
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A591C4A2933D11EEA6B4A653C4F9AE02.roa
File: A591C4A2933D11EEA6B4A653C4F9AE02.roa (raw, json)
Hash identifier: 4oHbORB0SMPTkXV6U83MEI4qE6E4vZSfCXE+0kDgGKk=
Subject key identifier: C6:03:0B:09:86:29:DF:DD:F7:B4:EE:AF:AA:C7:AE:E2:36:6E:9D:F3
Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
Certificate serial: 0230
Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A591C4A2933D11EEA6B4A653C4F9AE02.roa
Signing time: Sat 31 Oct 2026 03:50:55 +0000
ROA not before: Sat 31 Oct 2026 03:50:55 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 132353
IP address blocks: 103.14.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl
rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Nov 2026 03:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270
Validity
Not Before: Oct 31 03:50:55 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ae5659f-0dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:bb:ef:b8:f0:8b:4d:53:00:f3:aa:57:45:
cf:92:4b:2a:81:26:87:e6:bf:ae:98:44:bf:a6:87:
c1:c9:f5:d7:1e:01:c8:1e:68:c3:14:6a:27:70:4d:
74:54:77:c9:dd:86:7e:a7:f8:53:eb:5f:d0:d2:4a:
ee:59:79:35:c0:6b:d5:82:1b:af:53:7f:c9:f6:c8:
a5:b8:26:a9:32:d4:12:35:90:25:3f:d1:7e:5e:3a:
ea:21:9d:d9:f9:5c:45:6d:1a:b2:51:82:36:b9:dd:
10:b6:77:c7:b2:fb:65:81:42:cb:6d:62:b7:ec:96:
e8:ac:89:23:6a:91:41:2f:c2:93:65:8f:3d:e8:1d:
af:49:85:c1:d2:ff:df:e5:f1:92:ee:35:7c:a8:f2:
44:ba:bb:08:99:84:66:8d:88:88:a2:f6:d3:87:4e:
6d:d5:0d:5f:2b:fc:af:91:b2:16:32:5f:b4:d3:96:
7b:e5:56:06:44:3a:fd:84:fc:06:71:65:58:e2:7f:
a8:24:72:98:82:c5:09:ca:f6:33:60:d8:9c:27:8b:
ab:5b:d8:ec:b4:72:61:90:ab:76:29:f1:92:17:0e:
dc:15:e2:1e:de:9b:62:0b:23:f7:01:df:11:58:5c:
ca:62:97:31:c7:32:c3:a7:92:c6:c5:9d:04:f2:9c:
19:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:03:0B:09:86:29:DF:DD:F7:B4:EE:AF:AA:C7:AE:E2:36:6E:9D:F3
X509v3 Authority Key Identifier:
keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A591C4A2933D11EEA6B4A653C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.180.0/24
Signature Algorithm: sha256WithRSAEncryption
00:0b:68:11:22:04:b7:1f:5f:0d:e4:12:82:9e:40:c1:e8:a1:
69:c8:32:a8:dd:2b:4e:a7:b5:e8:e3:ab:5e:0e:9c:d3:3c:22:
72:ce:d4:84:3e:cf:b7:22:76:92:f5:e2:28:47:ab:e5:b0:bb:
6d:5e:1a:65:01:04:e2:f4:a1:07:20:c6:72:de:d1:2e:c3:d5:
85:8a:b3:77:f8:06:fc:29:6e:68:08:ba:4b:1f:b7:35:83:fa:
e3:71:90:98:8d:88:5e:c7:c2:89:a1:18:83:04:cb:7f:ea:bf:
8d:35:66:56:86:f1:00:9d:94:8b:b6:05:ab:07:e3:ce:93:af:
08:a1:fe:16:53:66:39:57:8a:0b:52:4a:ec:32:a4:7c:03:b1:
09:71:d0:7e:26:5f:00:71:70:e8:80:6f:c5:72:38:58:74:93:
5c:de:5f:d6:03:90:62:75:23:f9:9f:52:24:8c:be:de:bd:24:
7e:e2:a1:33:7b:e7:0e:f2:d2:b7:31:03:8d:04:a7:cb:e3:30:
8d:18:d1:2d:9a:0e:27:79:3a:2f:c6:db:4f:0c:be:aa:ce:58:
98:66:f7:95:23:3a:c6:e1:d7:e4:34:c9:d8:8f:66:6d:5d:12:
22:1f:80:a7:07:16:51:32:93:14:f1:3b:00:8f:4b:3c:09:48:
d9:fa:5f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 10:53:00 2026 by rpki-client