
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/6D3057FC85F511EBB5C36F09C4F9AE02.roa
File: 6D3057FC85F511EBB5C36F09C4F9AE02.roa (raw, json)
Hash identifier: 0sFGv8cXULgH/EgUUeoM3VcOKrA2+oJcG8WvNt+QAh0=
Subject key identifier: DE:D8:55:77:2B:98:FC:C3:E3:8A:8F:8F:46:88:85:B6:59:1A:38:65
Certificate issuer: /CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
Certificate serial: 075B
Authority key identifier: 19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/6D3057FC85F511EBB5C36F09C4F9AE02.roa
Signing time: Thu 24 Sep 2026 21:43:21 +0000
ROA not before: Thu 24 Sep 2026 21:43:21 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 141190
IP address blocks: 103.156.54.0/23 maxlen: 24
2406:7e40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl
rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1883 (0x75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912111B, serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
Validity
Not Before: Sep 24 21:43:21 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ab59978-20d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:48:c5:d5:95:5f:8b:67:79:6f:93:54:cd:6c:
81:8a:55:2c:ee:89:f5:34:70:8a:76:4f:6a:9c:e2:
9b:42:80:8c:02:f8:22:b6:33:2d:87:1b:83:b3:7b:
4b:3f:1a:6b:2a:8c:e3:d9:2e:0d:4b:f0:2a:6a:ae:
11:aa:4f:f3:32:c7:d4:20:5c:28:98:ae:e4:5f:3f:
2d:6c:de:d5:6d:51:b4:95:0e:d1:3a:5a:6d:3d:66:
8b:80:60:7f:9d:3c:4f:89:1a:ef:58:d3:51:7f:ae:
c1:8b:ff:d3:8d:d0:6c:2b:26:67:1a:5f:c8:d5:ce:
fb:a9:e4:a8:28:6a:53:b9:26:12:77:f9:24:d9:f8:
8a:db:29:ca:0e:67:a9:8f:8f:44:c4:0e:75:57:ca:
d2:38:5e:a6:36:42:34:66:47:ee:1a:39:27:4c:73:
c7:5c:47:2d:9d:f5:63:58:aa:d7:ae:36:71:07:77:
9b:22:c3:3f:f6:7f:42:8c:ae:66:47:51:4f:e6:01:
7b:27:60:64:e4:ba:f9:df:f5:4c:b8:2f:09:23:bc:
d2:ab:46:fa:46:34:5f:45:cb:9b:45:bd:ad:89:8e:
ed:5c:df:74:bb:58:9d:58:c6:26:87:08:82:c6:50:
2b:d6:54:07:4c:d2:74:63:dc:47:26:4f:9f:b1:43:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D8:55:77:2B:98:FC:C3:E3:8A:8F:8F:46:88:85:B6:59:1A:38:65
X509v3 Authority Key Identifier:
keyid:19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/6D3057FC85F511EBB5C36F09C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.156.54.0/23
IPv6:
2406:7e40::/32
Signature Algorithm: sha256WithRSAEncryption
a9:e7:35:a6:b4:03:68:64:15:1b:74:91:67:8d:20:67:e8:77:
d3:e1:9e:e8:7c:d8:b9:0d:9f:b3:6f:46:f2:12:b8:b9:77:fb:
04:de:17:98:2d:97:0e:49:ed:25:bd:eb:7e:3e:5b:ad:ca:90:
5b:d7:2c:e2:ea:23:4c:77:e0:95:0a:59:10:36:65:e8:41:e5:
65:d1:37:b6:d6:b1:15:1b:ba:fe:8e:17:de:9c:99:e6:d8:08:
c3:ed:9c:ef:0a:4a:be:c5:34:c6:87:67:32:8d:d2:ea:9f:0b:
c7:f2:78:d1:1b:c8:c1:8f:b9:64:89:e1:c8:7e:0c:d1:88:60:
bd:0b:c1:a2:0c:9c:1b:e6:4a:50:e0:e9:39:48:da:e2:9c:94:
34:fb:69:a3:b9:96:0c:85:fe:b0:2d:9c:d1:ca:f3:35:eb:bb:
4c:19:66:0d:4c:e8:fd:62:c3:32:d3:e1:d6:2c:5d:95:9c:56:
37:f7:96:0f:0c:fd:ee:d9:47:6a:6f:46:d3:87:b4:d0:87:9f:
ad:fb:1a:5e:6f:fe:55:96:9a:9a:ad:d9:9f:37:62:4f:35:fe:
ec:56:5f:83:09:de:79:d3:f0:8c:3b:d2:04:d1:52:8a:57:ff:
2d:f6:72:2f:d1:f2:a6:30:01:4c:56:a7:a0:77:b6:86:18:90:
20:65:b0:92
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICB1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjExMUIxMTAvBgNVBAUTKDE5QTgwNUQwMjY5NTU2ODNGM0ZFRTU2M0Y4RTZBMEEy
NzhGMEJGNzEwHhcNMjYwOTI0MjE0MzIxWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWI1OTk3OC0yMGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA60jF1ZVfi2d5b5NUzWyBilUs7on1NHCKdk9qnOKbQoCMAvgitjMthxuDs3tL
PxprKozj2S4NS/Aqaq4Rqk/zMsfUIFwomK7kXz8tbN7VbVG0lQ7ROlptPWaLgGB/
nTxPiRrvWNNRf67Bi//TjdBsKyZnGl/I1c77qeSoKGpTuSYSd/kk2fiK2ynKDmep
j49ExA51V8rSOF6mNkI0ZkfuGjknTHPHXEctnfVjWKrXrjZxB3ebIsM/9n9CjK5m
R1FP5gF7J2Bk5Lr53/VMuC8JI7zSq0b6RjRfRcubRb2tiY7tXN90u1idWMYmhwiC
xlAr1lQHTNJ0Y9xHJk+fsUNghwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFN7YVXcr
mPzD44qPj0aIhbZZGjhlMB8GA1UdIwQYMBaAFBmoBdAmlVaD8/7lY/jmoKJ48L9x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTExQi8zQkQyOEYxQTg1
RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZvUHpfdVZqLU9hZ29uand2
M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dhZ0YwQ2FWVm9Qel91VmotT2Fnb25qd3YzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjExMUIvM0JEMjhGMUE4NUYzMTFFQkExMDQyRDgwQzRGOUFFMDIvNkQzMDU3RkM4
NUY1MTFFQkI1QzM2RjA5QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ5w2MA0EAgACMAcDBQAkBn5AMA0GCSqGSIb3DQEBCwUAA4IBAQCp
5zWmtANoZBUbdJFnjSBn6HfT4Z7ofNi5DZ+zb0byEri5d/sE3heYLZcOSe0lvet+
PlutypBb1yzi6iNMd+CVClkQNmXoQeVl0Te21rEVG7r+jhfenJnm2AjD7ZzvCkq+
xTTGh2cyjdLqnwvH8njRG8jBj7lkieHIfgzRiGC9C8GiDJwb5kpQ4Ok5SNrinJQ0
+2mjuZYMhf6wLZzRyvM167tMGWYNTOj9YsMy0+HWLF2VnFY395YPDP3u2Udqb0bT
h7TQh5+t+xpeb/5VlpqardmfN2JPNf7sVl+DCd550/CMO9IE0VKKV/8t9nIv0fKm
MAFMVqegd7aGGJAgZbCS
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:19:49 2026 by rpki-client