
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/962D7238DCDA11F180597FA41366CEF9.roa
File: 962D7238DCDA11F180597FA41366CEF9.roa (raw, json)
Hash identifier: oS+Jn4u/6S2099r9+7qgL1o4mkIh1f4TTnHojWyZlcw=
Subject key identifier: 52:1D:B5:8A:CE:BF:05:61:4E:92:F5:F2:97:69:37:DB:99:BA:2E:DC
Certificate issuer: /CN=A911C34D/serialNumber=A12AFFB1C4CFE114160673F466574FFF69FC88EA
Certificate serial: 02
Authority key identifier: A1:2A:FF:B1:C4:CF:E1:14:16:06:73:F4:66:57:4F:FF:69:FC:88:EA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/oSr_scTP4RQWBnP0ZldP_2n8iOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/962D7238DCDA11F180597FA41366CEF9.roa
Signing time: Tue 10 Nov 2026 07:44:41 +0000
ROA not before: Tue 10 Nov 2026 07:44:40 +0000
ROA not after: Wed 01 Mar 2028 00:00:00 +0000
asID: 155101
IP address blocks: 141.229.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.crl
rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/oSr_scTP4RQWBnP0ZldP_2n8iOo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 09:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C34D, serialNumber=A12AFFB1C4CFE114160673F466574FFF69FC88EA
Validity
Not Before: Nov 10 07:44:40 2026 GMT
Not After : Mar 1 00:00:00 2028 GMT
Subject: CN=6af2cb68-8377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:55:a2:a4:89:7a:84:38:ed:35:c0:de:52:
1d:00:80:b9:b1:4d:ac:52:69:ba:27:43:22:83:f2:
6b:20:4f:0a:b0:b3:db:3b:08:72:4a:2d:48:62:b5:
ca:5f:a0:95:5d:cc:52:ce:c2:53:f5:2a:3d:d4:3d:
ac:12:b3:ad:28:35:ff:d4:ce:11:2a:c6:9c:fc:86:
79:25:e4:93:39:36:89:f9:d8:f3:59:27:a0:5e:ff:
84:20:b1:bc:cf:9f:ea:ee:dc:6e:32:91:ad:8b:73:
ec:0d:24:a5:92:a6:22:06:cc:03:e4:a5:4d:cb:dc:
f7:74:16:20:e8:dd:63:55:6f:4d:4b:9b:d0:c8:ca:
69:dd:47:e9:e5:a9:88:bf:61:ff:1b:b0:b0:84:dd:
17:09:21:23:ac:33:f8:61:9d:f0:c7:84:8c:eb:14:
5e:89:81:4e:77:67:5d:ca:c8:c7:7d:38:c1:9f:1e:
15:fe:8d:96:07:6e:c5:49:bf:8e:72:59:6f:61:6d:
78:61:8c:aa:81:08:09:ff:e3:76:11:6c:3c:40:bd:
56:cf:d5:4a:60:b6:30:2e:1c:10:c1:f2:37:3f:1d:
69:07:55:c0:42:40:92:e0:49:71:40:be:3e:c0:e6:
7d:41:75:84:66:5b:07:88:52:02:9d:a2:e7:35:f4:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1D:B5:8A:CE:BF:05:61:4E:92:F5:F2:97:69:37:DB:99:BA:2E:DC
X509v3 Authority Key Identifier:
keyid:A1:2A:FF:B1:C4:CF:E1:14:16:06:73:F4:66:57:4F:FF:69:FC:88:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/oSr_scTP4RQWBnP0ZldP_2n8iOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/oSr_scTP4RQWBnP0ZldP_2n8iOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C34D/EDE5D84ADCD911F1814682931366CEF9/962D7238DCDA11F180597FA41366CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
141.229.12.0/23
Signature Algorithm: sha256WithRSAEncryption
17:bf:b6:0b:2b:f9:b0:22:74:2d:f2:aa:58:9b:1c:42:bc:f5:
d7:b1:21:46:65:90:54:0c:f9:c6:13:35:79:4e:57:d6:db:96:
49:16:bd:5b:55:b5:31:56:81:2b:da:64:6f:5e:ac:6f:b1:c1:
19:fb:ce:16:f4:26:7a:55:e8:60:aa:a2:89:fc:98:2a:28:9e:
15:39:ce:a2:ce:33:98:4a:d0:11:2f:fa:7a:52:fa:9f:c6:ff:
1d:cb:fa:1a:ed:5f:af:c3:98:17:00:b2:4f:9b:bf:d2:43:91:
e7:c4:d2:97:67:3c:b9:86:8d:38:f6:e1:f0:e6:f4:24:a1:b5:
65:aa:6a:a4:de:49:0e:ff:c3:13:93:31:84:12:97:e6:70:e8:
bf:00:d7:c0:af:20:3e:34:d0:83:16:0e:28:ae:2a:d1:f2:f1:
f8:80:39:bb:a6:ea:13:bc:d1:14:4d:a1:cc:d1:7e:5e:28:5b:
2c:a6:7f:7f:10:56:28:f1:30:4c:2a:65:fc:7f:a7:06:cc:24:
47:ef:b8:89:f4:de:ff:05:a5:b3:9d:e8:28:e4:49:4d:89:25:
21:33:2e:5c:58:e8:1f:95:f8:6c:cb:98:43:c8:99:c4:4d:90:
e8:fa:0b:1c:f1:e1:19:a3:60:46:5d:c2:3b:a7:77:8e:a9:cf:
ca:6d:9f:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:30:41 2026 by rpki-client