
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/5BC485B09D1F11F09313A14DC4F9AE02.roa
File: 5BC485B09D1F11F09313A14DC4F9AE02.roa (raw, json)
Hash identifier: a7mFbdEd5Rjo2JTpy6uMvBLZm7bSHGiAu3zDsnwY9wE=
Subject key identifier: 7C:3A:D3:B8:D1:92:64:42:B9:76:3D:28:D3:9B:19:E7:2C:73:FD:5E
Certificate issuer: /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Certificate serial: 024A
Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/5BC485B09D1F11F09313A14DC4F9AE02.roa
Signing time: Wed 11 Mar 2026 02:36:29 +0000
ROA not before: Wed 11 Mar 2026 02:36:29 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 137910
IP address blocks: 103.12.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 01:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Validity
Not Before: Mar 11 02:36:29 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69b0d52d-0531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:d7:12:79:d2:86:f5:b9:2a:df:24:f9:c8:
1b:49:c9:e0:9b:1c:62:2f:5a:27:1c:3c:68:6c:aa:
4c:e8:56:74:90:ef:1e:45:a0:ac:8c:bf:d6:0d:d1:
c3:d4:99:0f:1c:7f:25:22:69:38:0f:ef:bc:44:5c:
42:f7:8c:54:2c:18:04:a0:9e:55:b4:d7:a3:ce:3b:
62:e0:cf:f4:84:d5:fd:d3:07:38:78:41:ea:34:21:
19:09:78:af:53:09:6e:6b:d6:88:9b:77:bd:4b:c8:
37:21:34:32:b6:7e:62:ba:e0:76:47:24:5c:01:7f:
c4:90:de:6a:42:54:69:db:ba:24:08:c3:8a:8c:eb:
f0:92:cd:7e:66:df:ba:36:fc:b8:a4:44:23:95:8f:
f6:cf:f7:94:06:4f:11:44:67:76:89:bb:1c:51:eb:
b5:c7:d1:ea:b8:9e:14:21:ee:1b:95:45:b3:47:ce:
16:34:64:72:d0:a2:5d:21:0b:75:48:e0:8e:b3:3d:
be:84:41:fd:fe:ee:d0:4b:c2:4f:30:07:35:dd:d4:
68:b1:51:40:ab:60:9c:bf:46:00:9f:93:34:b0:49:
69:28:b6:d8:d7:4d:c5:43:82:91:5f:85:50:9a:68:
8b:a2:6a:53:4a:eb:ac:b0:8e:5d:8c:82:50:f9:32:
20:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3A:D3:B8:D1:92:64:42:B9:76:3D:28:D3:9B:19:E7:2C:73:FD:5E
X509v3 Authority Key Identifier:
keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/5BC485B09D1F11F09313A14DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.41.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:cd:4a:b6:4e:07:1a:d5:67:2a:0c:cc:fe:cd:5a:48:ae:81:
8a:36:dc:d2:90:48:41:87:a5:74:c3:8f:25:52:72:d9:89:09:
71:ac:6b:db:87:24:7d:92:0e:e7:9b:e1:77:be:a8:86:e2:3a:
cb:61:2c:d5:75:91:ba:7a:32:5f:af:1a:34:db:4c:bb:bc:f1:
25:31:fd:85:29:5e:81:c6:d3:f4:57:fd:ab:99:86:c5:ed:15:
3c:0d:14:cd:dd:45:3c:d1:e4:51:ae:7f:40:a4:b2:b3:2f:b5:
eb:79:ac:6a:8b:34:c9:09:15:68:c0:6b:ac:86:3c:ed:d2:13:
4d:bc:dd:5b:3e:ad:5a:d9:d5:4e:29:dc:2e:3d:dd:5d:b3:c4:
a0:e3:80:72:18:c0:8b:e1:cb:87:3e:7c:22:8a:5f:f6:4e:2b:
31:1d:7e:af:bc:39:46:7c:82:0f:fd:00:ce:37:4b:9b:db:ed:
c6:00:13:c1:e5:c1:f0:07:de:14:ad:b0:f1:e1:dd:55:c8:86:
dc:f7:e4:d0:b8:c4:83:77:6d:1b:da:1c:e2:a5:cb:ea:b4:08:
aa:81:0c:a8:f8:f9:f8:59:ca:66:c0:23:33:3a:35:3a:c4:27:
63:f0:31:79:a3:47:8e:28:83:de:fa:f0:a1:43:c2:0a:bc:30:
67:98:2f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:59:37 2026 by rpki-client