
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/0F7B0C229B8611F1BB445B204511F970.roa
File: 0F7B0C229B8611F1BB445B204511F970.roa (raw, json)
Hash identifier: 40HGRSbKK+uhR55ngzdifY91Pr0rtcxBC49q87loP+M=
Subject key identifier: 52:D7:C3:B3:7D:94:0E:D4:1C:5E:F7:00:11:57:FA:EA:6E:0F:54:B3
Certificate issuer: /CN=A912FAFC/serialNumber=B58C39143FCD20D0735D0E5FC6EC8C792DACCBD6
Certificate serial: 04
Authority key identifier: B5:8C:39:14:3F:CD:20:D0:73:5D:0E:5F:C6:EC:8C:79:2D:AC:CB:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/0F7B0C229B8611F1BB445B204511F970.roa
Signing time: Wed 19 Aug 2026 04:25:52 +0000
ROA not before: Wed 19 Aug 2026 04:25:52 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 142225
IP address blocks: 203.2.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.crl
rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FAFC, serialNumber=B58C39143FCD20D0735D0E5FC6EC8C792DACCBD6
Validity
Not Before: Aug 19 04:25:52 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a85304f-a336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:2f:e0:ae:f9:71:1e:37:c5:9b:8e:dc:a1:
ff:91:3c:5f:75:03:b8:0d:06:c7:27:fe:66:ad:c1:
6e:94:07:6c:fb:d1:f5:20:be:fd:bf:08:1a:e1:e9:
4d:df:33:60:03:5a:14:db:6e:3a:02:27:0b:80:f8:
f3:21:55:9e:3d:70:66:ef:ff:f7:31:9a:59:08:ba:
5b:f5:78:c9:26:4d:15:91:19:23:0b:75:66:64:2a:
27:27:13:a0:39:2a:90:7d:aa:10:4c:c8:1d:8a:15:
66:19:a6:ed:98:d2:0c:dc:0c:a4:92:62:9a:34:ab:
f0:c0:32:3e:b8:a4:6f:4a:22:6c:64:37:c1:b0:b3:
63:f8:13:2e:68:8f:9e:f5:68:f3:d6:4d:19:77:5f:
d8:3c:5a:7b:62:20:ad:a5:03:a0:43:e1:0e:6c:60:
19:a0:fd:85:28:ae:8f:65:df:4c:93:11:91:bf:e0:
3c:a4:37:d2:53:3f:ce:77:38:e7:1f:f2:75:35:20:
b3:9e:83:1e:24:9f:6e:8a:1f:e5:8a:3e:a9:fa:b7:
04:be:69:ac:f8:5e:c8:96:d1:53:5d:61:85:41:05:
bf:1b:7c:22:df:b9:c7:f7:05:49:25:a1:d0:d9:b9:
51:b8:f0:90:67:77:92:3a:16:22:91:27:06:72:f0:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D7:C3:B3:7D:94:0E:D4:1C:5E:F7:00:11:57:FA:EA:6E:0F:54:B3
X509v3 Authority Key Identifier:
keyid:B5:8C:39:14:3F:CD:20:D0:73:5D:0E:5F:C6:EC:8C:79:2D:AC:CB:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYw5FD_NINBzXQ5fxuyMeS2sy9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAFC/DE3291A49B8411F1B93DFD584411F970/0F7B0C229B8611F1BB445B204511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
203.2.216.0/24
Signature Algorithm: sha256WithRSAEncryption
34:10:b6:f7:1f:72:1e:26:ad:6a:c9:16:2b:97:bf:1f:d3:b2:
dd:3d:a6:84:3d:bb:7e:b6:8d:e4:7c:16:bf:87:f0:db:9b:74:
4e:a3:92:5b:e6:b3:69:75:1a:ed:16:a4:4a:71:de:36:6a:a9:
a5:28:84:46:38:43:6a:8e:1d:f9:84:50:37:95:31:76:06:1c:
8b:80:26:3d:e0:8e:3e:a3:a3:7e:b6:cc:17:35:8f:c7:4a:19:
8b:86:05:e9:2d:98:6f:cf:54:41:51:74:89:66:60:d7:42:92:
eb:f0:29:c8:ee:d1:e7:04:fa:ce:b6:ee:97:0d:29:91:ac:ae:
ba:6a:f7:04:fa:7a:68:c0:88:53:ee:b1:3c:73:c1:4a:09:28:
b2:b2:e8:16:fd:3a:21:f4:bd:08:73:95:50:ae:5e:75:c6:e3:
31:e8:93:94:e6:6c:fd:85:f4:50:06:aa:1b:f4:19:80:f9:9f:
e1:90:25:53:50:2f:36:a0:1b:42:f9:cd:ed:ac:bd:28:59:da:
33:6e:98:1f:28:f3:4c:bb:c8:dd:47:08:b5:66:8d:0f:55:7c:
93:e7:60:13:fb:2f:54:0a:4f:f5:60:da:c8:e3:1c:ef:30:2e:
ad:eb:3a:6a:1b:19:96:3e:1f:fe:6b:56:f0:dc:71:84:15:88:
cd:e4:c3:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:33 2026 by rpki-client