
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A6F2C5C2491F11F193C776FB9E833773.roa
File: A6F2C5C2491F11F193C776FB9E833773.roa (raw, json)
Hash identifier: n5FzFzWq7oMTynehpaBLyN7oo00BnAIyk+aOZacDhN0=
Subject key identifier: 08:44:93:BB:F5:2B:F4:0E:24:F8:01:F5:40:67:08:6A:0C:85:95:C1
Certificate issuer: /CN=A912DE06/serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
Certificate serial: 03
Authority key identifier: 46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A6F2C5C2491F11F193C776FB9E833773.roa
Signing time: Wed 06 May 2026 07:46:12 +0000
ROA not before: Wed 06 May 2026 07:46:12 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 963
IP address blocks: 111.68.13.0/24 maxlen: 24
111.68.14.0/24 maxlen: 24
111.68.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl
rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DE06, serialNumber=4690C106AEB83C74D7BDF3A4E7993C09812BACFC
Validity
Not Before: May 6 07:46:12 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69faf1c4-0bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:d2:ff:98:8c:4c:cd:f6:62:46:f3:0f:dc:
8e:ee:f9:a8:8f:83:16:77:b5:51:8c:02:76:90:85:
87:f9:7f:3a:17:98:fe:2f:21:7d:3d:b2:96:bc:25:
ca:2f:5a:e1:d2:5d:89:64:26:c0:30:af:fd:77:d8:
36:13:5c:ba:6c:e7:55:12:20:bd:15:a3:2c:da:95:
73:e6:fb:ea:1d:28:52:b3:db:7d:99:28:6f:55:b9:
e3:0b:40:70:55:22:c1:40:2d:95:d8:65:ff:b7:31:
5d:a3:df:f4:6b:d1:94:78:51:85:cd:72:87:bc:66:
d9:f8:60:99:c3:31:29:77:6f:43:8a:34:9d:2e:5d:
a0:96:d0:1b:b9:d6:79:8e:93:b9:9a:73:14:37:9a:
0e:c6:9f:5c:2e:ef:78:3c:c0:c1:cc:c8:16:61:99:
2a:59:17:65:14:2a:a2:42:96:f8:ad:75:4d:92:39:
83:73:89:22:d1:82:e9:22:b7:6c:96:d0:df:b2:f0:
85:ce:e0:9a:de:b3:d6:1f:57:ac:e5:5c:9b:d2:4a:
88:67:01:29:f7:93:a0:09:14:18:bc:36:d1:3d:61:
ed:46:6e:df:c0:25:09:0d:f2:4c:f5:8a:5e:32:2f:
9b:66:3f:71:8c:6b:32:4d:6d:d9:15:2e:8f:6c:c8:
36:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:44:93:BB:F5:2B:F4:0E:24:F8:01:F5:40:67:08:6A:0C:85:95:C1
X509v3 Authority Key Identifier:
keyid:46:90:C1:06:AE:B8:3C:74:D7:BD:F3:A4:E7:99:3C:09:81:2B:AC:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/RpDBBq64PHTXvfOk55k8CYErrPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpDBBq64PHTXvfOk55k8CYErrPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DE06/669DB572491F11F1835932CA9E833773/A6F2C5C2491F11F193C776FB9E833773.roa
sbgp-ipAddrBlock: critical
IPv4:
111.68.13.0-111.68.15.255
Signature Algorithm: sha256WithRSAEncryption
1c:09:e3:2f:85:43:31:f2:e0:e0:67:07:c0:d2:bc:b2:4a:1e:
df:4f:a2:61:29:47:28:9d:bb:e1:b6:56:78:77:71:8e:35:ba:
61:bd:01:6d:dd:38:9e:fa:ca:e8:77:b0:b1:b0:5f:03:18:df:
1e:7d:d0:3f:b0:7b:fd:96:23:63:a5:f8:6c:02:84:90:e4:62:
fe:87:dd:96:fc:43:d4:82:ee:a3:d7:7c:27:54:88:d0:96:57:
1c:9f:4b:d3:0c:e9:ce:7c:45:a6:6d:af:52:a1:55:d7:8a:d1:
ae:c2:55:0d:2b:73:f0:94:ea:7c:f0:2b:c5:17:69:09:8d:03:
22:a1:ad:25:25:ea:0f:b1:bc:cc:ce:ce:25:9a:d6:3f:fd:5a:
bf:8e:5e:87:51:e6:8f:6a:a8:dd:4c:7f:42:dd:2c:d6:2b:00:
de:9e:3e:53:79:2e:9d:db:97:ef:cd:2a:e8:aa:bc:0a:d5:8a:
5c:16:ea:fb:51:42:fa:a2:d4:7f:33:00:e0:cb:d1:57:83:4b:
28:ae:e5:b7:49:d2:ff:f9:cd:fb:2a:91:26:99:9e:cc:1a:69:
13:99:e6:1c:27:cc:f7:ee:cc:58:c5:b7:1d:de:71:69:29:a2:
cf:d3:de:f1:98:6b:34:c4:36:de:9e:6a:c1:63:9f:c3:ad:2b:
f4:86:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:10 2026 by rpki-client