
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/0E555FB49B8611F1BB445B204511F970.roa
File: 0E555FB49B8611F1BB445B204511F970.roa (raw, json)
Hash identifier: UQIF9rkndUbPojsEq71UOErz4MjHMjgUck8cfLiZidA=
Subject key identifier: B9:8C:09:65:2B:13:20:F2:61:B1:F2:2C:BB:78:7E:AC:1F:37:66:AD
Certificate issuer: /CN=A912FAFC/serialNumber=7E3FA4F7A007F42DDA0F5F5693D76194CE362CAC
Certificate serial: 04
Authority key identifier: 7E:3F:A4:F7:A0:07:F4:2D:DA:0F:5F:56:93:D7:61:94:CE:36:2C:AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fj-k96AH9C3aD19Wk9dhlM42LKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/0E555FB49B8611F1BB445B204511F970.roa
Signing time: Wed 19 Aug 2026 04:25:50 +0000
ROA not before: Wed 19 Aug 2026 04:25:50 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 142225
IP address blocks: 192.170.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.crl
rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fj-k96AH9C3aD19Wk9dhlM42LKw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FAFC, serialNumber=7E3FA4F7A007F42DDA0F5F5693D76194CE362CAC
Validity
Not Before: Aug 19 04:25:50 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a85304e-5d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:07:dd:3c:0b:94:f9:1e:ae:4f:93:28:ca:
09:bc:9c:4b:35:93:51:a3:03:c2:7b:c6:c2:24:5d:
21:76:f6:b8:4c:49:27:4f:29:5f:a0:92:eb:74:50:
d7:64:54:7f:d9:c6:55:c9:83:a8:55:d1:cd:b3:4b:
8e:c6:a8:5b:80:fd:16:ee:e2:50:a8:56:5f:1b:d0:
ce:81:dd:e6:1a:7f:8e:fb:29:3a:f7:ba:6c:ef:b9:
c0:dd:dc:64:6b:90:a7:66:31:49:47:7c:47:56:ca:
ee:13:fb:67:d0:e6:d1:1c:15:b2:25:62:25:bc:35:
1b:8a:4a:12:6c:12:8d:4b:bc:ba:60:bc:57:62:7a:
96:c3:46:7d:5f:0c:7f:52:eb:dd:78:49:44:83:12:
bb:8c:15:05:68:8e:28:87:f5:c4:e5:29:dd:54:61:
30:10:c5:73:bd:cc:d1:25:4f:6e:73:1c:3a:fc:2e:
de:4d:34:eb:b3:cd:1d:32:f3:d6:7b:b6:19:6e:2a:
b0:87:32:99:56:85:d8:34:c8:c1:12:bf:fc:d5:94:
58:e9:a7:6c:37:ab:d3:f3:bc:0a:dd:72:b9:7f:e7:
76:90:a6:d1:3b:02:f7:f9:dd:22:98:f2:82:f7:eb:
a9:66:03:ad:f3:58:29:b1:2b:a2:d7:de:c6:60:21:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8C:09:65:2B:13:20:F2:61:B1:F2:2C:BB:78:7E:AC:1F:37:66:AD
X509v3 Authority Key Identifier:
keyid:7E:3F:A4:F7:A0:07:F4:2D:DA:0F:5F:56:93:D7:61:94:CE:36:2C:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fj-k96AH9C3aD19Wk9dhlM42LKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/0E555FB49B8611F1BB445B204511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
192.170.86.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:84:75:c6:90:78:16:e3:c1:8b:f2:fa:37:21:89:57:ce:41:
eb:d5:cf:ea:91:6e:f3:d7:db:62:0e:5b:44:b7:b2:92:74:4d:
5c:9f:8c:df:76:4b:4d:49:6e:f7:44:4a:16:f2:93:d3:2e:03:
ae:a4:be:c9:97:df:73:73:ba:8b:c1:ef:ed:ba:4b:a0:84:0b:
75:9f:2a:bb:04:7f:e4:73:91:2c:70:44:33:16:c9:18:62:c7:
b8:eb:5c:c0:8a:d4:75:f7:32:8f:e3:b7:e3:83:22:9a:17:75:
45:5f:ac:0c:0c:88:e9:2f:e2:58:67:70:f9:f6:c7:80:3c:8e:
8d:eb:3e:b8:29:10:5f:df:32:4e:8e:8a:e9:9a:e9:5e:e1:f9:
6e:48:31:d2:98:0e:d0:99:22:dc:a9:49:68:4d:41:34:a7:c0:
29:6d:ca:0a:13:c8:73:13:a1:63:cc:57:49:cd:fd:59:41:ac:
08:2d:99:41:ee:92:95:aa:f0:fd:94:dd:3c:43:fa:bc:dd:b0:
b7:16:e2:e1:25:9f:71:89:fc:e2:ae:26:70:5f:cd:f6:f1:e9:
c2:d1:cd:47:f0:34:17:b5:47:88:1a:ce:0c:1f:02:53:0d:66:
97:93:af:2b:e5:7f:86:e8:46:ab:3d:0b:59:8b:cc:ba:93:0e:
25:e3:d7:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:11:41 2026 by rpki-client