
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/28F87D180A1611F0BC8FD10DC4F9AE02.roa
File: 28F87D180A1611F0BC8FD10DC4F9AE02.roa (raw, json)
Hash identifier: Jgehc0dNGWJlml8ypNr1T5HmtWN0p5K48gpU2FwQ+nU=
Subject key identifier: BC:32:58:EE:51:D3:32:AE:46:B8:0D:25:F2:21:41:FE:12:2F:7D:64
Certificate issuer: /CN=A912DB97/serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
Certificate serial: D2
Authority key identifier: C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/28F87D180A1611F0BC8FD10DC4F9AE02.roa
Signing time: Fri 01 May 2026 07:39:35 +0000
ROA not before: Fri 01 May 2026 07:39:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132703
IP address blocks: 103.18.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl
rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB97, serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F
Validity
Not Before: May 1 07:39:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f458b7-c9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:02:c7:4b:8f:73:64:64:1d:dd:d5:97:26:4c:
46:ae:a3:ec:f8:a9:10:05:01:6b:e6:d0:f1:02:34:
dc:b0:0c:42:9e:56:3d:f0:05:16:55:f8:24:59:f6:
0b:87:99:72:25:58:2c:b2:2e:dd:24:9d:36:7d:7a:
38:1f:a9:5e:c4:9c:cf:e1:29:d2:65:ba:d2:91:14:
ca:31:ff:18:b4:bc:e9:4b:ac:57:31:f5:f3:4c:13:
61:f0:0b:12:d5:61:bf:1f:f4:c6:b5:38:24:7c:4f:
dd:4e:ce:b0:47:45:47:f9:c8:07:34:dc:db:ca:b7:
26:74:6e:59:4c:8b:92:c8:5a:c3:0e:da:89:3d:b6:
ea:ac:36:7b:b6:ac:18:49:d7:73:5e:55:34:c3:c6:
30:64:eb:c3:f1:f1:f3:c4:60:45:46:19:05:31:5d:
98:5a:c8:67:2e:3e:16:89:15:90:fb:f1:a8:2f:3f:
52:88:ad:66:92:42:6d:95:ac:95:a3:ed:50:d8:3d:
b6:8f:67:5e:45:31:32:ea:a7:27:d0:95:cf:5c:7a:
66:b5:bf:bf:44:66:70:23:6a:3c:eb:97:9f:c5:5f:
c5:56:47:07:46:74:04:23:fa:65:da:49:3e:62:4d:
e1:50:7f:2b:a1:06:a1:7f:45:d7:4a:c9:1b:c4:57:
6b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:32:58:EE:51:D3:32:AE:46:B8:0D:25:F2:21:41:FE:12:2F:7D:64
X509v3 Authority Key Identifier:
keyid:C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/28F87D180A1611F0BC8FD10DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.18.189.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e4:cc:ec:49:fb:d0:f5:62:14:77:84:36:63:09:12:d6:2b:
70:70:3a:f8:94:59:28:4d:fa:7b:18:96:a5:3e:86:00:47:de:
e7:f6:7c:5c:87:0c:88:f1:bb:39:ec:f7:13:c5:6d:e1:bc:da:
19:41:98:1c:1e:9d:e3:a8:09:ba:52:04:cc:19:4b:c1:1b:4c:
be:68:06:02:b6:69:49:36:9e:04:e2:05:17:35:71:ec:f6:54:
6e:fd:88:8e:f3:48:7a:25:58:b0:55:88:03:07:be:32:62:15:
dc:f7:d6:39:f6:99:f7:cc:0b:30:d5:3a:e7:4d:0c:cc:64:37:
1f:38:35:5d:60:e2:14:f9:76:b5:3c:61:f6:5a:36:d8:73:20:
10:f2:bf:22:f4:78:f3:54:6a:fa:b2:df:9c:70:1c:04:a7:5d:
55:9e:71:29:a3:8a:a0:5f:3d:ac:ea:8e:5f:8a:9f:e3:be:ad:
d6:2e:41:8b:b0:5c:9f:28:02:5c:1b:7b:37:99:6e:54:95:25:
fe:10:7e:50:22:df:12:8c:a0:5a:6e:47:5d:fb:f8:60:07:e2:
4b:5f:bc:e3:54:23:b3:51:95:47:3e:aa:ee:01:6e:cb:71:a8:
87:7c:b5:27:30:17:f1:0c:3d:4f:be:4d:9d:ec:6a:36:3d:f1:
c1:1d:5c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:17:29 2026 by rpki-client