
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/5C92DD9AA40111F1A3E298106411F970.roa
File: 5C92DD9AA40111F1A3E298106411F970.roa (raw, json)
Hash identifier: PtrVig6rANGuDw4j5aNoWsmOfVkMKFzjnif4UqOH7zI=
Subject key identifier: 83:30:4F:63:79:72:8E:E4:10:2F:99:51:4D:ED:A8:AB:9B:FD:EA:0E
Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial: 05E4
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/5C92DD9AA40111F1A3E298106411F970.roa
Signing time: Sat 29 Aug 2026 23:28:38 +0000
ROA not before: Sat 29 Aug 2026 23:28:38 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 7029
IP address blocks: 113.20.48.0/22 maxlen: 22
113.20.52.0/22 maxlen: 22
223.29.128.0/22 maxlen: 22
223.29.140.0/22 maxlen: 22
223.29.144.0/22 maxlen: 22
223.29.148.0/22 maxlen: 22
223.29.152.0/22 maxlen: 22
223.29.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 23:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1508 (0x5e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Validity
Not Before: Aug 29 23:28:38 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a936b26-c8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:e3:6d:dd:f1:ce:fe:e1:50:c5:5b:70:59:
21:ff:8f:56:2e:0c:7e:e0:14:53:7d:f3:f0:ab:63:
58:ea:0d:c8:bf:93:fb:a5:4a:54:68:db:27:b3:b6:
f5:59:08:95:a2:d2:86:cf:ac:af:3a:d4:b3:9b:ba:
ea:e2:b9:1b:cf:0a:1e:bd:ac:fe:56:b6:36:86:a4:
30:cc:ac:57:29:34:fb:e7:9d:27:45:a9:f9:65:df:
3a:23:af:b8:b9:da:17:20:b4:38:68:00:1f:8d:24:
50:9a:90:2a:0f:1f:76:e3:94:52:a0:69:05:32:12:
46:79:ec:57:72:17:25:42:5b:c4:24:55:e0:cf:88:
ff:20:50:46:dc:76:23:92:8b:63:36:da:8d:ef:0e:
3f:18:f3:2e:21:fb:6b:81:2e:54:51:80:97:f9:77:
47:6a:94:53:63:1f:bf:e3:29:28:13:3f:d4:19:40:
4d:f0:58:06:3b:71:4b:e4:b8:fc:94:9b:7e:c7:6b:
31:36:da:f6:72:ed:f7:77:ae:1a:b7:4e:28:e4:ef:
d7:5c:b3:ce:da:c6:b0:a4:13:77:b4:bf:8b:19:25:
73:16:f1:34:78:2a:99:25:36:38:c4:07:b3:02:d9:
67:52:93:d0:29:0c:4a:5f:35:98:d4:38:00:11:53:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:30:4F:63:79:72:8E:E4:10:2F:99:51:4D:ED:A8:AB:9B:FD:EA:0E
X509v3 Authority Key Identifier:
keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/5C92DD9AA40111F1A3E298106411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
113.20.48.0/21
223.29.128.0/22
223.29.140.0-223.29.159.255
Signature Algorithm: sha256WithRSAEncryption
b8:17:e1:08:16:5c:94:4b:05:4d:4c:ea:d4:92:5d:56:3a:91:
e1:80:40:df:2c:64:f9:0a:54:9f:7f:c1:43:f8:ad:a4:d6:8e:
be:34:c9:e3:02:a5:15:d2:c1:4b:3f:5d:74:5b:ff:d4:4b:20:
1f:78:2a:a5:5c:4e:a8:60:e2:1e:9a:de:89:d4:54:c8:c4:0e:
62:4b:28:51:21:7f:71:b8:67:3c:12:b6:e6:55:3d:5c:a5:17:
d6:d5:d7:e7:d0:85:4d:06:db:ba:97:10:59:3c:87:69:39:4a:
65:2a:2b:43:67:2b:28:d6:11:34:50:74:9b:81:35:8c:98:a3:
17:9c:0f:03:87:45:a7:32:a7:de:2b:e1:b8:dc:9f:8c:ee:69:
9b:94:de:57:57:a4:79:a6:ed:24:53:f9:a2:d9:c8:48:7a:80:
dc:e7:cb:07:59:94:6e:df:9e:dc:34:9f:18:bf:2e:57:1b:8f:
71:f9:a3:26:fe:42:be:9f:38:10:d9:78:a1:48:1b:5d:21:49:
6f:41:e6:97:c3:7a:68:8b:2a:22:b9:55:6f:1e:58:36:6b:c6:
52:19:03:08:ad:5a:b1:1d:03:6c:a3:56:25:f4:6f:bd:4f:6c:
9a:cd:ff:b5:79:f2:4d:47:ec:b7:94:be:63:6b:71:1c:ff:67:
0d:cb:37:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:47 2026 by rpki-client