
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/92F6F8D0866A11F19ACF0A6359A30FBC.roa
File: 92F6F8D0866A11F19ACF0A6359A30FBC.roa (raw, json)
Hash identifier: OxQYq5Pl6LLzBR7Hlyn/TUzcpXJUxM8IGIxor8rYXrQ=
Subject key identifier: E9:79:26:EE:75:2A:19:E5:8D:1D:8D:C3:0F:2A:A1:78:D3:0A:A5:0E
Certificate issuer: /CN=A912AF78/serialNumber=A02FA1377E8973D834E8999212EC2C570960DFCD
Certificate serial: 14
Authority key identifier: A0:2F:A1:37:7E:89:73:D8:34:E8:99:92:12:EC:2C:57:09:60:DF:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC-hN36Jc9g06JmSEuwsVwlg380.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/92F6F8D0866A11F19ACF0A6359A30FBC.roa
Signing time: Thu 23 Jul 2026 07:46:12 +0000
ROA not before: Thu 23 Jul 2026 07:46:12 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 133880
IP address blocks: 45.125.228.0/24 maxlen: 24
45.125.229.0/24 maxlen: 24
45.125.230.0/24 maxlen: 24
45.125.231.0/24 maxlen: 24
103.44.216.0/24 maxlen: 24
103.44.217.0/24 maxlen: 24
103.44.218.0/24 maxlen: 24
103.44.219.0/24 maxlen: 24
2401:d880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.crl
rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC-hN36Jc9g06JmSEuwsVwlg380.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AF78, serialNumber=A02FA1377E8973D834E8999212EC2C570960DFCD
Validity
Not Before: Jul 23 07:46:12 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a61c6c4-252c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:ae:8d:81:a6:fd:9f:81:4b:d8:c4:17:aa:
19:14:60:c2:ec:a4:23:7b:93:60:b3:7b:80:00:c1:
73:e3:28:8e:61:61:e1:38:e3:43:9d:1a:5e:1a:d5:
43:c5:41:26:df:fd:c8:18:a4:85:3e:b2:89:dd:22:
cc:eb:4e:61:1d:36:74:6b:3b:7a:ae:cb:62:2d:89:
de:44:be:ea:d4:01:45:7f:3c:0b:0d:d6:f5:14:80:
15:f9:6b:22:83:b4:3c:d1:dc:47:e4:da:ce:17:8d:
2a:85:6c:5a:4f:97:34:0b:4a:71:eb:b7:74:1b:ee:
b0:c0:be:16:23:45:fe:91:94:e5:86:01:96:a3:97:
04:22:c2:78:fe:58:91:c2:a1:04:95:9c:fb:17:f7:
34:7c:6e:e7:a0:bd:50:c2:03:33:94:9f:61:ce:50:
10:08:1e:29:8a:e3:f2:22:b4:62:ba:e2:cd:01:e3:
5e:06:b7:f1:9c:a2:fa:e4:f1:64:d2:f0:c4:92:59:
7e:95:a6:ea:e2:47:5f:7f:dd:3a:f6:33:28:ce:1d:
f0:ae:a2:e6:c1:17:a5:cb:fd:c9:62:57:31:34:f8:
22:02:d7:3d:31:3c:7e:e4:79:74:4a:df:e6:fa:d3:
3c:ff:fe:11:7e:1b:6f:07:da:a3:48:cc:ba:60:b7:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:79:26:EE:75:2A:19:E5:8D:1D:8D:C3:0F:2A:A1:78:D3:0A:A5:0E
X509v3 Authority Key Identifier:
keyid:A0:2F:A1:37:7E:89:73:D8:34:E8:99:92:12:EC:2C:57:09:60:DF:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/oC-hN36Jc9g06JmSEuwsVwlg380.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC-hN36Jc9g06JmSEuwsVwlg380.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF78/BB2736CE686211F1B5038A599F47A888/92F6F8D0866A11F19ACF0A6359A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
45.125.228.0/22
103.44.216.0/22
IPv6:
2401:d880::/32
Signature Algorithm: sha256WithRSAEncryption
58:1d:3d:7c:b6:ed:ad:a3:da:62:0c:a7:61:80:ce:b0:e8:0f:
4c:8e:1c:98:f1:b7:a3:45:b3:f7:c5:ea:04:70:d7:75:06:93:
13:40:da:61:e7:75:40:12:73:bc:6f:43:b9:ee:5f:97:8b:29:
8c:ad:25:dd:a2:45:67:8e:03:7c:f8:ce:82:4b:85:bb:b5:ba:
db:33:21:a7:13:d3:07:72:40:39:cb:ae:1a:82:71:9a:e7:9b:
7c:91:4d:f3:eb:af:64:13:34:43:99:78:98:4d:f8:a9:aa:42:
f4:57:2a:68:63:2d:f4:57:ef:e6:b9:af:53:10:7a:12:13:22:
d9:6f:0b:cc:82:67:ee:36:14:90:26:73:7a:c8:2b:d4:26:68:
40:48:d2:bb:89:6e:d9:31:55:1d:12:3c:94:c3:0e:b6:0a:43:
3e:7b:f5:42:6f:03:2d:c2:a8:49:8b:ee:13:7c:d1:6c:fb:24:
9a:dd:c1:3b:15:bc:85:78:cf:2d:90:11:d6:34:c0:8f:97:1f:
06:21:43:7b:73:4d:e4:98:a8:14:b7:53:6a:51:d2:2d:c9:51:
bc:4b:e9:2a:30:bb:9a:29:85:cd:e2:59:21:e8:e2:0c:ed:0a:
6e:79:d0:81:7e:6d:fa:fc:76:7f:50:57:0b:ac:d0:9e:16:89:
aa:c3:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:07:13 2026 by rpki-client