
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A17C3508168911EFBF38F580C4F9AE02.roa
File: A17C3508168911EFBF38F580C4F9AE02.roa (raw, json)
Hash identifier: virvE8MNeacbpPBupuEDzS3TVIUvnhiLbybl98L+CAc=
Subject key identifier: E4:80:25:C2:D5:B3:F9:12:7B:54:74:B9:97:72:0A:97:57:F5:A4:C0
Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial: 0205
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A17C3508168911EFBF38F580C4F9AE02.roa
Signing time: Tue 23 Jun 2026 04:33:23 +0000
ROA not before: Tue 23 Jun 2026 04:33:23 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 400619
IP address blocks: 14.192.4.0/22 maxlen: 22
14.192.4.0/23 maxlen: 24
14.192.6.0/23 maxlen: 24
43.224.224.0/22 maxlen: 24
103.215.76.0/24 maxlen: 24
103.215.77.0/24 maxlen: 24
103.215.78.0/24 maxlen: 24
103.215.79.0/24 maxlen: 24
116.213.40.0/22 maxlen: 24
203.91.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:58:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Validity
Not Before: Jun 23 04:33:23 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3a0c93-e6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3a:04:bd:98:97:69:53:ac:b2:d5:5e:4a:b3:
1a:10:33:9b:bc:30:f4:6a:f9:0f:c2:3f:da:39:3f:
13:71:ca:61:c5:12:07:0b:f7:69:aa:bc:a1:69:6d:
3b:19:72:ae:41:ae:a4:b0:13:be:a7:61:29:b2:73:
16:b5:00:5a:a7:66:e8:e9:cd:f6:76:d5:2e:a9:46:
b9:fc:10:a3:b3:98:b1:12:37:2d:25:9d:48:aa:05:
43:52:d0:00:ad:bb:8e:41:0a:06:f4:6b:8b:b0:b4:
5e:a9:c8:88:0d:8a:dd:71:66:0a:3b:71:bd:02:fd:
9d:8f:58:6c:4b:ad:b1:a4:14:bf:17:1d:02:54:9b:
34:9f:57:02:4a:31:06:ec:a4:92:03:77:36:b4:28:
8c:55:7b:a0:1f:20:5f:30:d6:dc:3b:fa:14:a8:18:
93:39:07:3f:43:67:46:18:1e:5c:8c:bd:26:9e:27:
8b:15:92:aa:b6:ed:c4:f6:8a:3e:c1:6e:e4:a6:57:
e5:64:cf:5a:16:56:2b:51:bb:82:ec:a9:3b:76:fb:
0d:80:83:26:86:6f:8f:bd:f2:60:4c:2e:05:39:55:
2d:64:39:bc:51:f0:5b:31:12:88:fd:10:f9:ca:1a:
99:41:24:9f:1e:51:96:fa:ac:0a:c8:23:1b:76:3d:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:80:25:C2:D5:B3:F9:12:7B:54:74:B9:97:72:0A:97:57:F5:A4:C0
X509v3 Authority Key Identifier:
keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A17C3508168911EFBF38F580C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.4.0/22
43.224.224.0/22
103.215.76.0/22
116.213.40.0/22
203.91.72.0/21
Signature Algorithm: sha256WithRSAEncryption
84:e7:ee:16:bd:b8:67:7e:38:a0:96:bc:27:41:b4:3e:79:27:
9d:5b:b0:af:7f:4f:e2:b8:0f:54:86:a2:5c:63:3d:8b:5f:7f:
87:23:de:f7:b5:d4:1c:37:6b:af:9a:49:df:2d:69:90:f4:ff:
13:2a:59:8c:fb:8f:86:a3:06:37:04:a8:e5:d1:86:6f:7a:1e:
2e:26:22:4c:c7:a5:17:9c:44:71:e1:56:ba:0a:e1:4a:10:76:
c6:db:52:49:0f:b8:5a:95:d6:5c:82:b4:90:2a:14:68:70:a8:
c2:04:43:33:ce:ef:ad:14:ed:02:fe:fd:24:89:a8:43:28:41:
ad:f7:1b:d6:92:28:89:62:b6:e4:00:11:aa:f1:af:50:3d:69:
6e:34:6e:eb:bd:24:5e:95:46:dc:b7:eb:8f:f0:ed:32:5e:65:
54:84:8a:e8:fb:3e:f5:9e:23:3e:ba:b1:8e:d2:6d:51:c8:64:
9e:c6:07:cb:d0:cd:18:aa:55:cf:36:5d:be:5e:f3:bd:49:60:
c1:69:a3:54:fc:92:9e:2e:0e:64:25:be:1c:45:7d:0a:a8:8c:
62:63:b5:21:5d:b9:a4:98:5a:8a:84:7e:20:6d:10:6a:e5:45:
42:e3:fb:74:01:42:56:c2:9a:99:34:ba:f0:89:c4:56:bf:04:
ee:e2:a0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:43:42 2026 by rpki-client