
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/85F80AF6EC3011EE92FDDE25C4F9AE02.roa
File: 85F80AF6EC3011EE92FDDE25C4F9AE02.roa (raw, json)
Hash identifier: fcNTcHn3aIBdpa4SyqH6xv6TobfhGd5s7sDCWZMbYS8=
Subject key identifier: E9:6A:1F:DB:37:25:8A:2E:4E:78:4E:80:26:BD:B6:E3:B6:EA:85:96
Certificate issuer: /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Certificate serial: 01E9
Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/85F80AF6EC3011EE92FDDE25C4F9AE02.roa
Signing time: Tue 23 Jun 2026 04:33:06 +0000
ROA not before: Tue 23 Jun 2026 04:33:06 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 139659
IP address blocks: 83.229.40.0/21 maxlen: 21
83.229.40.0/23 maxlen: 23
83.229.42.0/23 maxlen: 23
83.229.44.0/23 maxlen: 23
83.229.46.0/23 maxlen: 23
83.229.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Validity
Not Before: Jun 23 04:33:06 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3a0c82-44cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:4c:aa:7e:76:f1:aa:d2:2a:ed:f5:44:06:
8e:87:57:51:2b:1d:cd:d3:5d:df:a0:6d:e9:dd:e2:
0f:35:bb:18:98:e9:cf:1c:60:6a:01:87:99:5f:d2:
c4:75:51:2b:c9:a4:12:9c:20:6b:c0:2a:d5:f2:fc:
1e:d7:d5:46:70:86:ff:73:ee:d0:c4:cc:44:bf:ca:
4f:33:7c:8e:a6:9e:6e:9a:01:cd:2b:a5:18:57:dd:
58:dc:a1:09:da:f3:88:6b:f3:43:42:6b:8f:c2:11:
85:8f:f4:55:19:1e:33:5a:e5:14:61:62:48:0f:14:
db:20:b2:31:d7:46:93:c8:99:66:ca:4b:e3:e0:8b:
1a:51:a5:ee:70:0a:5b:cf:a8:cd:89:fb:77:d7:3c:
17:81:d3:08:6d:08:01:74:91:ad:e8:8d:5e:94:af:
b9:3f:1c:06:73:28:1d:82:24:f1:be:b6:06:38:8b:
63:35:2f:6b:97:9b:ab:bb:fc:da:75:97:0e:26:93:
6f:63:d6:50:89:a4:63:8d:5d:1b:8c:c8:32:99:5d:
13:63:62:05:dc:1b:45:45:ed:c0:4f:73:59:36:7a:
82:72:a9:4e:b8:6d:12:30:93:57:03:7f:c9:78:be:
78:9d:55:a1:bc:b6:e3:22:18:29:68:22:c6:0d:86:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6A:1F:DB:37:25:8A:2E:4E:78:4E:80:26:BD:B6:E3:B6:EA:85:96
X509v3 Authority Key Identifier:
keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/85F80AF6EC3011EE92FDDE25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
83.229.40.0/21
83.229.120.0/21
Signature Algorithm: sha256WithRSAEncryption
38:24:4c:a5:a0:37:43:df:6b:94:87:06:1c:72:f3:9a:99:8f:
f1:aa:e4:dc:28:a2:cd:52:77:92:71:39:cd:cb:a8:0b:08:3a:
28:a5:af:f5:32:3b:9c:82:2b:25:7a:51:16:a6:c7:bd:a5:d6:
b0:88:46:f2:a7:5c:28:d0:46:e2:f4:55:36:26:af:02:00:81:
9f:c2:69:4e:8e:2e:96:0d:c1:c9:28:1b:01:c4:1f:c8:b1:cd:
f0:be:5a:74:53:f3:d8:f0:0e:e4:fe:18:9e:68:4f:6a:3e:34:
9d:23:3b:e3:3b:e5:e9:e6:35:64:d5:cf:fc:c3:27:b7:2e:84:
8b:54:63:ec:05:7e:46:e3:08:24:87:ed:3c:83:d7:77:22:0a:
fc:a1:0a:63:f6:b7:3e:ab:60:01:64:b8:ec:fc:bb:ea:b3:46:
33:e4:20:d8:9a:2b:0f:72:99:cd:2a:a7:73:e9:6e:db:bb:dd:
9c:82:e3:59:b1:64:da:a8:53:d7:f9:93:4e:e7:8f:57:2a:4b:
65:da:62:85:4c:10:ce:51:53:66:f6:d5:48:7c:58:b5:d9:86:
74:85:76:b6:5e:72:9a:2a:5d:c8:9b:07:57:1c:a9:d6:72:99:
70:9d:aa:ac:04:51:0e:f1:5d:69:23:1f:5c:5b:7f:8f:f9:80:
1e:d5:65:80
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY1MzUxMTAvBgNVBAUTKEVBRDY0NjM1NUQ3NTkzNkNCOTNFRDZCQURCNzkwQTg3
RkUxNTM3NEEwHhcNMjYwNjIzMDQzMzA2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNhMGM4Mi00NGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp0ZMqn528arSKu31RAaOh1dRKx3N013foG3p3eIPNbsYmOnPHGBqAYeZX9LE
dVEryaQSnCBrwCrV8vwe19VGcIb/c+7QxMxEv8pPM3yOpp5umgHNK6UYV91Y3KEJ
2vOIa/NDQmuPwhGFj/RVGR4zWuUUYWJIDxTbILIx10aTyJlmykvj4IsaUaXucApb
z6jNift31zwXgdMIbQgBdJGt6I1elK+5PxwGcygdgiTxvrYGOItjNS9rl5uru/za
dZcOJpNvY9ZQiaRjjV0bjMgymV0TY2IF3BtFRe3AT3NZNnqCcqlOuG0SMJNXA3/J
eL54nVWhvLbjIhgpaCLGDYYlRQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOlqH9s3
JYouTnhOgCa9tuO26oWWMB8GA1UdIwQYMBaAFOrWRjVddZNsuT7Wutt5Cof+FTdK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82MTk4MEE1NEJB
NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi82dFpHTlYxMWsyeTVQdGE2MjNrS2hfNFZO
MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzZ0WkdOVjExazJ5NVB0YTYyM2tLaF80Vk4wby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkY1MzUvNjE5ODBBNTRCQTY2MTFFRUJDMzk2MjZFQzRGOUFFMDIvODVGODBBRjZF
QzMwMTFFRTkyRkRERTI1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQDU+UoAwQDU+V4MA0GCSqGSIb3DQEBCwUAA4IBAQA4JEyloDdD32uU
hwYccvOamY/xquTcKKLNUneScTnNy6gLCDoopa/1MjucgislelEWpse9pdawiEby
p1wo0Ebi9FU2Jq8CAIGfwmlOji6WDcHJKBsBxB/Isc3wvlp0U/PY8A7k/hieaE9q
PjSdIzvjO+Xp5jVk1c/8wye3LoSLVGPsBX5G4wgkh+08g9d3Igr8oQpj9rc+q2AB
ZLjs/Lvqs0Yz5CDYmisPcpnNKqdz6W7bu92cguNZsWTaqFPX+ZNO549XKktl2mKF
TBDOUVNm9tVIfFi12YZ0hXa2XnKaKl3ImwdXHKnWcplwnaqsBFEO8V1pIx9cW3+P
+YAe1WWA
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:52 2026 by rpki-client