
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A6F2C5C2491F11F193C776FB9E833773.roa
File: A6F2C5C2491F11F193C776FB9E833773.roa (raw, json)
Hash identifier: UYXcv3ua2KvUcQTw3hjviZWaO6Oocz7OB4734PgJciM=
Subject key identifier: 87:BC:7F:D5:00:38:20:2E:C8:5E:16:67:50:E6:F5:64:30:A8:13:43
Certificate issuer: /CN=A912DE06/serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
Certificate serial: 1C
Authority key identifier: 46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A6F2C5C2491F11F193C776FB9E833773.roa
Signing time: Mon 22 Jun 2026 03:06:24 +0000
ROA not before: Mon 22 Jun 2026 03:06:24 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 963
IP address blocks: 111.68.0.0/21 maxlen: 24
111.68.13.0/24 maxlen: 24
111.68.14.0/24 maxlen: 24
111.68.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl
rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
Validity
Not Before: Jun 22 03:06:24 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a38a6b0-e105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:78:b8:c6:54:df:ca:92:9b:66:3c:9c:00:e2:
9c:d3:af:9d:cc:9e:5b:5a:12:27:cc:04:d8:7f:29:
ee:84:66:13:03:de:4a:fa:3a:bd:8a:aa:f6:e8:44:
06:d2:d7:59:ad:43:29:79:71:d7:f0:cd:c3:89:60:
21:62:4a:ff:51:6f:7e:ae:85:c9:91:74:1d:6a:7a:
0b:48:92:29:f4:b5:66:a4:b9:ee:9b:64:5c:06:2e:
ea:53:cf:b3:4c:fd:9e:71:59:fb:62:69:bc:38:e5:
34:73:73:3b:b9:26:1b:c7:56:1b:e9:6e:74:f7:82:
e0:5e:ba:7c:03:13:60:65:72:39:39:9a:0b:13:d9:
a4:bb:ae:f4:24:de:4a:57:6d:0f:ec:39:df:bd:87:
62:c4:55:e3:ff:0c:4c:61:45:76:9d:57:27:9a:11:
81:29:6c:56:e4:64:12:30:62:47:12:65:a1:a9:bb:
4b:fa:8c:bb:aa:95:90:f4:3b:97:ee:cd:c6:d0:99:
65:40:bc:72:7f:00:98:13:8b:dd:29:92:41:f6:18:
5a:61:4c:1b:e3:76:76:3f:8e:4c:9c:38:16:4c:88:
0f:9c:7f:75:dd:2c:3b:55:93:38:b2:34:a1:4f:f5:
10:8f:31:e5:60:cf:f1:ad:d2:df:64:d5:56:cc:1e:
b2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BC:7F:D5:00:38:20:2E:C8:5E:16:67:50:E6:F5:64:30:A8:13:43
X509v3 Authority Key Identifier:
keyid:46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A6F2C5C2491F11F193C776FB9E833773.roa
sbgp-ipAddrBlock: critical
IPv4:
111.68.0.0/21
111.68.13.0-111.68.15.255
Signature Algorithm: sha256WithRSAEncryption
5a:14:e4:a1:ee:b1:94:5e:22:59:b4:bd:76:18:28:b2:95:38:
0a:45:f7:30:8d:c9:3d:ad:9e:89:72:ce:3e:35:70:c3:34:e9:
6f:40:b8:2b:b3:33:72:fb:72:19:33:05:68:62:b8:c1:1a:78:
4b:f1:47:0c:95:64:9a:ed:dc:f2:ca:87:5d:a5:1a:aa:ae:f5:
ba:23:34:35:5c:e8:f4:78:c1:6b:c8:1c:f3:26:f4:eb:6a:99:
ee:24:82:46:0d:0e:8d:ca:97:88:2b:d9:16:01:32:90:db:d2:
94:15:ac:d2:c6:54:77:80:bc:53:0f:88:d3:bf:32:08:32:3d:
9f:83:0c:4f:0b:62:5e:2c:d1:81:1c:1e:62:ce:d5:60:fa:3c:
ae:be:18:66:20:f2:a1:f6:b4:f1:5e:13:21:b0:c7:1f:c3:7c:
76:8b:90:c7:7e:89:ca:2e:ee:1a:24:54:46:ac:db:5f:b3:54:
c3:49:2d:e8:71:43:c2:d7:63:b6:83:ec:c4:b1:62:b0:8b:e3:
0f:2f:b6:bb:e2:c2:9e:4f:fa:9f:44:9e:12:7c:86:5f:6b:be:
16:c2:81:da:ec:8f:82:2f:fb:9f:ad:4e:16:22:56:dd:29:67:
d7:bb:b7:6b:96:86:f1:b5:ca:3a:64:6a:c0:7c:45:af:22:aa:
f4:52:5e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:23:38 2026 by rpki-client