
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/305F24342A0811EE9D810010C4F9AE02.roa
File: 305F24342A0811EE9D810010C4F9AE02.roa (raw, json)
Hash identifier: F8iFoHrfHfAromv0JDpIOiiFxaRoa1vxgbfkvu/Jldo=
Subject key identifier: 02:2B:2F:0C:51:19:F2:F5:71:8A:91:35:27:AA:E7:BA:ED:B4:C9:81
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0C38
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/305F24342A0811EE9D810010C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:44:39 +0000
ROA not before: Wed 02 Apr 2025 19:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55320
IP address blocks: 2404:a140:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3128 (0xc38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: Apr 2 19:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48917-0b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:88:1c:40:55:62:71:bc:3a:b1:2e:9f:ab:
f5:88:ad:f1:00:5f:fd:6d:50:6a:96:fb:49:11:3c:
c9:be:28:0d:f5:40:fa:26:ad:ce:2e:05:85:2e:0e:
01:32:86:1e:25:85:07:09:de:0a:35:4e:83:47:f7:
de:cc:03:36:e6:35:aa:10:b1:66:ec:8a:8f:80:7b:
cf:29:38:33:b5:0a:e8:35:25:a5:3f:86:3f:94:c1:
5b:a6:2a:4f:78:11:61:f7:08:61:41:9d:9f:3c:1b:
2a:3d:5a:08:22:6d:a1:2a:f7:60:ae:46:48:de:3d:
eb:b0:90:0e:0d:94:31:2d:be:ee:dd:87:45:49:d9:
f5:c1:c4:af:7d:5a:a0:45:80:d4:47:29:8c:c5:36:
72:27:08:c1:1d:f5:ca:12:8a:61:f2:4d:ea:24:48:
62:44:df:3d:59:8a:d9:9b:e1:10:60:a4:9e:e7:5c:
b0:03:51:ca:d2:39:e2:42:32:df:e5:e3:33:0a:50:
50:43:ab:27:df:c6:d4:d0:49:52:9c:61:0f:a4:61:
f2:7e:15:e7:e6:f9:25:fa:4e:17:1d:bc:aa:a8:7e:
31:d9:56:09:94:26:41:4c:93:83:9d:b1:fd:1c:ba:
01:83:00:ce:c4:3f:01:33:c2:ed:fc:d7:3a:c4:f0:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2B:2F:0C:51:19:F2:F5:71:8A:91:35:27:AA:E7:BA:ED:B4:C9:81
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/305F24342A0811EE9D810010C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:a140:22::/48
Signature Algorithm: sha256WithRSAEncryption
51:77:29:1b:66:a0:ea:29:46:58:40:9c:77:dc:42:b5:da:10:
84:c9:ec:83:2d:73:ed:76:e2:22:34:4d:b4:45:68:b2:23:f6:
a0:3e:a3:81:2c:05:a5:4b:a1:34:c8:aa:a4:82:6f:a4:75:13:
a6:b7:91:51:b3:e1:05:9e:78:ee:23:92:03:4c:90:0b:dd:24:
0d:52:d7:83:33:a3:11:35:2f:e2:c5:50:9b:8b:bd:e4:24:12:
39:9a:b0:0b:30:b8:be:d2:f0:8d:5e:6d:87:ce:1b:16:64:05:
13:d4:ba:10:3a:78:cd:1a:9a:06:83:73:39:b0:af:1e:68:8f:
8c:c8:cd:b0:dd:56:6e:fc:0d:9d:a2:9d:57:d8:aa:3b:80:69:
ae:7d:f7:3f:34:45:e9:90:5b:22:32:91:4f:01:ce:69:93:7c:
67:24:0e:6a:dc:65:b3:0d:ed:f6:13:93:00:7a:0f:27:11:1d:
77:39:18:a8:32:e5:df:d3:97:89:44:a8:d6:0f:4a:02:22:b0:
34:91:cd:7a:f8:3b:f7:78:47:14:d5:7d:3c:8e:c1:1d:eb:b3:
64:4d:64:29:53:45:95:49:62:c8:f0:59:60:23:38:8d:c2:a8:
63:3f:1b:86:1b:08:ea:38:14:ab:90:b1:fe:c5:17:74:97:a2:
9a:44:26:af
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICDDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1
QzBEREY5RDQwHhcNMjUwNDAyMTk1MDM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODkxNy0wYjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqOOIHEBVYnG8OrEun6v1iK3xAF/9bVBqlvtJETzJvigN9UD6Jq3OLgWFLg4B
MoYeJYUHCd4KNU6DR/fezAM25jWqELFm7IqPgHvPKTgztQroNSWlP4Y/lMFbpipP
eBFh9whhQZ2fPBsqPVoIIm2hKvdgrkZI3j3rsJAODZQxLb7u3YdFSdn1wcSvfVqg
RYDURymMxTZyJwjBHfXKEoph8k3qJEhiRN89WYrZm+EQYKSe51ywA1HK0jniQjLf
5eMzClBQQ6sn38bU0ElSnGEPpGHyfhXn5vkl+k4XHbyqqH4x2VYJlCZBTJODnbH9
HLoBgwDOxD8BM8Lt/Nc6xPBTowIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFAIrLwxR
GfL1cYqRNSeq57rttMmBMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF
RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkM4QUYvRDFGNjRFNzI1RUVGMTFFQUE1NEU2QzZDQzRGOUFFMDIvMzA1RjI0MzQy
QTA4MTFFRTlEODEwMDEwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAShQAAiMA0GCSqGSIb3DQEBCwUAA4IBAQBRdykbZqDqKUZYQJx3
3EK12hCEyeyDLXPtduIiNE20RWiyI/agPqOBLAWlS6E0yKqkgm+kdROmt5FRs+EF
nnjuI5IDTJAL3SQNUteDM6MRNS/ixVCbi73kJBI5mrALMLi+0vCNXm2HzhsWZAUT
1LoQOnjNGpoGg3M5sK8eaI+MyM2w3VZu/A2dop1X2Ko7gGmuffc/NEXpkFsiMpFP
Ac5pk3xnJA5q3GWzDe32E5MAeg8nER13ORioMuXf05eJRKjWD0oCIrA0kc16+Dv3
eEcU1X08jsEd67NkTWQpU0WVSWLI8FlgIziNwqhjPxuGGwjqOBSrkLH+xRd0l6Ka
RCav
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:22 2026 by rpki-client