
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/3590B0F65B9B11EFB90EBF42C4F9AE02.roa
File: 3590B0F65B9B11EFB90EBF42C4F9AE02.roa (raw, json)
Hash identifier: fj+mLgj2Yk2+WF3JcBpDSbdPYmQAKBNWLbe5hjRFvC8=
Subject key identifier: AB:79:11:4A:66:DE:40:79:6A:86:C2:47:D3:34:0A:8C:09:06:4E:43
Certificate issuer: /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Certificate serial: 01A3
Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/3590B0F65B9B11EFB90EBF42C4F9AE02.roa
Signing time: Thu 03 Sep 2026 04:55:53 +0000
ROA not before: Thu 03 Sep 2026 04:55:53 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 153197
IP address blocks: 160.30.95.0/24 maxlen: 24
160.187.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46
Validity
Not Before: Sep 3 04:55:53 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a98fdd9-43e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:52:1b:5c:2d:a9:40:49:e7:eb:1f:46:db:
f6:76:5a:09:c1:80:dd:61:90:88:b9:84:30:1b:3d:
33:1f:39:d3:b5:2b:22:a2:4f:b5:55:11:2d:b8:ef:
58:ed:f9:c8:b3:06:d6:ca:02:ca:aa:de:69:e8:37:
b5:19:63:c3:4a:ef:6c:32:38:61:03:6e:4c:d4:fe:
a8:11:0f:92:55:0c:3a:45:bf:05:eb:4b:0c:23:f8:
21:71:29:5a:d3:25:04:2c:53:13:cd:f3:bb:37:ab:
b4:5a:24:40:09:f5:63:17:b6:46:ba:04:b4:0f:ee:
42:e3:55:1a:aa:27:8e:94:44:65:dc:ed:65:09:4c:
e8:c1:df:a3:9f:9e:24:f8:54:2e:e0:55:9a:d2:a8:
8f:b7:93:04:30:0a:27:15:f2:3b:fe:53:fe:1f:78:
3e:9f:48:55:59:ee:4f:ca:c8:ee:00:86:98:42:e9:
55:c4:8b:c1:ac:33:1b:d0:d7:bb:d9:97:7c:3e:0b:
45:9a:d1:fe:91:1c:fe:43:40:c4:a5:3a:d4:85:f3:
49:67:4d:7e:b5:8f:3f:c3:87:5c:00:24:38:b9:11:
c1:03:c7:af:3f:82:40:03:79:22:28:65:f6:65:09:
a0:18:ab:a4:06:90:c1:3a:1e:9e:fc:ee:ca:0f:17:
6a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:79:11:4A:66:DE:40:79:6A:86:C2:47:D3:34:0A:8C:09:06:4E:43
X509v3 Authority Key Identifier:
keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/3590B0F65B9B11EFB90EBF42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.95.0/24
160.187.24.0/24
Signature Algorithm: sha256WithRSAEncryption
85:5a:a4:7b:42:ce:12:a7:ff:47:5b:07:3c:d5:ad:5e:cf:cd:
a0:a6:0c:db:16:fd:92:29:c4:52:92:35:01:cf:8f:f4:2f:11:
01:da:62:06:cf:49:69:64:55:99:29:79:cf:a0:bd:b4:1a:6a:
2b:26:6b:66:67:8f:99:da:20:0f:89:dc:82:7a:42:4c:c9:db:
db:d3:61:aa:47:50:17:1b:84:99:ba:c6:ef:53:0a:1a:72:3a:
63:39:6c:59:9a:2b:95:f0:5a:3d:0d:8d:d9:5f:96:9a:61:87:
fb:80:43:c2:14:6a:ea:40:0f:54:fd:0b:ab:0b:2b:33:b6:74:
d4:19:c3:c3:a0:b6:bf:9b:77:f9:53:3a:af:3b:18:1d:aa:e0:
48:c1:30:fa:5f:d2:9f:ce:06:a1:20:08:c1:88:dd:12:62:70:
60:16:ed:3a:64:e1:d6:44:25:ec:3c:8a:8e:dd:23:42:29:e3:
78:d1:2c:de:90:f7:a2:51:6a:20:39:40:ac:a1:0f:72:2c:e4:
ad:d9:c0:f7:ec:f4:4e:26:b5:36:96:01:58:b3:81:df:ab:06:
4e:a9:d0:c4:5f:70:0f:20:e8:5a:a8:e5:25:e1:1b:21:3d:54:
16:94:c6:8e:1d:8a:b3:69:70:7e:a5:aa:92:14:e0:d1:40:aa:
09:36:47:79
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI3NUExMTAvBgNVBAUTKDU1NzcwRjYzQTBFNjVGNEMyRkM5NkFGMTk4QkM1Nzg0
RENFNzhBNDYwHhcNMjYwOTAzMDQ1NTUzWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4ZmRkOS00M2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo21SG1wtqUBJ5+sfRtv2dloJwYDdYZCIuYQwGz0zHznTtSsiok+1VREtuO9Y
7fnIswbWygLKqt5p6De1GWPDSu9sMjhhA25M1P6oEQ+SVQw6Rb8F60sMI/ghcSla
0yUELFMTzfO7N6u0WiRACfVjF7ZGugS0D+5C41UaqieOlERl3O1lCUzowd+jn54k
+FQu4FWa0qiPt5MEMAonFfI7/lP+H3g+n0hVWe5PysjuAIaYQulVxIvBrDMb0Ne7
2Zd8PgtFmtH+kRz+Q0DEpTrUhfNJZ01+tY8/w4dcACQ4uRHBA8evP4JAA3kiKGX2
ZQmgGKukBpDBOh6e/O7KDxdq0wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKt5EUpm
3kB5aobCR9M0CowJBk5DMB8GA1UdIwQYMBaAFFV3D2Og5l9ML8lq8Zi8V4Tc54pG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1QS8xMkQzMEZEODVC
OUExMUVGODIwMjc2NDBDNEY5QUUwMi9WWGNQWTZEbVgwd3Z5V3J4bUx4WGhOem5p
a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZYY1BZNkRtWDB3dnlXcnhtTHhYaE56bmlrWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkI3NUEvMTJEMzBGRDg1QjlBMTFFRjgyMDI3NjQwQzRGOUFFMDIvMzU5MEIwRjY1
QjlCMTFFRkI5MEVCRjQyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAoB5fAwQAoLsYMA0GCSqGSIb3DQEBCwUAA4IBAQCFWqR7Qs4Sp/9H
Wwc81a1ez82gpgzbFv2SKcRSkjUBz4/0LxEB2mIGz0lpZFWZKXnPoL20GmorJmtm
Z4+Z2iAPidyCekJMydvb02GqR1AXG4SZusbvUwoacjpjOWxZmiuV8Fo9DY3ZX5aa
YYf7gEPCFGrqQA9U/QurCysztnTUGcPDoLa/m3f5UzqvOxgdquBIwTD6X9Kfzgah
IAjBiN0SYnBgFu06ZOHWRCXsPIqO3SNCKeN40SzekPeiUWogOUCsoQ9yLOSt2cD3
7PROJrU2lgFYs4HfqwZOqdDEX3APIOhaqOUl4RshPVQWlMaOHYqzaXB+paqSFODR
QKoJNkd5
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:40:37 2026 by rpki-client