
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DCE2A830EC3A11EE8CC3B820C4F9AE02.roa
File: DCE2A830EC3A11EE8CC3B820C4F9AE02.roa (raw, json)
Hash identifier: gUQlMixcB01Rr7cv/ONahvNHJu1v5YRkD2UUd9NXNcw=
Subject key identifier: 56:5A:6E:DD:D6:53:86:F8:13:E7:AF:69:F9:A8:D7:7B:68:EF:52:FA
Certificate issuer: /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Certificate serial: 01EB
Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DCE2A830EC3A11EE8CC3B820C4F9AE02.roa
Signing time: Tue 23 Jun 2026 04:33:10 +0000
ROA not before: Tue 23 Jun 2026 04:33:10 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 18013
IP address blocks: 83.229.40.0/21 maxlen: 21
83.229.40.0/23 maxlen: 23
83.229.42.0/23 maxlen: 23
83.229.44.0/23 maxlen: 23
83.229.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Validity
Not Before: Jun 23 04:33:10 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3a0c86-a873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8f:17:45:12:b7:6a:bf:b9:8c:8f:84:36:7a:
bb:28:1d:ef:c6:7a:76:14:6c:e8:9f:45:69:ab:ef:
eb:5e:01:96:ab:0b:6b:7c:95:18:b1:a0:15:96:80:
18:1c:50:23:a4:d1:cc:29:98:db:4b:b1:1d:a2:89:
a0:70:76:9b:be:d5:d3:e0:da:5b:e2:ea:7d:2d:d9:
6c:16:8d:3f:04:ba:79:40:7c:0f:6b:90:42:47:87:
be:10:64:5b:7c:b4:57:aa:74:7e:56:89:5d:57:d9:
36:57:4e:3d:cf:69:18:a6:ea:80:82:cc:a5:2d:63:
84:d0:d0:f7:98:92:20:db:64:88:d8:66:01:26:31:
cf:42:21:b0:9a:b6:4e:60:ff:63:06:e6:b0:ea:91:
bb:c7:fd:d4:7d:c3:a4:41:95:e4:00:19:8a:b4:3f:
8b:0b:2c:f5:76:44:a1:de:43:47:28:14:ce:38:ad:
b5:05:24:c6:66:b5:90:3e:57:8e:c9:19:2b:36:15:
07:3e:61:29:bb:e7:ef:7d:15:5f:e0:46:33:da:57:
cb:66:4c:36:7a:c1:fd:7e:fb:1b:2b:05:74:fd:58:
90:09:94:0c:35:6f:10:f3:86:b6:a2:66:de:b0:26:
b6:ea:d4:16:06:69:67:59:48:ea:dd:5f:77:1a:95:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5A:6E:DD:D6:53:86:F8:13:E7:AF:69:F9:A8:D7:7B:68:EF:52:FA
X509v3 Authority Key Identifier:
keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/DCE2A830EC3A11EE8CC3B820C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
83.229.40.0/21
Signature Algorithm: sha256WithRSAEncryption
29:28:66:fb:92:30:d5:c1:5d:3c:e8:6f:dd:f0:27:ea:9e:9f:
c5:28:f7:f3:b2:27:91:aa:57:ac:04:86:75:5d:3a:98:19:4e:
35:33:9b:6f:1d:2a:35:57:43:38:68:35:ba:fe:00:ea:cc:a7:
e6:93:9a:88:c7:23:a8:14:a6:b3:79:bb:e2:34:27:58:d5:f2:
48:e5:fb:ee:32:3a:1f:ea:0a:4e:8c:a2:bc:0f:70:b6:55:2c:
fb:f9:0d:95:72:d8:24:c9:41:61:95:39:2c:c1:09:77:f4:34:
4b:15:08:be:89:d3:c4:f1:c7:63:2f:c5:84:17:a0:d1:90:32:
ca:58:73:ae:ae:67:f2:39:9a:b3:d9:83:ba:19:6d:b8:2c:7b:
08:f0:e9:0c:81:2f:79:74:f9:ee:b9:a2:66:82:39:5b:cd:43:
87:cf:1f:f7:98:76:6a:48:0b:b2:a1:40:a3:b1:d8:6e:37:8e:
07:8f:13:58:1c:25:fa:8c:8f:52:88:11:3e:60:59:33:99:72:
62:5f:8f:17:35:23:63:5f:cd:f8:05:6f:f6:37:ab:31:ac:ec:
59:4d:1a:d8:66:c6:a2:e2:f0:e0:e7:48:a4:fb:b0:a8:ec:e9:
3d:94:b7:22:bd:85:70:82:8a:00:c9:b3:98:65:ac:6b:e5:c9:
35:a7:a1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:45 2026 by rpki-client