
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/85F80AF6EC3011EE92FDDE25C4F9AE02.roa
File: 85F80AF6EC3011EE92FDDE25C4F9AE02.roa (raw, json)
Hash identifier: FYlnUAPJSzNObYQD/1sPoBaqtLAU8e2VQXM8p7WYnyU=
Subject key identifier: 64:0A:96:B7:71:ED:80:EA:37:A9:05:27:2C:2A:71:34:31:11:97:2C
Certificate issuer: /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Certificate serial: 01A9
Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/85F80AF6EC3011EE92FDDE25C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:01:21 +0000
ROA not before: Sat 21 Jun 2025 04:33:21 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 139659
IP address blocks: 83.229.40.0/21 maxlen: 21
83.229.40.0/23 maxlen: 23
83.229.42.0/23 maxlen: 23
83.229.44.0/23 maxlen: 23
83.229.46.0/23 maxlen: 23
83.229.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 03:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Validity
Not Before: Jun 21 04:33:21 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a59831-f579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:64:af:2b:2b:23:89:0d:69:db:6d:2b:4d:d4:
30:69:a2:d2:70:ac:5b:fe:fb:28:70:23:c6:28:5a:
9c:63:70:65:88:14:24:a3:ad:06:75:f9:cf:49:90:
c8:15:40:27:77:e1:51:94:17:2e:1d:8a:c2:58:0f:
28:ee:bf:56:1b:79:c4:b5:fe:32:ed:09:5d:67:f3:
d1:c3:f8:b3:ad:4d:da:c5:85:58:73:2a:ea:7b:c2:
ea:af:a1:e4:70:6d:0f:e8:18:6e:37:34:f4:8e:68:
8f:ac:d6:2a:de:1a:92:d5:c1:c6:b1:13:2d:ee:ad:
a8:30:0a:fd:0f:36:aa:1a:db:9e:f4:0e:34:70:9c:
64:6a:18:b7:07:e0:54:fa:78:5d:ab:6a:b3:0f:67:
fc:29:db:2a:c4:70:3d:87:bd:12:57:c1:fd:3f:1b:
3c:de:56:66:8f:0a:d5:9a:3d:00:15:ee:f4:45:36:
cb:11:24:f6:94:be:ba:71:32:f2:b2:6f:82:75:ea:
37:f7:e5:ac:eb:16:93:df:f0:b4:4b:7f:af:cc:89:
4a:c8:5c:97:a4:cf:51:ae:35:fc:84:16:19:42:b1:
48:d0:e5:96:42:e5:a7:71:52:a2:e9:73:f9:0a:b0:
3f:3b:56:14:11:7b:0d:28:b9:36:a2:ec:67:c4:4d:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0A:96:B7:71:ED:80:EA:37:A9:05:27:2C:2A:71:34:31:11:97:2C
X509v3 Authority Key Identifier:
keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/85F80AF6EC3011EE92FDDE25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
83.229.40.0/21
83.229.120.0/21
Signature Algorithm: sha256WithRSAEncryption
75:59:f9:0b:ca:03:9f:02:39:20:c4:98:4a:cf:ca:12:de:d5:
60:21:96:1e:df:75:e2:22:4e:5e:e8:a7:aa:2e:66:46:2d:03:
00:67:85:27:05:7c:44:e5:dc:cd:34:a7:13:90:bb:0f:8c:b0:
fa:14:f8:cf:16:c6:99:ab:a2:99:02:d0:8e:f3:df:2e:7d:0a:
a7:07:ae:ac:7b:2c:5e:ae:f4:a5:9c:6b:f8:3b:28:17:13:3f:
4a:d8:4e:4b:38:6a:0e:8b:2a:a4:d3:2e:65:f6:75:dc:e5:90:
b5:6a:02:76:2c:ba:b9:43:d4:26:4d:17:72:42:ea:5d:fd:8a:
7e:2c:82:5e:44:bb:0c:c5:08:1c:b6:d6:ad:4a:3b:72:c3:a8:
40:0b:f4:2c:4b:b9:6d:c3:48:41:7e:c0:0d:c9:7f:e2:19:fe:
fc:d2:e0:78:7e:92:d8:6f:dd:d4:b3:74:8d:dc:73:58:36:71:
8b:10:97:81:e9:d2:cf:31:a7:fe:11:d2:4b:a2:2c:78:4f:b8:
42:25:b5:f1:47:68:fb:a7:c5:e5:ac:26:78:3d:84:ba:b4:94:
ac:d3:73:f6:05:75:f1:d2:aa:dd:d3:b7:6b:da:2d:34:93:af:
d0:dc:09:16:a9:eb:09:37:84:37:ab:56:0f:32:1f:27:5b:83:
85:ec:ab:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:13:59 2026 by rpki-client