
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/78585C5EB6E011EFBB3E2A0DC4F9AE02.roa
File: 78585C5EB6E011EFBB3E2A0DC4F9AE02.roa (raw, json)
Hash identifier: n00ZEfN+RQLQShEfABDiTugTxIvMJjAyQgEVggYMj0w=
Subject key identifier: E0:BE:56:30:1B:6C:35:3F:74:9D:2B:AF:28:94:B4:CD:94:9C:64:49
Certificate issuer: /CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0
Certificate serial: 01CD
Authority key identifier: 69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/78585C5EB6E011EFBB3E2A0DC4F9AE02.roa
Signing time: Wed 05 Aug 2026 05:53:49 +0000
ROA not before: Wed 05 Aug 2026 05:53:49 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 24109
IP address blocks: 45.120.173.0/24 maxlen: 24
121.50.3.0/24 maxlen: 24
121.50.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl
rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B23F, serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0
Validity
Not Before: Aug 5 05:53:49 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a72cfed-64c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:3c:6b:d8:bc:fa:7f:46:27:62:a7:98:db:
d1:27:15:32:8f:91:fd:51:bc:2d:30:fa:8a:ae:f0:
a5:4c:82:19:86:4a:73:78:0a:c6:97:ba:9d:55:06:
5d:28:35:40:c7:82:96:f4:7d:a9:32:f2:1a:e3:3d:
53:35:db:5d:97:fc:45:e4:9c:a2:d5:8b:97:24:ad:
d8:8d:5b:1d:10:27:e4:bf:34:b9:a4:1f:f3:87:e4:
cf:b1:75:fb:b2:bc:f9:d5:5a:f5:64:40:ef:09:6d:
29:c4:bf:5e:63:75:72:39:90:1a:04:39:a0:24:be:
b6:36:9d:ea:08:f0:ca:09:e8:60:3c:51:06:93:2c:
84:7b:ee:75:36:55:2d:8f:e6:41:56:b1:23:6e:ee:
f2:2c:5c:39:30:da:e7:3c:72:43:62:cf:37:bc:a7:
cb:cf:e2:23:57:63:59:e8:2b:71:f5:99:57:3a:5c:
11:0e:36:57:b2:be:9a:ce:ae:81:57:84:01:e9:12:
02:ad:87:58:9e:33:27:f8:5f:d0:3c:87:3f:f0:9a:
2b:c8:19:71:89:71:21:34:ad:14:fb:4b:8a:4c:5d:
b1:e4:2b:40:2e:c0:90:4e:d0:76:0c:5a:b1:ed:6d:
56:20:ca:69:eb:a4:f4:87:c2:b8:03:f9:b9:38:7c:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BE:56:30:1B:6C:35:3F:74:9D:2B:AF:28:94:B4:CD:94:9C:64:49
X509v3 Authority Key Identifier:
keyid:69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/78585C5EB6E011EFBB3E2A0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.120.173.0/24
121.50.3.0/24
121.50.5.0/24
Signature Algorithm: sha256WithRSAEncryption
84:cc:7a:a1:9a:83:c2:81:5e:08:7f:f6:70:21:7e:43:bf:24:
09:87:bf:83:48:4f:9b:a6:7d:e4:cc:3f:6a:e8:ae:2d:f8:0f:
0b:f9:d8:bc:78:bd:81:30:32:2e:0b:0f:1c:c2:f9:34:62:c5:
31:be:f6:36:dd:d9:29:60:4b:40:12:0b:15:43:b8:03:c4:22:
20:16:32:ef:b9:d4:25:0a:15:24:b3:ea:dd:3c:5c:b8:d1:a9:
d3:e7:a2:e7:a7:f7:2f:13:30:bf:8d:e6:4b:24:26:3d:fb:c8:
71:4f:87:66:db:68:85:ab:1b:bc:4d:63:9c:1f:67:08:7f:d7:
1a:79:a7:4e:38:fd:2b:72:1a:54:c2:cc:18:fd:4c:a4:e3:9d:
9f:36:03:2f:6f:33:ec:70:ba:67:4b:c0:d9:57:4d:bb:05:64:
82:16:00:cb:b4:23:56:93:24:2b:72:ab:28:b3:2d:a2:38:3c:
e2:77:35:d3:e2:a5:14:a8:73:7f:fd:23:cd:c6:69:98:74:5d:
2f:0e:79:ed:84:5a:2f:eb:1f:97:cf:83:9e:c1:1c:8f:7d:05:
ba:ea:4f:e2:8a:12:ca:40:cb:75:7f:bd:29:b2:a3:9f:bb:0c:
59:12:96:d5:ed:04:0b:7f:ca:6f:13:57:56:66:ce:af:69:65:
40:a6:73:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:29 2026 by rpki-client