9440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl
rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 03:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C0DE, serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
Validity
Not Before: Aug 19 03:53:04 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a8528a0-b0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:6e:e9:28:68:7b:41:8f:68:17:bc:12:71:
76:e8:e8:5c:6b:2a:3a:13:6d:48:72:92:0e:ea:cf:
5d:d7:81:b7:61:f2:54:db:b1:bd:2b:0b:3f:96:a7:
e9:28:3e:02:00:c3:2e:bc:4a:1b:a5:b5:3a:24:3c:
b4:1c:14:98:04:0a:64:54:b5:17:95:4c:4b:4a:d2:
d2:e8:3a:22:45:ed:9a:7e:cb:ed:f6:d8:1a:2b:48:
3d:1d:1a:5e:3a:4b:97:6b:ff:a1:77:8e:c9:10:b8:
98:4e:28:a5:be:43:a3:21:c7:c7:3f:aa:4b:5e:9f:
9e:64:61:c5:c0:ad:b4:ed:7f:df:b5:37:df:a4:e1:
44:7d:ac:0d:31:0d:14:54:71:8d:45:bb:69:45:ba:
9b:89:65:f8:49:fb:bb:4b:5e:28:7a:07:db:0b:f6:
16:bf:72:d7:30:ed:a4:5e:0c:20:93:e3:2a:7b:02:
27:18:cb:eb:79:f5:4d:82:28:b4:22:30:9e:dc:b5:
6b:64:d5:27:e4:ee:f0:5e:43:4c:1b:9c:64:13:7c:
ff:f3:73:15:86:1a:c5:6c:7c:4f:93:12:34:b0:01:
88:90:c0:d9:94:c7:9d:f7:99:ba:c9:5c:3f:7b:4a:
6f:fe:b5:99:60:ba:ed:4d:17:c2:91:b3:9b:79:e6:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:44:30:FA:BA:50:A9:DE:2A:14:23:CE:3A:59:41:92:2C:6A:B8:63
X509v3 Authority Key Identifier:
keyid:EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/5F57D01A5EA511EFB0E1B468C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.106.0/24
IPv6:
2001:df2:9440::/48
Signature Algorithm: sha256WithRSAEncryption
5a:53:f0:c4:7d:57:61:92:cb:93:c3:7a:25:14:26:1e:4c:32:
56:38:f9:b1:22:02:b8:12:e8:ca:f3:f0:46:d5:e1:e0:3d:7a:
eb:c9:75:5d:55:85:61:d2:04:11:cd:12:cf:d7:0c:13:65:0a:
20:b4:a3:b3:aa:cf:19:68:46:6a:87:6a:4a:0a:d7:12:c1:0d:
d0:eb:33:4d:13:e2:a8:d9:68:69:be:d0:16:83:8a:07:bb:2d:
36:b8:29:0c:f2:d2:86:21:3b:21:fd:54:c5:44:f8:4c:2d:66:
e1:81:ee:9d:77:4a:09:51:63:17:9a:64:30:7e:eb:05:d2:ea:
64:2d:cc:06:15:fb:15:e8:81:d9:51:22:b0:52:f6:c0:b8:95:
06:87:6d:77:57:68:36:e9:6a:44:9d:d9:df:20:2e:9f:d5:1a:
d1:b6:c3:fb:5a:c8:53:5e:44:ee:3f:ee:7d:d0:67:22:0f:e1:
84:a9:96:0b:5d:25:a3:e0:16:4b:25:58:33:d4:b6:1f:a4:01:
c1:6d:e8:59:46:73:2f:da:ae:4b:c4:f1:24:7c:f4:90:8c:94:
d1:13:71:60:f4:2f:38:66:a8:06:a7:00:32:7f:b4:08:ae:99:
ba:c2:ae:f0:d1:63:7f:bc:77:8e:8a:6a:4d:7c:e0:d2:9a:1e:
ef:ed:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:28:52 2026 by rpki-client