
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/FCA046066C8611EFBF35D221C4F9AE02.roa
File: FCA046066C8611EFBF35D221C4F9AE02.roa (raw, json)
Hash identifier: E6IYFtcpZ/59YvDx9G0yLx/SsKVSGs49+4dsMVqOHBM=
Subject key identifier: FC:CA:DA:A0:D0:24:35:0D:5C:6D:24:65:10:3D:74:4A:7A:BB:3C:9A
Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Certificate serial: 019E
Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/FCA046066C8611EFBF35D221C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:04:47 +0000
ROA not before: Tue 23 Dec 2025 03:23:12 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45691
IP address blocks: 157.10.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl
rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 03:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Validity
Not Before: Dec 23 03:23:12 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4396f-ac75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:eb:9d:48:d9:b4:ff:57:60:cb:a8:ec:f7:
e8:c2:ea:15:18:95:7a:58:ca:b1:4c:e4:fb:48:53:
62:4e:43:bc:e5:b0:0c:fd:ca:3d:86:53:5b:53:58:
a8:d7:2c:bb:d1:81:6d:50:70:12:06:05:8a:1a:1e:
e0:f8:72:1e:bd:10:eb:d4:da:30:b3:94:87:66:c1:
93:79:55:f0:de:ab:a6:48:eb:b8:2d:d0:36:dc:9f:
e5:c0:af:4d:e2:df:40:7d:f7:68:f8:f0:df:04:1d:
8d:54:3f:39:fa:83:3d:69:fa:43:ce:ad:20:9b:13:
c2:36:0e:9f:22:03:34:39:e7:6a:80:ba:13:99:c6:
14:94:96:ce:76:37:ad:56:a1:24:c6:d1:d3:74:50:
2e:4d:b6:82:97:f2:60:fc:95:d0:bc:d2:1f:30:02:
82:e2:8a:87:b9:46:c0:98:74:c3:ab:e7:85:32:3c:
49:fc:e7:2a:86:a4:9d:05:af:a6:a9:00:6c:6a:4c:
4e:34:0c:1e:7c:a0:a0:9c:74:e7:19:05:cb:3e:38:
a5:d9:cf:5e:30:8f:e2:0c:a1:3e:30:f4:e6:e0:a1:
7f:8a:99:61:bc:8c:a1:bc:55:30:89:de:ea:3e:02:
2c:74:8c:69:9c:02:47:7a:b4:b5:eb:93:de:7a:92:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CA:DA:A0:D0:24:35:0D:5C:6D:24:65:10:3D:74:4A:7A:BB:3C:9A
X509v3 Authority Key Identifier:
keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/FCA046066C8611EFBF35D221C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.209.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5e:99:99:19:f3:32:23:7b:f8:83:40:37:4f:41:8d:bd:13:
de:ce:7f:39:02:19:c0:73:e5:31:4f:06:22:25:25:80:af:b9:
ee:cf:89:19:3e:cf:29:49:8b:9f:19:4a:7d:68:8b:0f:4a:ca:
df:94:85:db:c8:e7:90:1f:4e:97:9a:3a:ae:8a:9a:3f:48:1c:
34:25:2c:02:0f:49:71:34:74:aa:27:28:ed:da:89:7d:7e:80:
a2:68:2f:68:82:86:bb:7d:85:14:09:55:4f:5f:fe:9d:fd:ef:
c0:56:e4:c8:0d:67:ac:62:ae:fb:2b:b5:b6:4e:ec:46:71:d1:
c1:84:e5:2b:88:08:b8:4c:65:92:a5:17:d2:29:1b:0a:75:47:
97:20:e4:f2:97:89:18:0a:e3:73:b4:8f:e7:b0:ec:be:4c:33:
2e:2f:00:db:fe:e0:50:fa:24:73:93:4f:91:80:3e:65:01:33:
b0:61:54:5e:1f:82:f7:05:fc:0c:ba:1b:ce:ba:15:49:d6:7b:
ed:bc:32:0e:aa:31:d5:96:d4:d3:ca:1d:26:e2:23:14:f6:30:
e8:5d:b0:a1:e4:79:be:1d:1c:c0:82:24:d0:2f:49:8f:f3:04:
9a:7c:a0:38:6a:7b:5f:65:d1:fd:2d:70:a7:df:f0:b6:85:c4:
fd:fb:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 16:02:56 2026 by rpki-client