
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DCE2A830EC3A11EE8CC3B820C4F9AE02.roa
File: DCE2A830EC3A11EE8CC3B820C4F9AE02.roa (raw, json)
Hash identifier: 88016y9JnYu3woUQiX0nhYfsHRU/fII/HW7aFQ1BSNs=
Subject key identifier: 8C:2D:D0:8B:9D:3F:40:01:68:F3:5E:CA:FF:E4:C4:19:C5:D5:4E:77
Certificate issuer: /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Certificate serial: 01AB
Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DCE2A830EC3A11EE8CC3B820C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:01:23 +0000
ROA not before: Sat 21 Jun 2025 04:33:23 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 18013
IP address blocks: 83.229.40.0/21 maxlen: 21
83.229.40.0/23 maxlen: 23
83.229.42.0/23 maxlen: 23
83.229.44.0/23 maxlen: 23
83.229.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 03:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Validity
Not Before: Jun 21 04:33:23 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a59833-4ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:df:3d:fe:0e:cc:8a:4c:bd:30:04:ac:4d:
de:ed:b0:bc:2b:a4:0e:db:cd:c7:50:12:72:e6:86:
8b:4a:d2:18:bc:ee:f4:e2:8b:a5:e3:c4:8a:1a:26:
fc:11:0e:a5:6b:2d:9b:8d:77:b8:e4:63:99:18:e2:
7b:0c:b3:05:84:4a:e2:45:9e:b4:aa:f2:4e:e6:92:
bf:66:29:4b:0e:25:ea:1e:fb:d4:5c:8a:59:c3:76:
20:0e:d6:e6:58:6c:34:47:6c:c3:ee:1b:c6:94:6f:
11:70:0b:a6:48:5e:d7:5a:ec:e3:7e:49:28:0f:66:
a6:d4:53:a5:8a:56:f0:f7:1e:73:b8:8e:9c:82:b9:
2f:02:e2:89:72:e4:17:09:09:2a:64:e1:3b:19:6e:
49:09:74:9b:44:89:61:b7:99:a9:25:a5:2d:a5:21:
5f:8d:10:38:68:3f:36:4d:6a:2e:68:96:b4:26:94:
a5:5f:1c:f6:f9:2c:01:38:75:8c:d7:db:13:de:f2:
52:aa:62:a3:f5:32:58:94:38:ca:a6:ff:a4:ec:db:
4a:7a:b2:f3:13:b3:18:30:55:95:60:03:da:ec:f2:
d8:09:54:51:8e:6a:f4:fd:56:d7:95:22:6a:9c:3c:
e6:85:60:71:64:f1:e9:f7:a7:a4:a6:f8:77:28:48:
65:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2D:D0:8B:9D:3F:40:01:68:F3:5E:CA:FF:E4:C4:19:C5:D5:4E:77
X509v3 Authority Key Identifier:
keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DCE2A830EC3A11EE8CC3B820C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
83.229.40.0/21
Signature Algorithm: sha256WithRSAEncryption
06:39:f2:06:0e:1a:e5:8e:5f:c5:39:da:14:4a:bd:29:90:82:
6d:4d:c2:e4:2f:a2:87:0c:6c:15:53:15:77:d5:6f:d4:a5:cc:
44:4c:11:07:b0:17:b7:44:34:e0:11:70:76:1a:b5:89:62:da:
6d:5c:54:0f:4a:e9:8f:18:97:11:7c:8f:4e:75:ec:d3:69:bb:
d3:8c:6f:47:1a:ba:a8:fb:4a:15:8b:a2:71:8b:c4:2a:4e:33:
18:a9:8b:7c:c8:6f:bf:3a:01:d6:b5:f5:d1:0c:1c:4b:2c:34:
14:16:07:46:b1:b7:31:8e:8d:97:c6:ed:56:ad:6f:17:3b:9b:
5c:c6:bf:23:c0:f9:86:1e:5a:ad:89:e1:cc:50:07:b5:70:84:
9e:b9:40:3e:e6:69:57:38:db:88:ec:11:0a:b2:7e:52:e7:19:
5d:79:ba:30:d9:f3:b8:d2:c3:cf:a0:eb:99:43:7e:0c:4c:d3:
79:5b:8f:d2:3a:cb:1f:56:51:2e:fd:b3:d9:11:07:d4:25:fb:
08:0b:f9:78:1c:4a:a7:a4:4f:e9:d3:6a:84:53:74:f0:a3:19:
38:02:54:b0:24:9b:c0:c5:d8:0c:39:9a:d8:1a:02:00:7d:f6:
1a:57:81:3d:37:1d:93:28:23:79:3b:b8:6f:32:8d:d5:3b:8b:
5f:67:70:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:19:34 2026 by rpki-client