
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/12CC909ADD9311EC8E83E43CC4F9AE02.roa
File: 12CC909ADD9311EC8E83E43CC4F9AE02.roa (raw, json)
Hash identifier: bAhyjgqdxomyATAXXWjjzLPbdVP/vKzIJXP6FIwsw4I=
Subject key identifier: FA:B1:03:4B:98:43:D7:56:03:69:42:92:35:D3:BB:FB:11:3D:32:07
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 0B57
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/12CC909ADD9311EC8E83E43CC4F9AE02.roa
Signing time: Thu 03 Sep 2026 00:51:07 +0000
ROA not before: Thu 03 Sep 2026 00:51:07 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 63940
IP address blocks: 27.254.146.0/23 maxlen: 23
27.254.146.0/24 maxlen: 24
27.254.147.0/24 maxlen: 24
27.254.152.0/23 maxlen: 23
27.254.152.0/24 maxlen: 24
27.254.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2903 (0xb57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Validity
Not Before: Sep 3 00:51:07 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a98c47a-d8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:64:a5:38:cf:05:23:26:c3:a6:e4:c8:b4:
07:00:5b:ab:74:ac:f4:b9:b1:05:cf:cf:c8:17:a3:
08:53:56:06:00:ef:ab:d8:f1:7f:fb:b6:65:f3:6d:
2a:de:cf:be:83:65:d7:6f:6a:b9:66:1e:ba:ce:d3:
3d:c3:e5:ed:62:ca:b5:ab:c5:4c:c9:48:c7:c6:64:
99:4a:09:2e:c5:84:cf:8b:1f:cd:1d:53:af:9f:1d:
61:71:7c:9b:d7:f0:3f:58:43:6d:aa:66:bc:23:38:
70:a4:61:f8:4d:df:30:ce:71:89:90:4a:db:96:00:
24:b0:fe:63:c6:e6:09:ae:55:0e:0d:2e:cd:32:ce:
ac:3c:64:53:16:cc:f3:a5:cc:ea:ed:7e:9e:04:d7:
bd:83:4b:34:d5:54:f4:87:05:77:6a:c4:b5:0c:1d:
17:10:0c:38:df:07:f5:39:76:b6:af:8e:88:a9:47:
55:f1:e0:b6:57:1d:c2:5f:0a:ce:48:65:b8:69:3e:
81:7d:f9:6e:19:5b:d7:b0:3d:b9:07:18:49:61:72:
20:b0:45:91:d7:6c:5d:2f:02:2a:45:cf:08:95:74:
37:43:65:f3:19:05:78:df:11:5f:f6:99:cc:73:55:
77:f2:83:ea:66:49:12:d3:e3:b6:3f:7d:64:8e:1d:
8b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B1:03:4B:98:43:D7:56:03:69:42:92:35:D3:BB:FB:11:3D:32:07
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/12CC909ADD9311EC8E83E43CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.254.146.0/23
27.254.152.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:6d:bf:a6:38:e2:67:d1:65:a3:b2:4f:49:f0:ca:4a:f0:67:
62:63:3a:58:99:19:5a:85:65:21:92:0b:16:38:5e:d4:b2:32:
a6:32:e0:2a:d4:03:10:ab:aa:fd:21:ba:26:be:8d:ab:e4:27:
29:02:8c:34:52:e8:6b:e6:a9:e0:c6:d3:95:20:0b:a9:01:70:
41:61:80:bf:4b:6f:6d:80:ee:ae:36:7b:5f:b9:89:3e:27:11:
f2:10:f1:9f:a7:57:13:96:d2:f1:72:2a:f9:d5:7c:d2:97:69:
59:fd:b7:5c:50:8a:bc:a3:64:5c:c1:51:e4:14:4c:8e:25:dd:
2c:99:03:8c:99:2d:8f:45:47:76:18:e6:56:1a:8d:9f:83:54:
ad:10:32:73:f7:0c:3d:e7:a7:94:06:86:cd:99:80:c5:59:03:
5a:d9:d2:95:ce:f0:9e:18:c9:6b:61:d6:45:7e:ee:f5:0a:79:
ce:dc:f2:51:2b:93:5c:dd:5a:7d:b3:5a:1f:57:60:4c:f9:1e:
4f:1d:c0:f2:a2:0d:7a:cf:7c:e1:d0:d0:40:8e:99:cb:95:0b:
a6:ac:ee:71:bc:22:f1:43:eb:4a:0e:9d:03:94:95:e8:90:75:
03:83:4c:e1:81:42:6f:1a:c1:dd:0b:09:fc:a8:56:03:a5:c8:
63:69:a0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:33:41 2026 by rpki-client