
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/FC34967C6C8611EFBF35D221C4F9AE02.roa
File: FC34967C6C8611EFBF35D221C4F9AE02.roa (raw, json)
Hash identifier: 9vn9aNac6NN/1kMCYleAi9M7mbZTN9Jpf9hVVI22FOc=
Subject key identifier: 4F:BC:3C:EB:0B:1F:72:1F:77:E2:05:E9:70:46:A4:D3:75:62:D5:ED
Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
Certificate serial: 01D4
Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/FC34967C6C8611EFBF35D221C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:23:03 +0000
ROA not before: Tue 23 Dec 2025 03:23:10 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45691
IP address blocks: 202.47.187.0/24 maxlen: 24
2001:df3:25c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl
rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 03:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
Validity
Not Before: Dec 23 03:23:10 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a43db7-abe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:19:77:c5:bd:91:af:2a:1e:13:d6:16:6b:
89:aa:72:8a:b3:ec:fe:e1:ae:26:91:6a:29:98:45:
f6:ea:26:f3:1a:62:06:fc:e7:51:29:99:2a:d6:4c:
fc:82:6e:be:25:46:aa:6e:2f:4a:1f:25:76:0d:c6:
67:5d:a4:a7:5b:a2:20:4d:2c:02:48:bb:95:f6:96:
02:14:10:1c:46:90:07:e0:bf:ea:30:dc:f2:0f:d0:
d2:9a:05:d5:9e:70:f8:51:00:7e:66:8c:22:a3:93:
35:50:47:a7:f7:90:51:d3:1f:22:5f:4b:a6:06:46:
b4:5a:63:9b:57:0e:5e:cd:a4:1d:09:9d:ac:fb:49:
6c:35:bb:d7:5a:05:a5:c7:83:6b:df:db:38:89:9d:
e0:18:a2:17:92:ad:87:ce:b5:63:0e:4a:34:74:af:
7b:0e:69:fc:f2:fd:35:89:cb:b7:67:91:de:6a:fb:
28:5d:c3:50:9c:2b:9e:4d:8a:bf:14:de:50:28:8d:
93:98:f2:35:55:d0:60:d2:f2:fd:ec:21:d3:07:17:
b7:b7:26:e0:5a:1c:22:af:bc:c8:5f:b1:69:17:e4:
ae:16:e5:d8:a4:38:7d:c8:e4:07:8f:56:43:39:b4:
99:3f:8c:f8:27:85:a8:99:ce:8f:7a:b1:af:81:3b:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:3C:EB:0B:1F:72:1F:77:E2:05:E9:70:46:A4:D3:75:62:D5:ED
X509v3 Authority Key Identifier:
keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/FC34967C6C8611EFBF35D221C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.47.187.0/24
IPv6:
2001:df3:25c0::/48
Signature Algorithm: sha256WithRSAEncryption
a8:5a:5e:4d:fb:28:10:3d:54:cb:64:e4:ee:ec:40:25:f9:09:
8d:5e:a2:23:44:2f:b0:33:c2:bb:d6:6c:cf:43:9b:48:6a:09:
bd:90:39:fd:ee:f4:c0:ed:99:e9:d6:12:61:b7:1f:6a:9c:1d:
2e:84:e8:78:4b:65:7b:7e:76:0b:06:90:b6:68:99:15:5f:a2:
02:62:35:06:37:6d:6d:78:28:86:dd:10:ac:26:97:02:a9:05:
63:9c:81:e2:b7:68:9e:46:75:c8:af:a2:e1:5d:cf:57:5d:e7:
b6:ae:75:ce:f0:bf:92:c5:ff:a8:15:3e:cc:96:d7:c1:5c:39:
09:60:ed:c1:5c:39:2f:e8:9f:22:8f:83:4d:b9:2d:6e:26:a2:
70:ab:ac:34:5d:61:72:76:34:93:f7:7c:cb:49:a1:92:42:af:
b5:cc:37:98:24:ad:53:00:44:68:5a:69:ff:46:d8:5f:d5:98:
b8:32:56:7b:87:08:f5:76:54:9c:34:05:52:fd:f9:09:11:54:
46:fb:3b:b9:a4:07:60:fb:13:12:8a:4b:6b:e6:9f:26:53:8e:
14:c5:81:8a:8e:d9:61:31:78:05:d7:9e:65:1c:ef:f0:31:42:
3f:3f:0a:37:9a:c0:1d:f8:f1:f0:ac:f7:a5:05:b5:93:6a:d1:
a0:56:ba:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 15:58:50 2026 by rpki-client