
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/08C7D93ACE8911EFBEC5D618C4F9AE02.roa
File: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (raw, json)
Hash identifier: 0y5xEkSpfc1VvgUXwpIUQs15dLEWYDdePZ/ZnwOHkIY=
Subject key identifier: 6C:35:C4:C8:A5:92:40:12:AB:21:78:6D:58:47:D6:1B:F3:59:D7:8E
Certificate issuer: /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Certificate serial: C8
Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/08C7D93ACE8911EFBEC5D618C4F9AE02.roa
Signing time: Thu 29 Jan 2026 05:29:30 +0000
ROA not before: Thu 29 Jan 2026 05:29:30 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153495
IP address blocks: 161.248.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Validity
Not Before: Jan 29 05:29:30 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697af03a-c552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:ef:07:0f:8a:04:14:48:c7:91:4d:68:74:
f1:c2:bb:e9:67:99:66:3e:9e:ee:eb:b9:1b:f2:20:
62:16:f5:e7:a2:ad:37:b8:a2:1e:0f:b6:ad:ba:37:
8a:6d:1f:d6:c8:70:0d:e4:ec:0d:e3:5b:f9:c4:c2:
cd:25:48:db:71:3b:ab:dc:04:ad:76:ff:a8:6c:17:
a9:b6:8e:7f:7b:6f:2a:63:4e:98:77:3b:61:bd:74:
e1:a0:9b:b0:11:e5:99:3f:30:79:f5:2b:b4:cf:03:
92:b1:ad:c5:f3:a9:5e:79:f1:de:74:c6:5b:db:9f:
d9:4e:8e:1b:db:8d:42:0c:66:dd:38:f0:ef:1f:ed:
6b:27:a8:00:08:b1:8b:12:09:3c:82:cf:b9:10:b7:
af:20:72:81:40:e2:57:55:0a:71:1f:72:46:ec:c6:
07:5b:4e:92:d8:6a:19:50:d4:47:8c:89:9c:14:f6:
3b:54:e4:c4:0d:10:09:3d:73:53:bc:f1:33:f7:e2:
56:7b:75:40:e8:3c:32:d2:e7:fa:99:9f:70:f8:9b:
b5:ac:fe:dd:1a:aa:1a:21:17:b7:1b:ba:39:91:75:
9b:25:32:d6:76:62:cd:7e:6c:90:85:53:c2:37:c9:
9a:42:1d:d5:f6:5e:ce:7f:b4:fa:04:68:03:c9:55:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:35:C4:C8:A5:92:40:12:AB:21:78:6D:58:47:D6:1B:F3:59:D7:8E
X509v3 Authority Key Identifier:
keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/08C7D93ACE8911EFBEC5D618C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.130.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:08:df:2e:01:ed:8b:85:3a:3a:6b:1a:ed:44:45:21:4c:a6:
5a:a9:17:7d:a4:46:4e:d3:fe:14:6f:32:fd:8e:30:f6:4d:d4:
36:2b:85:4f:8c:a8:4f:a6:09:e8:51:d2:e3:3f:a7:02:5c:92:
00:2f:4a:83:e2:30:c9:b7:66:77:a8:8d:0a:eb:35:bd:e1:c6:
db:c5:bb:8d:cc:32:4c:f6:22:93:23:44:64:89:05:c4:ef:25:
15:c7:45:a2:29:77:41:e5:da:55:70:7b:12:23:11:0c:76:52:
74:a7:96:0d:aa:ee:9b:34:63:69:40:68:cd:09:c2:b4:7e:b2:
5e:b9:75:23:84:a3:10:86:eb:aa:26:71:d0:8e:25:60:12:6b:
93:9e:1e:52:82:2b:3a:42:ae:b2:34:b9:dd:72:fb:80:b7:32:
d6:1d:b5:92:4d:75:42:59:c2:05:5e:be:0a:71:11:a5:9a:27:
2f:aa:c3:7e:d0:54:e6:47:50:c6:b6:46:09:b3:1c:a9:d6:20:
28:f0:88:dd:46:e9:4b:8a:c7:de:1f:5d:61:a3:1e:fa:e9:aa:
79:53:52:1c:2d:e4:06:f9:aa:38:25:16:af:aa:cf:2d:85:ad:
f5:55:ee:5e:38:e8:18:96:97:38:84:dd:13:3b:f0:8b:ea:15:
50:23:2e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:50:16 2026 by rpki-client