
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/D44C47FE91D311EBBE8C7D54C4F9AE02.roa
File: D44C47FE91D311EBBE8C7D54C4F9AE02.roa (raw, json)
Hash identifier: tz6664R/comnZU1y14OEFWCXuldROHEDSvkbzU90rPM=
Subject key identifier: 46:5F:A3:54:98:06:D7:27:58:6A:E3:48:C7:66:D1:0F:BD:D0:BA:90
Certificate issuer: /CN=A912B635/serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
Certificate serial: 06CE
Authority key identifier: 2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/D44C47FE91D311EBBE8C7D54C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:10:13 +0000
ROA not before: Wed 04 Jun 2025 23:01:58 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 58666
IP address blocks: 202.12.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl
rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:55:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1742 (0x6ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B635, serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
Validity
Not Before: Jun 4 23:01:58 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a58c35-9cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:5f:22:f8:28:bd:e7:2a:05:b1:1f:bf:7a:
fe:ae:c9:22:0c:d4:37:c5:e2:a6:de:23:f8:d7:b1:
85:70:3d:88:3a:7f:f5:98:7d:c8:67:02:37:a4:6f:
d1:3a:29:c0:02:77:31:36:19:d2:52:8e:93:bb:e1:
94:17:f2:42:d4:45:34:ba:68:a3:5e:e9:3f:8e:e4:
15:91:ea:51:c0:32:fe:cf:1b:fb:bb:2f:4c:fc:e3:
e5:c8:ce:df:dd:ff:16:24:30:2f:6a:50:76:5b:9f:
18:4b:87:25:26:a0:cd:bc:18:17:6f:54:45:9c:5b:
f4:7c:1a:5a:7b:19:80:95:7c:ba:77:bf:f7:72:a3:
04:00:e9:17:4d:9f:6c:80:f3:5b:bd:c5:5c:d1:bf:
b2:38:bc:02:9a:ef:3c:96:de:14:8c:88:7f:2e:c0:
c1:3f:eb:6b:57:39:b2:45:6d:2f:32:c8:a5:66:a7:
28:1b:f2:2c:6e:3d:5c:15:4c:6a:ec:d7:a5:fc:3f:
86:54:0c:62:4b:ce:dc:85:15:c8:47:57:d9:48:13:
6f:96:bd:f2:99:c8:8d:e9:65:02:b3:2a:9b:74:1c:
6c:5e:89:a7:dd:34:93:78:d4:76:6d:f6:09:6e:71:
08:06:5b:3f:18:ea:dd:46:d2:7c:8a:6d:90:ab:ba:
91:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5F:A3:54:98:06:D7:27:58:6A:E3:48:C7:66:D1:0F:BD:D0:BA:90
X509v3 Authority Key Identifier:
keyid:2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/D44C47FE91D311EBBE8C7D54C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.12.104.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a3:39:34:a2:0c:cf:c0:83:ec:f8:a8:6f:dc:a9:da:a7:62:
f3:7a:f5:59:0d:ac:06:d6:01:a7:07:37:49:40:ac:90:d5:69:
cb:b0:1b:6e:4f:eb:75:43:54:d1:21:c0:19:37:37:43:7e:a4:
21:b9:a2:a2:94:1b:44:f1:37:dc:ae:df:5b:a6:1f:a5:ba:94:
e4:df:3a:63:92:89:49:8f:df:c3:c3:69:ab:44:ff:cf:bd:85:
85:34:cd:6d:5c:76:a0:45:58:ee:d0:65:c4:6f:d0:97:b4:1c:
31:c5:5e:98:27:fb:4d:51:10:cf:8b:0b:5a:24:1c:a5:f4:ab:
18:36:c5:9c:e1:08:dc:ad:64:7a:b6:73:a8:ef:0e:41:dc:6e:
fe:61:bb:ce:06:66:21:f2:d4:a8:32:7a:c4:b6:b3:ab:9e:2e:
87:97:d0:10:be:b7:75:2c:41:d0:4d:77:87:0c:f5:b2:c9:cc:
22:27:89:02:ce:bf:1d:6f:04:57:0c:8c:20:d8:2d:2b:6c:c1:
a6:95:3d:ce:d8:da:ec:32:aa:36:bc:9d:95:4f:a3:ac:f3:6b:
ab:cb:bf:c7:47:d1:a0:50:76:bb:c2:97:3b:88:ba:cd:2f:bb:
22:23:93:98:7f:9b:18:17:2a:4a:1d:d7:08:f4:d7:dc:a9:a8:
f2:a4:aa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:14 2026 by rpki-client