
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/E29CD82EC58B11EFBA44DE34C4F9AE02.roa
File: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (raw, json)
Hash identifier: 9dMuDPQ7Unf82i4iHOF9hXKZnCQhPIgKBJEAkT/HbQ0=
Subject key identifier: 64:A9:5F:FA:01:52:4C:84:4D:48:9C:CD:09:BE:F7:47:A8:F9:22:F8
Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Certificate serial: CC
Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/E29CD82EC58B11EFBA44DE34C4F9AE02.roa
Signing time: Tue 27 Jan 2026 05:28:11 +0000
ROA not before: Tue 27 Jan 2026 05:28:11 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 137943
IP address blocks: 161.248.50.0/23 maxlen: 23
161.248.50.0/24 maxlen: 24
161.248.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Validity
Not Before: Jan 27 05:28:11 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69784ceb-fd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:aa:b9:6e:19:d2:ef:82:4c:e2:ed:47:09:
63:0f:f0:ab:67:95:54:3a:6d:d5:e1:d4:3d:11:62:
ea:70:c3:40:b2:d3:30:c6:7f:12:b7:f2:dd:81:df:
5a:09:54:e5:62:74:97:3b:50:36:80:d1:36:ae:62:
6d:a2:0a:cb:16:a9:5d:17:db:e6:0f:66:69:08:1d:
75:c4:a6:e9:16:44:e9:67:32:30:4b:2a:90:8e:e4:
4f:16:d0:4f:04:65:93:78:ed:f1:16:f8:32:c3:b9:
76:30:bb:c7:8a:89:8a:9a:86:3c:97:aa:8c:a6:89:
97:af:13:0f:9c:b6:db:58:1a:ac:4b:e3:7b:02:97:
b2:ad:76:f9:3c:d1:d7:95:42:5e:39:34:69:69:6d:
b4:31:f6:e6:3e:81:2d:2f:77:ae:76:7e:74:f0:e3:
92:c8:b5:49:f9:01:dc:c0:5b:7d:1e:ad:c7:f1:28:
54:36:8e:e5:de:c7:77:2c:c4:a4:35:be:78:5d:b9:
8c:63:67:5a:6d:9c:8a:82:8c:f2:5d:d8:c4:c2:b7:
e3:1a:e0:5c:1a:f8:16:fc:b8:df:71:e6:cf:98:19:
f3:be:51:df:be:62:b3:71:7a:64:e1:cf:4e:88:dc:
18:33:f1:7f:f4:cb:e7:06:d2:9c:f3:ee:0e:2d:86:
ac:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A9:5F:FA:01:52:4C:84:4D:48:9C:CD:09:BE:F7:47:A8:F9:22:F8
X509v3 Authority Key Identifier:
keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/E29CD82EC58B11EFBA44DE34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.50.0/23
Signature Algorithm: sha256WithRSAEncryption
44:61:ab:aa:48:0b:04:dd:f5:f3:d4:b6:3d:d0:54:26:52:82:
95:ca:4c:a5:e2:17:b4:d7:9f:11:55:71:b6:9e:a7:8a:13:74:
ed:e7:2b:05:dd:3e:49:e7:c5:0d:2b:9c:9e:32:ef:b5:a3:5b:
7c:52:f7:96:d2:a0:59:d9:5d:99:bc:d3:6e:43:6c:b7:13:fa:
78:05:87:ef:23:94:65:0b:c6:75:10:21:40:5d:53:55:26:30:
aa:5c:65:58:69:91:05:aa:22:c6:a1:ce:ba:b8:2a:cb:5a:1c:
2e:de:47:a3:8f:09:93:d9:30:a8:17:88:71:3a:2a:ca:49:b7:
bc:62:26:28:c3:ff:a3:f1:cd:95:0c:c3:04:06:e7:74:44:9d:
2d:71:4b:20:b5:49:d2:f7:f2:80:9b:8e:1b:61:0e:6a:7f:7a:
9a:14:a7:dc:c3:e6:7a:5a:64:7e:17:00:20:c8:12:c3:99:84:
f7:e4:54:4b:98:df:af:66:d2:f1:0f:19:09:8c:42:41:08:0e:
5e:f0:53:bc:f5:bf:c4:27:9c:55:a4:13:21:56:49:69:11:25:
86:ee:d4:0c:ea:dc:20:6f:6e:13:e1:b3:96:c4:d9:c7:db:5a:
d1:9f:f1:80:55:69:34:2a:68:60:40:8a:46:fd:69:4e:ea:9a:
ca:19:51:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:26 2026 by rpki-client