
$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/E3D2704667FC11F0AC42A91FC4F9AE02.roa
File: E3D2704667FC11F0AC42A91FC4F9AE02.roa (raw, json)
Hash identifier: TIHotFIbYqz1P22Gnw00YGSjdK2XTrdEZSfLC0cyCIw=
Subject key identifier: 86:74:FD:86:27:8E:0D:7F:66:43:62:DD:6F:40:64:08:BD:90:D0:CE
Certificate issuer: /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
Certificate serial: 35B2
Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/E3D2704667FC11F0AC42A91FC4F9AE02.roa
Signing time: Mon 22 Jun 2026 16:13:10 +0000
ROA not before: Mon 22 Jun 2026 16:13:10 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 151472
IP address blocks: 43.225.205.0/24 maxlen: 24
103.9.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl
rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13746 (0x35b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
Validity
Not Before: Jun 22 16:13:10 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a395f16-660a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3d:93:44:ce:73:63:59:fa:09:f2:b0:45:31:
14:d5:e4:d0:99:50:19:98:18:0d:3d:d0:ea:bb:45:
9d:a3:60:f2:70:6a:a3:c5:7c:d7:ae:e4:a6:58:08:
44:25:82:65:45:c2:91:24:c6:93:a7:bf:05:d9:c9:
93:2e:d0:8d:74:d4:cf:8f:50:4f:99:60:04:74:de:
a7:88:d3:f6:de:be:bf:27:23:86:1a:49:68:73:b3:
6b:30:ef:d7:77:4c:ec:a2:cf:a8:89:75:e1:dc:4c:
83:a0:3c:2e:27:a5:c4:fe:41:06:f7:94:a2:65:15:
a4:a2:37:49:15:98:3b:41:be:71:81:48:ee:60:7d:
03:be:4c:04:49:bb:c5:a4:60:dc:3b:10:d5:c3:da:
21:07:76:c2:e2:89:25:70:3e:ad:2c:5b:4d:1b:53:
ea:cd:31:9e:c1:3b:f8:7c:c6:b4:1b:56:67:f5:3b:
6d:34:0e:c5:3b:a2:44:89:90:a8:87:c4:6a:15:ba:
2e:82:39:c2:6d:f9:55:fa:37:48:54:b4:0f:16:ab:
78:d3:76:88:f2:cb:fd:77:ed:10:ab:5b:c3:57:ed:
13:7a:37:71:21:a4:c4:c5:35:bf:43:46:3c:db:f8:
12:63:a4:45:12:a2:96:0c:59:aa:d3:a6:22:d0:53:
e0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:74:FD:86:27:8E:0D:7F:66:43:62:DD:6F:40:64:08:BD:90:D0:CE
X509v3 Authority Key Identifier:
keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/E3D2704667FC11F0AC42A91FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.205.0/24
103.9.105.0/24
Signature Algorithm: sha256WithRSAEncryption
00:05:71:a3:02:c1:d8:79:1e:4a:29:20:96:e5:32:eb:a7:e1:
6a:5b:83:d8:56:6a:f2:0a:44:ac:6a:cc:18:5c:0a:a6:67:79:
7d:c7:dc:00:cb:e9:81:e5:a9:a1:42:22:b4:b9:b4:20:8e:33:
7f:ee:1a:28:fd:08:d2:7b:c4:c1:44:c9:0f:94:00:5f:02:2a:
6a:3d:3f:c7:47:8c:94:25:01:70:32:50:a5:8c:db:d2:ab:2b:
65:51:0e:06:47:9c:c6:41:bf:0e:48:8c:a3:d6:1d:3f:c1:1d:
c8:f1:a7:32:09:81:7e:78:4f:13:f3:fa:ae:b1:ad:79:12:3e:
2e:50:3b:a5:a7:9f:6c:b7:65:9c:bd:0d:56:99:27:47:49:ca:
e1:45:33:6d:d9:dc:77:97:48:6d:9b:8d:e1:7b:51:88:fb:7c:
cf:97:28:24:71:d1:9e:34:ea:55:6d:8f:29:97:8c:33:1b:11:
69:db:1b:17:20:e2:fa:f3:be:a0:fb:71:07:bc:18:66:33:02:
95:ed:c0:a0:0b:7a:60:b6:6c:77:75:71:f4:0e:51:de:aa:52:
d9:a1:f3:a1:1a:51:f2:7a:e8:0a:c5:26:78:c0:f9:03:30:88:
36:b5:7c:1b:da:2a:e9:a0:70:a9:de:de:71:ad:4c:dc:ec:09:
61:ec:1f:ba
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICNbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk5NEYxMTAvBgNVBAUTKDRCRUQ1OEJDNDU0NEU3RTNCNUU5Nzg5QzY3QzYzQkVD
OTFDMjdDREQwHhcNMjYwNjIyMTYxMzEwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM5NWYxNi02NjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhT2TRM5zY1n6CfKwRTEU1eTQmVAZmBgNPdDqu0Wdo2DycGqjxXzXruSmWAhE
JYJlRcKRJMaTp78F2cmTLtCNdNTPj1BPmWAEdN6niNP23r6/JyOGGkloc7NrMO/X
d0zsos+oiXXh3EyDoDwuJ6XE/kEG95SiZRWkojdJFZg7Qb5xgUjuYH0DvkwESbvF
pGDcOxDVw9ohB3bC4oklcD6tLFtNG1PqzTGewTv4fMa0G1Zn9TttNA7FO6JEiZCo
h8RqFbougjnCbflV+jdIVLQPFqt403aI8sv9d+0Qq1vDV+0TejdxIaTExTW/Q0Y8
2/gSY6RFEqKWDFmq06Yi0FPgGQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIZ0/YYn
jg1/ZkNi3W9AZAi9kNDOMB8GA1UdIwQYMBaAFEvtWLxFROfjtel4nGfGO+yRwnzd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk0Ri9BMDI5QTUyNjFE
QUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUtTzE2WGljWjhZNzdKSENm
TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1MtMVl2RVZFNS1PMTZYaWNaOFk3N0pIQ2ZOMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjk5NEYvQTAyOUE1MjYxREFBMTFFMjlCRkM2N0E2MDhCMDJDRDIvRTNEMjcwNDY2
N0ZDMTFGMEFDNDJBOTFGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAK+HNAwQAZwlpMA0GCSqGSIb3DQEBCwUAA4IBAQAABXGjAsHYeR5K
KSCW5TLrp+FqW4PYVmryCkSsaswYXAqmZ3l9x9wAy+mB5amhQiK0ubQgjjN/7hoo
/QjSe8TBRMkPlABfAipqPT/HR4yUJQFwMlCljNvSqytlUQ4GR5zGQb8OSIyj1h0/
wR3I8acyCYF+eE8T8/qusa15Ej4uUDulp59st2WcvQ1WmSdHScrhRTNt2dx3l0ht
m43he1GI+3zPlygkcdGeNOpVbY8pl4wzGxFp2xsXIOL6876g+3EHvBhmMwKV7cCg
C3pgtmx3dXH0DlHeqlLZofOhGlHyeugKxSZ4wPkDMIg2tXwb2irpoHCp3t5xrUzc
7Alh7B+6
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:47 2026 by rpki-client