
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/047C04705AC911EF9DF4275AC4F9AE02.roa
File: 047C04705AC911EF9DF4275AC4F9AE02.roa (raw, json)
Hash identifier: a/TnggBB8UkIjAm7pActJAUeWI+/1tK1Ltz4pGc0HY4=
Subject key identifier: 1C:62:AF:42:92:DF:3C:6C:64:DB:07:AA:F1:F2:03:78:1A:B4:2C:6E
Certificate issuer: /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
Certificate serial: 01A7
Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/047C04705AC911EF9DF4275AC4F9AE02.roa
Signing time: Sat 03 Oct 2026 05:53:21 +0000
ROA not before: Sat 03 Oct 2026 05:53:20 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 14618
IP address blocks: 202.160.113.0/24 maxlen: 24
202.160.115.0/24 maxlen: 24
202.160.117.0/24 maxlen: 24
202.160.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl
rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
Validity
Not Before: Oct 3 05:53:20 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac09850-96d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:89:c7:3c:b8:6f:f8:0f:30:52:f6:e1:bb:
8c:70:3f:e7:57:3c:d8:3c:41:de:79:cb:e8:4f:ec:
7f:e9:c1:9e:f1:90:2f:66:a5:a6:c8:d1:ef:b0:64:
5b:22:85:60:7c:45:39:31:c6:f4:8e:c3:ae:57:f2:
d2:e9:ca:94:f2:33:05:77:fe:2d:27:46:6d:5b:b1:
0d:1e:7c:67:53:16:52:e7:49:ae:98:ec:7d:4e:c3:
34:bf:eb:04:2a:6e:4d:2a:c8:6c:84:d0:35:d2:ef:
10:8e:01:c2:7d:62:8a:6c:10:d7:c3:e7:c9:d4:9f:
86:70:ff:9b:90:2e:2b:0c:f9:ae:1a:5c:9f:94:6f:
33:40:30:48:7f:51:e0:1c:9a:3a:7a:a8:71:bd:82:
f7:b2:ce:89:46:6d:dc:f2:b8:f4:d5:46:8f:4e:23:
5a:d1:ea:fa:d0:04:ea:28:70:97:6b:5f:d8:6d:47:
3d:84:d5:7d:d7:0c:6e:ac:11:ae:5a:a4:a7:b2:e1:
8f:a2:63:ec:48:4a:bb:54:b8:c7:0d:3a:18:4b:b5:
a6:0a:91:ee:cb:09:b1:80:84:12:ca:98:f0:a3:32:
c2:f1:ba:db:4c:86:3c:ac:03:82:c0:08:a2:45:c6:
88:a6:73:c5:8a:d6:6b:7d:32:42:0c:2b:50:f5:c4:
8f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:62:AF:42:92:DF:3C:6C:64:DB:07:AA:F1:F2:03:78:1A:B4:2C:6E
X509v3 Authority Key Identifier:
keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/047C04705AC911EF9DF4275AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.160.113.0/24
202.160.115.0/24
202.160.117.0/24
202.160.119.0/24
Signature Algorithm: sha256WithRSAEncryption
96:5d:3d:38:b5:50:48:90:a1:43:46:52:24:8a:cb:72:58:6c:
d8:f9:3a:73:d2:3e:10:13:33:3d:b3:97:c9:be:ab:51:61:48:
76:87:bc:b6:94:01:fd:e1:56:5b:23:8a:44:cc:22:3f:1e:e6:
e0:e3:e1:05:e2:1c:3c:33:36:89:c1:26:b4:67:ec:14:2b:34:
48:da:2e:62:a5:73:bf:09:23:06:07:61:ec:d3:db:af:33:7c:
68:0e:18:7e:11:cb:1e:d2:6f:c3:49:d8:8b:bf:38:69:c4:b5:
1e:5d:49:52:55:22:b0:12:7a:fb:21:d6:9d:98:55:c8:3d:37:
b6:6a:45:d0:2d:ab:df:f1:e2:e4:68:5c:52:ab:b0:5c:2f:20:
b2:a4:79:04:d2:68:c7:aa:db:7b:01:91:9b:40:40:78:6f:b5:
d3:23:8a:7a:e8:74:e2:3b:69:21:60:d7:81:1d:dc:b6:ff:c1:
f6:1f:eb:d7:70:c0:92:5a:b3:fa:6b:8c:ad:6a:b5:93:75:be:
04:53:09:ff:0d:d1:45:27:e8:ae:a3:b8:b9:7b:2a:75:db:6a:
40:72:dc:43:df:0a:b7:6d:29:0c:99:d5:41:cf:a6:54:ea:89:
e4:14:bc:e3:08:71:8a:7b:b5:57:51:f8:d4:c1:40:ac:d3:30:
7e:75:4a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:24:02 2026 by rpki-client