
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/30CB037EC18E11EA8BF4FB68C4F9AE02.roa
File: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (raw, json)
Hash identifier: V308MbABYbhANAE8Mchi4dMxL6SOJKFNEqZDDLPqhsE=
Subject key identifier: 29:37:C2:EC:5F:E1:2A:15:88:89:D2:14:5C:32:3A:82:09:03:75:A6
Certificate issuer: /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
Certificate serial: 0964
Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/30CB037EC18E11EA8BF4FB68C4F9AE02.roa
Signing time: Sun 02 Aug 2026 20:40:04 +0000
ROA not before: Sun 02 Aug 2026 20:40:04 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 9919
IP address blocks: 103.12.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl
rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2404 (0x964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
Validity
Not Before: Aug 2 20:40:04 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a6fab24-2dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:75:9a:d5:7c:27:22:11:5a:6b:d8:ed:85:
8e:52:08:40:5c:5f:7e:35:d6:45:0f:c7:67:eb:b8:
89:8c:67:a8:da:92:d6:ed:02:91:8e:74:b9:df:50:
59:d7:71:60:a9:06:a1:46:c2:a9:23:14:3e:dc:b1:
66:7f:32:e4:e8:3e:b7:da:67:3e:b2:3f:15:03:a3:
d7:97:c7:91:c8:54:59:6b:31:bf:45:3a:e4:da:86:
41:8e:8e:fc:ed:32:eb:58:53:35:dc:70:3a:00:97:
b6:06:a1:2d:72:8a:99:55:a0:d0:f4:f6:c4:b0:85:
60:05:30:bc:24:d7:42:c7:d6:30:2a:b2:4b:b7:85:
62:b1:0a:7b:15:0e:32:62:6d:0a:d7:85:c4:e1:0e:
e2:3a:be:91:5d:b2:50:08:4a:f8:9e:02:b3:78:25:
49:07:ff:43:7e:69:48:bb:46:17:9f:de:f5:6b:aa:
a6:63:ef:5c:55:0d:92:e7:a0:50:af:2f:2e:7c:28:
e0:84:cd:7a:67:81:70:7e:51:f8:f6:e9:f3:93:85:
7d:63:24:2d:c5:4e:65:9a:12:c4:70:ec:65:09:24:
63:1a:23:9f:83:31:4e:f6:86:f0:0d:a5:ed:c3:ed:
c7:90:f3:fe:43:cf:b4:96:8f:fc:6d:a6:ea:53:73:
9b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:37:C2:EC:5F:E1:2A:15:88:89:D2:14:5C:32:3A:82:09:03:75:A6
X509v3 Authority Key Identifier:
keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/30CB037EC18E11EA8BF4FB68C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:3f:7c:84:85:90:c1:ac:83:fe:66:38:a5:8e:6a:bd:98:bb:
78:86:62:d0:90:62:f9:80:a3:a7:7a:dd:13:8a:b9:80:d5:eb:
60:99:01:9a:ab:35:59:56:1a:7c:d5:44:d1:dd:0b:72:21:01:
67:de:e5:c2:77:9c:2d:30:7b:9f:a1:56:4e:4e:e8:b1:71:62:
4f:22:80:c1:00:81:18:58:02:54:e2:bd:75:10:7e:89:b5:3e:
19:f2:a4:ad:71:fe:4f:71:45:1f:1f:a0:7f:ab:7d:ff:e1:6f:
b3:a9:fb:6b:a8:cc:0d:4f:fc:8c:4a:b7:86:20:d9:57:1b:0e:
f4:88:be:62:d6:13:5c:73:64:04:0e:48:32:37:bd:a3:45:dd:
b5:eb:3c:a1:87:6c:98:f7:26:21:37:58:61:eb:6e:ad:fc:7c:
1f:8b:6b:57:6a:d8:02:fb:82:37:93:f1:99:6d:c3:db:ec:2a:
73:11:6a:ff:62:26:26:66:78:fa:81:ff:49:7d:29:4e:f8:ea:
22:ad:f7:a1:b0:57:88:aa:26:2e:b4:ee:d0:5b:ec:c5:5f:66:
f7:2a:15:b9:9e:5f:ce:32:ec:06:73:d1:e7:83:e7:67:35:54:
d1:49:27:1c:22:c8:28:7e:cd:8a:ba:36:b7:a3:07:21:e8:3a:
f6:37:33:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:47:44 2026 by rpki-client