
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/893C25069B8511F1B9BDE8E74411F970.roa
File: 893C25069B8511F1B9BDE8E74411F970.roa (raw, json)
Hash identifier: T24n8k0C/rq0E15su+/Emj5TIum7A0PIScjUvJ6s2tE=
Subject key identifier: 98:AB:A4:81:4D:78:34:56:E1:7B:FE:61:82:C8:25:C1:4A:D2:01:1F
Certificate issuer: /CN=A912FAFC/serialNumber=7E3FA4F7A007F42DDA0F5F5693D76194CE362CAC
Certificate serial: 02
Authority key identifier: 7E:3F:A4:F7:A0:07:F4:2D:DA:0F:5F:56:93:D7:61:94:CE:36:2C:AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fj-k96AH9C3aD19Wk9dhlM42LKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/893C25069B8511F1B9BDE8E74411F970.roa
Signing time: Wed 19 Aug 2026 04:22:06 +0000
ROA not before: Wed 19 Aug 2026 04:22:06 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 10221
IP address blocks: 192.170.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.crl
rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fj-k96AH9C3aD19Wk9dhlM42LKw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FAFC, serialNumber=7E3FA4F7A007F42DDA0F5F5693D76194CE362CAC
Validity
Not Before: Aug 19 04:22:06 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a852f6e-4e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:87:2b:7c:06:56:34:43:72:36:92:2b:2f:
2f:1f:ab:a2:3b:77:f2:1e:71:ab:15:f9:fe:19:4c:
e9:b2:9f:91:41:18:a4:62:59:29:2c:f4:77:bf:4a:
f2:f3:01:87:af:d2:2a:aa:80:4a:af:01:cf:04:36:
a7:fd:5e:e4:db:ac:04:14:34:45:cd:1e:23:d4:65:
fc:29:fc:56:15:07:6d:a4:fb:7c:24:a6:69:aa:98:
be:d0:d4:30:16:0b:15:ba:06:15:54:87:bf:95:53:
e2:ca:97:fd:de:1c:f6:60:c9:05:af:8f:dc:4b:06:
b6:54:b3:4f:2d:32:8c:31:c5:db:3b:bf:75:76:38:
19:51:d7:b3:eb:d2:fa:3a:28:ec:ca:9d:77:c2:55:
cc:39:46:cc:e8:fa:e4:0f:80:ae:4f:2c:7b:11:83:
4a:a9:8a:85:c9:0c:f7:02:d0:9a:c5:a8:4f:0e:2e:
2b:97:e8:9b:90:cb:91:f7:25:18:fd:51:1b:c5:50:
f1:f6:f7:50:bb:51:aa:14:4b:e4:48:3e:da:b8:0f:
34:bb:96:eb:27:a5:75:64:13:0d:c8:79:6c:2d:7b:
5e:ad:e8:a5:f5:96:db:bc:39:e6:2e:88:32:e4:ff:
04:39:75:96:69:56:92:f1:3a:90:66:b2:74:77:70:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AB:A4:81:4D:78:34:56:E1:7B:FE:61:82:C8:25:C1:4A:D2:01:1F
X509v3 Authority Key Identifier:
keyid:7E:3F:A4:F7:A0:07:F4:2D:DA:0F:5F:56:93:D7:61:94:CE:36:2C:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fj-k96AH9C3aD19Wk9dhlM42LKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/893C25069B8511F1B9BDE8E74411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
192.170.86.0/24
Signature Algorithm: sha256WithRSAEncryption
26:bd:03:8b:de:02:28:8b:a4:41:08:7e:3e:60:39:70:ca:0e:
a4:83:f7:35:c3:bf:1c:2e:b1:c4:be:a3:31:9b:6b:de:fa:87:
12:fb:6a:71:db:50:fc:75:75:b0:31:fb:66:ea:9e:c3:f1:1f:
04:1d:a4:47:a5:b1:84:25:6b:12:8a:a6:4b:86:e8:40:69:3d:
34:4e:66:fd:09:83:c4:eb:e4:6c:6f:d3:ac:95:03:ad:27:5c:
38:f7:9a:08:56:68:ae:05:ce:39:1b:9c:3b:43:c2:52:5c:39:
92:b5:f0:90:bd:f1:b4:3e:f2:ba:a5:20:ec:b1:98:df:bc:98:
25:49:a1:d1:b1:d7:45:43:83:d5:34:c3:58:c6:a6:25:27:b4:
4b:6a:fa:72:47:74:1e:e2:71:d1:b6:cf:5c:ff:43:5b:ac:0a:
48:c1:e8:80:e9:ce:ae:2e:d3:16:3e:53:2b:f4:54:0a:f4:2c:
19:0a:1f:01:66:4a:27:71:8b:ee:fb:e1:7f:cb:c6:6f:74:07:
5a:f8:2b:58:6f:4e:1c:c2:84:27:55:9d:35:b0:c4:52:a3:45:
69:8b:e3:e1:5a:5e:2a:ea:2c:bf:41:ca:ef:ba:d3:42:f6:e8:
35:8b:0f:1b:68:6a:77:f4:2a:ae:65:53:f2:b2:3f:c5:00:f3:
82:6a:ac:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:10:59 2026 by rpki-client