
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/73DDDA0206FF11ED8C6B565FC4F9AE02.roa
File: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (raw, json)
Hash identifier: e6YP5hoyPP9E+431/sCsWnlZVdwuRyAJ8acWlo4Re+Q=
Subject key identifier: BB:1A:29:16:53:3F:F0:83:12:21:BB:A1:46:14:7C:B8:AE:D4:EE:2A
Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Certificate serial: 087D
Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/73DDDA0206FF11ED8C6B565FC4F9AE02.roa
Signing time: Fri 08 May 2026 21:25:42 +0000
ROA not before: Fri 08 May 2026 21:25:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4739
IP address blocks: 203.215.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Validity
Not Before: May 8 21:25:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69fe54d6-a916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6d:6b:4f:08:06:41:54:f7:37:c5:d7:d2:0d:
0c:8f:2a:cf:d6:3d:0b:d4:96:fa:41:61:93:1b:5e:
af:c5:17:d0:ff:32:0b:8a:c4:4d:ff:07:7f:e0:7f:
f5:57:f0:3a:2d:61:58:66:8d:61:d2:db:9b:a6:3a:
47:70:6e:6e:4c:00:a1:75:74:a4:ff:50:7c:7f:6d:
63:60:1d:fe:b7:20:c7:a0:14:a4:72:71:d7:77:ef:
63:51:aa:8e:31:29:96:1d:44:b2:88:b5:ac:f0:f1:
88:8e:6a:77:87:52:46:3b:03:13:b6:ad:c3:2d:86:
14:74:e1:ff:72:42:02:63:c4:e4:f2:46:9c:61:a8:
f3:89:28:bf:79:0d:52:6d:ee:9e:ca:f0:4d:a2:ae:
4a:c1:93:70:f0:e9:0f:78:6e:b6:c2:a1:a9:c6:d1:
5c:07:e4:e6:fb:a2:b8:7e:b4:6d:c9:55:05:28:14:
9b:3d:8a:68:9d:39:94:65:f6:f7:44:30:33:58:11:
8d:9b:8c:2f:59:08:93:3b:75:aa:d6:1e:1f:cb:4f:
f6:a5:76:ea:f9:c4:8c:ac:d8:e7:b9:64:7b:27:db:
14:1d:50:ef:48:e8:c3:5a:a7:75:8d:33:01:ee:95:
c1:83:82:22:fd:29:dd:3a:85:17:9a:af:58:70:c3:
30:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1A:29:16:53:3F:F0:83:12:21:BB:A1:46:14:7C:B8:AE:D4:EE:2A
X509v3 Authority Key Identifier:
keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/73DDDA0206FF11ED8C6B565FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.215.29.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:84:f9:83:b4:51:2f:00:42:b2:11:da:1e:72:a3:62:53:78:
98:44:a9:05:a8:69:1e:41:92:e4:1b:35:59:37:98:dc:21:71:
d7:15:29:08:0c:53:06:40:6e:18:10:cc:2e:85:cb:7d:bd:6d:
c8:66:a0:42:10:6a:b6:87:76:3f:9b:21:bf:de:a6:89:f5:cd:
ec:1c:be:ea:2b:b4:b3:27:b0:75:69:ac:40:92:ae:4e:4f:33:
3b:8d:ad:4b:21:65:94:c2:32:c5:b2:45:7d:e0:58:a1:18:c4:
8c:ac:97:17:a4:91:fc:99:32:8c:32:7a:e9:4a:bf:1a:35:f6:
89:2b:76:fd:d5:33:45:fc:e4:0e:b5:b6:cd:38:a6:cf:4e:1f:
ef:c6:a7:ec:98:d1:44:67:8a:34:4e:57:74:e2:e5:6f:8c:25:
8c:b1:37:7c:26:d9:a5:26:7d:ef:93:66:6f:bc:b9:04:60:e0:
cd:96:50:00:23:7b:2f:ed:9f:0c:83:27:08:66:d1:55:35:0c:
9b:41:76:eb:c4:6f:66:76:86:22:4c:16:e7:3b:79:63:db:0a:
91:6a:0d:08:35:c2:c0:b7:d6:7f:38:b3:96:cf:03:a2:91:3a:
05:3d:31:e9:53:8e:b8:7f:32:dc:42:c8:2b:08:c5:a4:e3:bc:
d1:62:af:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:13:39 2026 by rpki-client