
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/B8104C9E531511F189594BAEBE833773.roa
File: B8104C9E531511F189594BAEBE833773.roa (raw, json)
Hash identifier: lrI09dlEBCTooAeOU2Wr6Z8X0DDGHdt7h2TqH79QhUw=
Subject key identifier: 58:67:19:B8:81:1F:71:8A:0C:B7:B5:18:BF:DC:37:63:E1:20:20:76
Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Certificate serial: 0109
Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/B8104C9E531511F189594BAEBE833773.roa
Signing time: Tue 19 May 2026 00:00:18 +0000
ROA not before: Tue 19 May 2026 00:00:18 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 0
IP address blocks: 143.188.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Validity
Not Before: May 19 00:00:18 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a0ba812-6fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:80:b1:16:d9:44:cf:d4:0a:e6:23:31:0d:
e3:7c:1d:58:09:5f:a6:85:90:07:00:9b:62:2d:bf:
e3:e4:4e:93:64:1e:c4:ce:aa:0d:a8:c2:e7:bc:e0:
10:78:54:bd:a2:ea:f6:7a:81:e5:06:fd:01:f0:66:
a0:21:70:f3:69:71:34:43:92:8f:1b:b5:e4:02:a0:
4c:66:51:9c:7e:b3:86:f2:00:85:ad:f1:49:71:17:
b5:3c:f4:a1:61:9f:dc:e6:ef:35:c6:7c:d7:9d:29:
cb:6f:9b:d8:6c:c4:84:80:b9:2a:ba:d4:6c:4c:e4:
40:e9:2e:b3:e7:46:e1:52:4c:11:4b:68:31:4f:a8:
9d:f3:e0:89:d6:4b:d9:d7:c8:33:af:f7:68:d8:a4:
73:b4:eb:13:c0:4d:d4:b2:3d:79:a5:5b:54:51:a6:
9b:b5:fd:8b:e2:bf:b1:8d:f8:c7:6f:88:94:52:9c:
4c:82:8f:0f:76:81:5d:14:20:de:ce:be:44:8d:12:
19:81:e5:71:97:71:23:7b:18:0b:1b:d7:b0:3e:80:
c0:56:d6:d1:2f:f6:ca:cd:ce:06:a9:df:69:d0:98:
d6:7b:cb:42:09:f0:b5:19:a0:f2:c7:f6:0f:45:32:
d3:97:63:1b:3e:d9:fb:cb:c8:7d:fe:34:0e:58:3c:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:67:19:B8:81:1F:71:8A:0C:B7:B5:18:BF:DC:37:63:E1:20:20:76
X509v3 Authority Key Identifier:
keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/B8104C9E531511F189594BAEBE833773.roa
sbgp-ipAddrBlock: critical
IPv4:
143.188.162.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:73:27:46:da:35:f6:11:c9:c7:e5:5e:10:34:e7:28:7d:cb:
8c:85:43:f3:51:89:a0:c8:52:76:b5:b2:d9:dc:0f:f4:d8:c5:
de:4e:d7:84:02:bd:2b:42:f4:f5:bb:6e:b0:2b:d6:16:87:e8:
ea:c4:5f:f3:6a:c6:ae:27:4b:d9:2b:7c:c1:3d:17:37:53:48:
e1:d5:e4:fe:41:37:ce:48:a0:99:cd:d7:23:4e:28:8f:5d:0e:
4d:d6:f3:ea:92:49:69:3a:23:b7:90:3e:dc:18:e2:a7:1b:5a:
d1:39:84:31:07:84:67:93:82:a0:54:42:2c:8c:6e:4f:28:00:
cb:a3:1e:22:77:eb:2c:60:78:4b:49:b5:f1:50:8a:69:da:2f:
26:87:a3:3d:ee:2e:94:d8:39:e5:62:d7:fa:a6:c1:5c:77:c6:
01:5c:bf:b5:8f:78:4b:fc:b9:bd:cf:0c:20:1a:41:65:b0:a0:
4e:bf:a0:05:64:d4:0b:d4:10:ce:65:65:70:0f:12:0d:d0:c1:
9c:d7:e7:a5:35:47:0e:23:22:4b:fa:7c:b9:a6:0b:06:0c:43:
54:46:ec:6a:c0:64:2a:87:45:d4:da:2a:81:56:09:02:a8:5b:
9f:6f:e7:72:45:c0:bd:26:eb:c2:15:f2:9e:15:8b:c6:97:41:
bd:11:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:52:56 2026 by rpki-client