
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/E92E6ACA025411F1B5CF90C0233D8C67.roa
File: E92E6ACA025411F1B5CF90C0233D8C67.roa (raw, json)
Hash identifier: UV8f86HTjxEJSP4uwYb5rWdL2gxSvjECKlRWXIr/6K8=
Subject key identifier: 7B:2B:8A:24:B8:AF:2C:04:85:0D:E0:FE:AE:6F:53:B0:28:74:CD:69
Certificate issuer: /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Certificate serial: 3564
Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/E92E6ACA025411F1B5CF90C0233D8C67.roa
Signing time: Sun 01 Mar 2026 17:56:32 +0000
ROA not before: Thu 05 Feb 2026 05:38:34 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 63961
IP address blocks: 103.28.120.0/22 maxlen: 24
163.47.36.0/22 maxlen: 24
203.96.188.0/22 maxlen: 24
2402:f500::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13668 (0x3564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Validity
Not Before: Feb 5 05:38:34 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a47dd0-c74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:af:5f:b0:25:c8:1f:fb:21:c6:26:a2:25:
6e:bf:05:11:28:75:27:b4:53:37:61:4f:45:71:57:
22:a7:21:2a:73:8b:1c:62:32:b1:7c:77:cc:20:ad:
93:89:ff:c1:8b:9b:8a:1e:b4:26:f4:0c:43:6f:b9:
67:96:64:61:50:e5:0c:29:2a:b7:e8:93:db:03:a1:
2e:6f:5f:fe:17:a8:78:12:4c:49:98:68:8f:dc:62:
39:b5:c4:8a:42:ef:05:16:27:6b:12:74:85:d9:55:
f5:e9:0b:b1:1b:0e:97:28:eb:d0:74:12:af:f6:79:
1f:9a:3a:c5:cf:64:c8:35:dd:dd:55:ef:83:f4:4d:
25:a2:b1:de:15:5f:a5:94:30:2b:6e:a6:c1:62:35:
26:be:c8:d4:e7:2f:20:bb:49:d1:ca:88:04:52:3b:
ca:a8:35:06:c6:31:88:e4:ca:ce:6f:ba:d1:cc:f9:
b9:8d:2e:39:98:2d:22:66:3c:aa:85:ae:ad:bd:6c:
8e:e1:02:f2:20:dc:f2:0c:39:f4:73:3a:51:86:05:
3d:94:3b:b4:07:09:df:31:65:4b:24:9e:73:1e:3a:
f0:b9:5f:25:c6:bf:7e:7a:e9:ad:27:b3:c8:9d:b0:
4f:92:f9:45:57:d6:35:b5:2a:b9:b3:1d:94:bd:9c:
75:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:8A:24:B8:AF:2C:04:85:0D:E0:FE:AE:6F:53:B0:28:74:CD:69
X509v3 Authority Key Identifier:
keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/E92E6ACA025411F1B5CF90C0233D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.28.120.0/22
163.47.36.0/22
203.96.188.0/22
IPv6:
2402:f500::/32
Signature Algorithm: sha256WithRSAEncryption
a8:66:6a:4a:e8:ea:51:48:ae:aa:26:92:90:1c:33:75:ab:0d:
80:b6:71:f6:a1:bb:f0:4f:3d:03:41:42:60:c9:96:68:f8:6d:
25:cf:a6:57:1e:48:b7:5a:55:d8:e6:13:86:96:71:89:44:0e:
00:5b:8e:f5:9e:25:b0:8b:33:ba:36:65:11:8e:40:2d:00:a2:
a9:49:48:46:e0:52:48:6e:e0:21:83:66:2f:ec:e5:9d:e6:71:
a8:fc:d2:9d:b5:5a:c0:0a:be:d1:13:4e:b1:69:f7:5d:4d:4b:
7c:02:1b:97:9a:d5:9c:81:5f:aa:16:19:52:c0:46:9b:44:28:
82:87:21:ba:74:76:fa:d9:3d:c6:65:cd:6c:df:01:8c:1b:f9:
70:8c:82:98:f1:76:53:6d:cd:2e:63:cf:57:1b:1f:9d:ac:13:
0c:d8:10:b9:89:4e:80:28:47:31:24:e0:e1:a2:d6:c4:d9:80:
b2:29:32:6c:50:6a:f7:70:d9:60:bf:76:d7:70:66:ef:bf:2a:
af:bb:ac:5a:ba:72:83:f1:38:72:1b:8c:0f:c2:20:ec:c6:68:
a9:e1:b6:63:f1:30:6e:8f:92:de:cf:81:d5:f0:c2:e7:87:d0:
5c:78:7b:05:c4:9b:63:36:c6:9d:90:d2:9f:55:51:a9:93:70:
ba:b8:6d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:13 2026 by rpki-client