
$ rpki-client -vvf rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/5A530D08ADE611EDB7013F5DC4F9AE02.roa
File: 5A530D08ADE611EDB7013F5DC4F9AE02.roa (raw, json)
Hash identifier: Nc73qYfCTwj6XtNTABdJAODy2X+saT9m4Jsi40zTmo0=
Subject key identifier: FD:2B:63:8A:32:C5:A8:53:A4:3B:70:73:72:B0:86:4D:3A:6A:11:25
Certificate issuer: /CN=A912879A/serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0
Certificate serial: 3570
Authority key identifier: D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/5A530D08ADE611EDB7013F5DC4F9AE02.roa
Signing time: Thu 30 Jul 2026 15:18:40 +0000
ROA not before: Thu 30 Jul 2026 15:18:40 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38310
IP address blocks: 122.200.16.0/24 maxlen: 24
122.200.17.0/24 maxlen: 24
122.200.18.0/24 maxlen: 24
122.200.19.0/24 maxlen: 24
122.200.20.0/24 maxlen: 24
122.200.21.0/24 maxlen: 24
122.200.22.0/24 maxlen: 24
122.200.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl
rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 14:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13680 (0x3570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912879A, serialNumber=D55604E1CDB095B1AC0AD4317B6557062304B1D0
Validity
Not Before: Jul 30 15:18:40 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6b6b50-ad98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:dc:63:5f:7a:50:4a:bb:b4:f8:19:cf:0b:
66:db:e8:e9:22:18:6c:28:2e:4a:e9:ad:63:5a:33:
02:2c:bb:93:a4:7c:9e:15:7d:09:10:a6:b7:39:19:
07:14:f2:67:e6:48:fa:aa:5d:20:2f:41:9e:93:53:
7a:7c:a7:d5:7a:6a:1f:93:ce:50:df:44:65:a0:2e:
bf:68:95:5b:1a:a8:97:61:54:ca:7c:b0:cf:bd:11:
39:2c:32:18:2d:95:8f:8c:55:9d:2e:94:b8:45:7c:
0a:ee:96:bc:7b:30:bd:22:a7:52:b5:06:0f:09:2e:
e9:f6:70:ab:01:bf:c5:53:f1:21:e5:f7:b7:10:09:
42:8e:9c:73:e0:7b:23:55:32:49:68:83:25:9c:d3:
89:94:ac:10:7e:57:8f:9a:4b:2f:aa:9c:bd:d4:f8:
fc:71:ef:b4:69:17:80:cc:d0:85:a8:98:16:d5:64:
bd:3f:70:68:94:b3:22:82:87:e9:4f:b7:19:ba:d9:
5d:63:a4:1f:65:96:84:44:5f:a1:8b:15:21:93:0e:
c4:45:26:b4:60:f1:dd:c8:fa:86:bd:8a:c1:1c:b5:
bb:8d:17:a2:a3:61:9d:31:db:3e:86:84:04:a4:74:
96:ed:24:a0:9e:bd:35:7d:ed:6e:79:39:d1:2f:04:
dc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2B:63:8A:32:C5:A8:53:A4:3B:70:73:72:B0:86:4D:3A:6A:11:25
X509v3 Authority Key Identifier:
keyid:D5:56:04:E1:CD:B0:95:B1:AC:0A:D4:31:7B:65:57:06:23:04:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VYE4c2wlbGsCtQxe2VXBiMEsdA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912879A/0C5364261D9211E28166B5F408B02CD2/5A530D08ADE611EDB7013F5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.200.16.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:a9:5b:75:d4:f5:88:12:bd:cf:25:97:ed:90:e8:d4:55:1d:
02:c5:dc:bf:2d:d4:06:e8:d9:43:59:0a:b0:64:7f:d1:2e:6e:
10:0f:07:f4:f0:7a:46:4b:36:4a:05:2b:01:72:b9:1f:6a:ef:
1e:22:a9:12:41:7e:97:48:52:5c:c8:36:e2:36:e0:ed:35:e2:
16:1e:76:00:c9:c3:f7:a7:f4:32:74:c9:2a:8e:67:5f:cb:76:
08:96:c2:d8:77:ab:f0:f3:cd:b5:71:14:d6:27:6f:82:ed:3f:
cb:b0:ba:98:10:94:d9:30:6f:7c:f7:df:de:52:2e:3d:8d:44:
d7:33:a7:12:61:06:1e:cb:c2:34:6c:46:ff:0e:37:c2:f5:c2:
49:b4:d5:f0:e4:3b:b7:8d:1e:34:67:0d:bc:21:45:c7:bd:c6:
c8:0c:c3:f1:be:19:93:68:88:7c:ea:b5:42:50:57:de:fa:fb:
fe:80:a8:83:1b:db:c5:64:62:c2:e7:40:fb:67:0d:c7:f5:34:
c9:c3:b4:50:3e:36:79:b8:2e:1b:0c:04:23:da:c7:e7:bd:14:
02:bf:39:09:a3:00:6d:21:48:18:84:39:d8:6b:c7:88:29:95:
cb:8d:91:e1:7e:c8:2b:7f:b7:de:3c:d3:ed:6f:67:92:89:a9:
b0:c9:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:46:04 2026 by rpki-client