
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/33B5008E817811F198EF28E28EA30FBC.roa
File: 33B5008E817811F198EF28E28EA30FBC.roa (raw, json)
Hash identifier: dhdm8ifZMbfHcmPmtcvJgps8m/quTfZgQcRwecxEd4o=
Subject key identifier: B9:73:B3:E2:C1:22:90:72:3E:DF:35:4E:BE:23:FA:E8:BD:AC:38:B9
Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial: 05C0
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/33B5008E817811F198EF28E28EA30FBC.roa
Signing time: Fri 17 Jul 2026 00:42:12 +0000
ROA not before: Fri 17 Jul 2026 00:42:12 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 19793
IP address blocks: 113.20.56.0/22 maxlen: 22
223.29.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1472 (0x5c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Validity
Not Before: Jul 17 00:42:12 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a597a64-5a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:39:26:f6:8e:8d:9c:0e:a9:25:c4:1b:2c:
fe:77:55:1a:b5:8d:26:cb:8b:9c:3e:28:db:9a:c2:
ac:ad:ad:e3:2e:a6:68:85:69:ed:5c:4a:ec:1a:41:
b8:90:c5:0f:a8:e6:9a:7e:04:3d:17:38:80:c5:2b:
00:04:61:ff:b4:0f:6a:b4:b9:2b:e8:b5:be:58:14:
ad:ea:02:49:47:a8:68:f6:3d:5e:fb:39:be:5d:11:
8c:e0:45:56:2e:a7:02:1a:72:56:52:b8:53:e2:fb:
4c:6f:2d:22:f2:c9:6a:c8:3d:c4:96:81:58:f0:6c:
80:63:b8:8a:cf:20:c0:cb:0b:cb:45:17:9e:8a:e5:
ce:a9:f8:f4:13:7f:c2:64:c8:91:bc:f8:6d:61:12:
ab:52:e9:ee:d7:38:84:7f:03:e4:d3:fc:0b:90:03:
a9:f3:80:e7:de:fa:7b:b0:71:df:76:88:2c:21:5a:
e9:73:dd:75:01:9d:f4:50:f1:a0:00:38:bb:8c:2d:
44:c5:5a:8e:cc:32:1b:3b:d5:bc:c6:8b:3b:40:0f:
3f:85:f3:eb:1d:e8:b1:ef:8b:37:61:c2:bf:6e:1d:
5f:76:71:4f:8d:23:81:5e:54:87:c7:20:13:d8:bd:
2a:dd:fb:68:b2:2d:64:dd:94:94:97:84:a3:f3:43:
eb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:73:B3:E2:C1:22:90:72:3E:DF:35:4E:BE:23:FA:E8:BD:AC:38:B9
X509v3 Authority Key Identifier:
keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/33B5008E817811F198EF28E28EA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
113.20.56.0/22
223.29.132.0/22
Signature Algorithm: sha256WithRSAEncryption
90:e1:80:6f:67:35:a9:22:61:c7:f4:9e:24:e3:1b:bf:ed:12:
59:cc:2d:e8:28:48:66:43:68:15:af:76:0b:67:97:e0:d3:c2:
6f:08:80:ab:2b:11:f5:c0:5e:89:58:2e:64:c0:18:f2:2c:6c:
46:58:cd:58:a6:50:a0:3a:d1:3b:75:ae:45:ef:fc:3e:5e:36:
de:5c:9b:0f:e8:0c:a3:39:73:02:da:d5:cc:fe:bd:3a:7e:d3:
c2:36:a6:8d:ff:cf:4d:42:7f:a9:53:51:02:b5:d6:ef:6f:6f:
00:34:3b:09:88:0b:b0:e8:23:d9:05:d4:f3:91:be:09:28:d6:
1b:a9:44:c8:17:13:7d:44:b5:87:97:15:b9:f7:36:7e:46:a0:
d6:a6:de:5f:94:e3:83:bd:ff:8e:f5:d9:60:a2:b8:8c:f5:17:
b8:04:d8:85:f5:83:4b:01:5b:f2:7c:36:e3:95:52:2c:a6:58:
f9:3c:10:b5:4f:6f:fc:f0:ee:c2:0f:8c:ef:b9:c6:74:8e:01:
32:8f:98:3d:1a:dd:24:a2:fb:af:8e:8f:d9:d2:70:56:1b:81:
1d:4c:dd:d5:cd:a5:bd:e6:5f:2e:a6:5c:88:6f:de:cf:29:11:
bd:db:60:53:e6:65:c2:bc:32:46:f0:ca:c0:bf:be:37:92:5d:
93:83:b3:0d
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD
RUZBRjVBQkMwHhcNMjYwNzE3MDA0MjEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU5N2E2NC01YTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArEU5JvaOjZwOqSXEGyz+d1UatY0my4ucPijbmsKsra3jLqZohWntXErsGkG4
kMUPqOaafgQ9FziAxSsABGH/tA9qtLkr6LW+WBSt6gJJR6ho9j1e+zm+XRGM4EVW
LqcCGnJWUrhT4vtMby0i8slqyD3EloFY8GyAY7iKzyDAywvLRReeiuXOqfj0E3/C
ZMiRvPhtYRKrUunu1ziEfwPk0/wLkAOp84Dn3vp7sHHfdogsIVrpc911AZ30UPGg
ADi7jC1ExVqOzDIbO9W8xos7QA8/hfPrHeix74s3YcK/bh1fdnFPjSOBXlSHxyAT
2L0q3ftosi1k3ZSUl4Sj80PrIQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLlzs+LB
IpByPt81Tr4j+ui9rDi5MB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG
MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvMzNCNTAwOEU4
MTc4MTFGMTk4RUYyOEUyOEVBMzBGQkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCcRQ4AwQC3x2EMA0GCSqGSIb3DQEBCwUAA4IBAQCQ4YBvZzWpImHH
9J4k4xu/7RJZzC3oKEhmQ2gVr3YLZ5fg08JvCICrKxH1wF6JWC5kwBjyLGxGWM1Y
plCgOtE7da5F7/w+XjbeXJsP6AyjOXMC2tXM/r06ftPCNqaN/89NQn+pU1ECtdbv
b28ANDsJiAuw6CPZBdTzkb4JKNYbqUTIFxN9RLWHlxW59zZ+RqDWpt5flOODvf+O
9dlgoriM9Re4BNiF9YNLAVvyfDbjlVIsplj5PBC1T2/88O7CD4zvucZ0jgEyj5g9
Gt0kovuvjo/Z0nBWG4EdTN3VzaW95l8uplyIb97PKRG922BT5mXCvDJG8MrAv743
kl2Tg7MN
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:59:48 2026 by rpki-client