
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/E0AAFE389A2411EBA8913944C4F9AE02.roa
File: E0AAFE389A2411EBA8913944C4F9AE02.roa (raw, json)
Hash identifier: nhD85MOyBdV90NHMy7wyxMVSVmSSNj42iXpkFXmU9u8=
Subject key identifier: 20:D1:14:E5:67:EA:2C:14:63:F9:6B:9A:B4:AC:27:FD:EF:78:59:F6
Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial: 07D5
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/E0AAFE389A2411EBA8913944C4F9AE02.roa
Signing time: Sat 18 Jul 2026 23:23:32 +0000
ROA not before: Sat 18 Jul 2026 23:23:32 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 131317
IP address blocks: 103.8.44.0/24 maxlen: 24
103.8.45.0/24 maxlen: 24
103.8.46.0/24 maxlen: 24
2403:8600:ea88::/48 maxlen: 48
2403:8600:ea89::/48 maxlen: 48
2403:8600:ea8a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 23:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005 (0x7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Validity
Not Before: Jul 18 23:23:32 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5c0af4-e377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:00:c3:2c:00:f6:fc:61:69:eb:fb:17:ef:
71:6c:a4:a0:ac:e3:40:91:c9:37:7f:d4:b1:41:6b:
62:6d:13:e0:1e:74:02:3a:41:4b:85:d6:05:a7:75:
e5:77:48:27:dd:1c:6c:16:e5:8e:cf:c3:d0:11:38:
ff:75:b3:bd:ba:46:32:f2:22:2d:a7:ce:e6:8f:d9:
30:a4:42:12:67:65:e0:f8:a7:f1:87:6e:c8:7b:7d:
6b:47:e5:ad:77:6d:0a:fb:44:f3:c1:46:e4:f8:b6:
9f:80:bc:be:99:c8:c3:15:17:f0:b7:be:70:6e:ee:
b7:e9:45:cf:d2:77:fc:c5:86:bf:b7:cb:22:0d:1b:
b8:51:17:a2:5b:80:2c:17:9f:ba:8d:3e:44:4f:49:
e3:82:48:71:ae:27:3f:0d:d6:5b:8d:0c:79:ad:87:
6f:50:16:14:6d:99:c4:fe:b1:48:5d:74:d2:66:ae:
1d:1d:b6:32:2d:0b:db:01:3c:14:b8:31:fb:82:56:
21:ad:0d:0e:ee:aa:2b:c8:0c:7b:18:d7:74:33:6a:
57:18:4f:fa:a9:31:8e:aa:b0:dc:84:05:90:5f:ba:
16:8e:70:61:8b:62:0d:10:07:4f:41:0b:48:11:0b:
9f:a1:af:a1:73:e5:db:6c:fc:4d:f3:40:13:f5:ce:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D1:14:E5:67:EA:2C:14:63:F9:6B:9A:B4:AC:27:FD:EF:78:59:F6
X509v3 Authority Key Identifier:
keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/E0AAFE389A2411EBA8913944C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.8.44.0-103.8.46.255
IPv6:
2403:8600:ea88::-2403:8600:ea8a:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
64:76:08:61:b9:65:26:e7:54:23:53:b1:1b:69:77:49:4c:d7:
63:7a:7e:c4:18:22:ef:f3:d6:90:46:87:ee:02:40:d1:92:ec:
9f:35:5a:b7:7c:bf:a9:b5:cb:3d:e8:d3:6b:b3:2f:3e:52:0c:
72:2a:98:63:94:26:80:46:34:8b:c9:b1:16:98:57:a0:fa:90:
bb:87:0a:d8:61:bb:a3:c0:de:cc:4a:bb:e3:e3:d2:ad:7a:c8:
55:72:57:79:7b:34:84:b8:91:a4:52:02:6b:4f:6d:a6:f7:4b:
ef:84:12:1d:3d:9b:40:94:99:98:2e:e7:26:d4:c0:67:aa:d8:
94:0a:8a:92:cc:72:dc:ce:90:0f:7b:72:f5:5f:26:82:9f:39:
d2:f1:95:af:3b:a5:d2:14:ef:47:2d:02:19:13:c7:95:1a:08:
be:24:5b:45:29:3e:9c:cd:34:18:cb:7d:c6:fe:a2:d7:03:a9:
d2:67:64:57:a2:96:98:e7:d4:60:6a:06:17:73:88:3c:01:33:
3e:00:c4:17:8c:05:04:31:d7:0f:c4:6a:cb:a0:b0:d5:5d:7e:
b8:f6:6d:f1:d5:13:25:76:8a:09:81:ac:c5:c5:6f:b1:98:f2:
b6:d7:17:b4:fa:2a:56:3f:66:52:f3:b5:e2:54:c6:fd:51:26:
e4:f3:ba:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:30 2026 by rpki-client