
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/62D9B996A3FF11F19DE49AE66311F970.roa
File: 62D9B996A3FF11F19DE49AE66311F970.roa (raw, json)
Hash identifier: 58436ywWioeIyXvUQgf54PxYopx4wdMLShpWCNHvyY0=
Subject key identifier: EB:F0:96:C2:51:1A:76:57:73:F1:28:39:80:81:9D:0A:96:E5:C8:CF
Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial: 05DE
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/62D9B996A3FF11F19DE49AE66311F970.roa
Signing time: Sat 29 Aug 2026 23:14:30 +0000
ROA not before: Sat 29 Aug 2026 23:14:30 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 399989
IP address blocks: 113.20.48.0/22 maxlen: 22
113.20.52.0/22 maxlen: 22
223.29.128.0/22 maxlen: 22
223.29.140.0/22 maxlen: 22
223.29.144.0/22 maxlen: 22
223.29.148.0/22 maxlen: 22
223.29.152.0/22 maxlen: 22
223.29.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502 (0x5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Validity
Not Before: Aug 29 23:14:30 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a9367d5-1397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:99:3b:38:c9:4b:67:d0:d1:43:ee:f0:4d:
67:10:ef:44:f7:e9:9b:7c:bf:46:49:e4:3d:4e:a6:
66:7b:44:20:86:38:88:25:1d:f6:7d:db:16:55:a6:
54:bb:cc:ce:3e:ce:93:4f:84:a7:90:ec:83:10:2e:
02:4c:7d:44:60:fe:4a:65:a4:fb:6d:41:97:53:ed:
e4:f6:2e:2f:9b:86:0e:85:c9:be:5b:1d:fe:04:10:
1a:2c:2d:d5:fa:61:22:47:a4:6d:36:f9:25:0b:4f:
51:16:ce:dd:51:ee:df:13:43:a4:da:58:58:c2:5c:
21:01:c5:55:29:72:0a:4b:31:41:49:9b:cc:4b:67:
50:03:f4:8d:16:02:9c:ee:8a:16:6f:24:5c:f7:05:
5f:ff:d6:8a:42:d7:ad:9f:b4:c9:03:6c:42:64:81:
f8:b2:69:eb:a8:cd:10:09:3c:ed:64:6e:d2:b8:f6:
b3:70:83:55:11:28:4a:60:99:08:df:25:9b:e8:98:
cf:48:20:28:80:84:89:7a:e5:20:4a:88:3a:38:ae:
7d:d0:41:29:52:c1:3a:fc:16:48:02:e5:ca:56:df:
93:b9:77:7c:8a:74:e1:7d:53:c5:4d:e8:5c:b0:1f:
60:3a:4a:08:8e:2d:a5:8e:7a:35:35:7e:ac:4e:68:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F0:96:C2:51:1A:76:57:73:F1:28:39:80:81:9D:0A:96:E5:C8:CF
X509v3 Authority Key Identifier:
keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/62D9B996A3FF11F19DE49AE66311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
113.20.48.0/21
223.29.128.0/22
223.29.140.0-223.29.159.255
Signature Algorithm: sha256WithRSAEncryption
00:78:2b:76:87:d6:cd:14:0d:49:46:d7:a4:b1:46:cd:1c:e8:
d4:51:6e:42:83:f8:a3:09:b1:31:50:0f:4c:2f:5c:b4:ad:4f:
2b:aa:a2:bc:6c:dd:c3:3f:db:cd:7d:eb:f8:a5:8e:38:d1:9d:
96:d5:f0:c0:1b:06:4f:d1:f0:7e:c0:a8:21:1b:c8:97:83:cf:
1b:6a:fa:d9:d1:3e:33:95:5e:17:d0:dc:57:ca:6d:7b:8e:b8:
65:e8:b2:fc:d2:02:3a:a1:ed:67:ef:d8:30:e9:7c:fe:8f:44:
b5:98:0c:14:b3:04:35:63:39:3b:9d:32:1f:c2:e8:e5:76:dc:
ac:3e:e1:f5:b1:30:4d:cc:64:56:a7:db:63:9d:e5:15:5c:69:
7d:8b:1d:f6:51:77:b5:d6:fd:95:a6:c9:9e:88:78:f6:84:7f:
c3:e4:6b:49:f8:02:41:a1:e1:fb:c6:d2:d9:85:28:3b:c3:70:
15:06:c4:2b:93:8e:59:8b:fe:ed:d3:b9:3a:fb:5b:d7:98:fa:
63:8c:71:3a:12:71:d9:9f:a6:a2:3f:5a:de:21:b4:dc:c3:49:
a1:d4:e2:d9:2d:12:19:f7:f2:0d:1c:99:70:01:ea:19:04:7f:
78:25:b2:a2:da:49:3a:83:55:5d:26:a4:c8:d7:02:d1:f0:3b:
42:8c:89:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:25 2026 by rpki-client