
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/7B73A414A81311F0A69E5E49C4F9AE02.roa
File: 7B73A414A81311F0A69E5E49C4F9AE02.roa (raw, json)
Hash identifier: vbUGM0rj13mOKDHrJjbm/2qq1K6gnIIlTesnUtvINDw=
Subject key identifier: 22:70:D7:F3:17:0E:CA:2F:94:23:27:0F:E0:65:F3:9C:A6:5B:E6:1E
Certificate issuer: /CN=A912C8AF/serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1
Certificate serial: FB
Authority key identifier: 84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/7B73A414A81311F0A69E5E49C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:28:17 +0000
ROA not before: Mon 13 Oct 2025 09:03:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140224
IP address blocks: 45.158.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 19:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1
Validity
Not Before: Oct 13 09:03:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a47731-2343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:9b:ed:8e:9b:ab:30:b4:39:00:0c:4d:ab:
8f:ea:fa:76:c7:64:98:9f:53:d6:9d:3c:49:e8:dd:
d2:8f:96:4b:76:11:e0:77:dc:53:55:b3:0b:61:78:
fa:9f:c9:7c:67:67:12:cb:40:0c:f5:18:91:4c:a3:
bf:88:58:5e:db:53:5d:4a:7c:63:f8:0e:f0:42:ab:
d8:65:18:0c:5f:09:cd:73:ff:d2:55:62:54:3f:59:
48:6e:79:61:08:1f:19:78:cd:49:66:eb:ea:0f:70:
c4:46:59:71:ce:a3:8b:b8:98:1f:36:33:a8:bc:0a:
da:ed:6b:08:c3:4b:01:0c:98:1b:b1:2a:c7:54:46:
29:03:b3:31:a1:18:ad:01:10:61:a8:d2:b0:ec:94:
cd:36:5e:aa:48:46:03:26:24:ff:72:0e:a9:35:c5:
bf:1e:34:a8:1d:50:19:50:d9:e4:55:d7:8d:fb:37:
6d:6f:47:65:48:e7:80:86:a2:91:e1:a2:56:45:57:
a5:b5:5c:47:50:bc:17:62:45:87:7f:44:02:32:d3:
90:f3:d1:5c:fc:9f:b6:fe:aa:2e:b9:9d:56:54:84:
43:e1:9c:02:85:59:1b:b9:16:e5:7e:be:56:56:00:
b8:03:69:87:d7:cf:45:6a:41:2a:76:8d:46:d5:f8:
e2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:70:D7:F3:17:0E:CA:2F:94:23:27:0F:E0:65:F3:9C:A6:5B:E6:1E
X509v3 Authority Key Identifier:
keyid:84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/7B73A414A81311F0A69E5E49C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.158.183.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a9:03:aa:61:0b:51:8f:19:f3:9a:ef:cb:bd:2f:a4:6b:7c:
02:c6:65:a2:ce:c3:1a:54:d0:59:41:a6:1c:a3:78:c3:ef:2b:
37:3d:a1:59:d8:fb:75:2d:6a:1c:84:d4:b8:28:0e:43:2b:c2:
e7:4a:f4:81:c9:90:c0:d3:15:40:24:5e:cc:12:01:b5:9c:55:
40:68:c3:ef:37:d6:a4:be:7f:84:17:5b:68:31:89:02:d0:70:
21:77:7e:ce:0f:7d:ac:92:9e:59:e4:49:09:11:3c:95:a3:33:
25:37:04:b4:c1:01:62:cd:eb:48:7e:1b:bf:ab:a5:55:82:38:
02:1d:58:1d:af:ab:41:94:a4:d8:bc:6d:21:75:81:b6:01:ed:
e1:4a:71:62:e0:80:e0:00:2d:d6:52:5d:6e:0c:62:fe:f5:87:
f0:fc:71:03:ef:eb:d8:4c:65:87:fe:db:fc:32:ad:59:7f:a2:
95:18:44:0f:09:f7:ed:e5:60:4a:09:1c:7a:af:a8:54:45:24:
6d:bc:ec:a2:ec:a1:56:8e:4f:28:d7:6a:83:b8:9d:d8:7c:39:
43:26:35:c9:75:4e:b5:b8:9e:5b:99:c0:49:4b:10:cc:0c:bf:
51:17:e1:1a:ed:6f:52:08:4a:04:4d:9c:a5:a8:18:73:96:b5:
41:40:59:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:07:12 2026 by rpki-client