
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/12B1AAB4B74B11F1A50305EC3B11F970.roa
File: 12B1AAB4B74B11F1A50305EC3B11F970.roa (raw, json)
Hash identifier: v/IAUsXxFsvbrsBGrwa/A9xRHR8PY3Ni0uZYv24b1TQ=
Subject key identifier: 84:AF:38:1B:AC:49:7F:83:A5:0E:4A:C5:A5:C0:22:E1:5F:9A:3A:DC
Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial: 0C4B
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/12B1AAB4B74B11F1A50305EC3B11F970.roa
Signing time: Wed 23 Sep 2026 12:34:09 +0000
ROA not before: Wed 23 Sep 2026 12:34:09 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 2497
IP address blocks: 103.6.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 12:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3147 (0xc4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Validity
Not Before: Sep 23 12:34:09 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6ab3c741-7aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:07:b1:55:4c:b6:1b:e5:90:42:ab:2c:76:8b:
8e:8a:e7:08:32:6b:38:42:e7:e0:a6:ff:bc:a2:9e:
0f:d4:8e:5c:ae:1c:5f:5a:0a:d5:0f:9c:b3:de:2d:
d9:9d:dd:a2:c4:6f:dc:a7:1a:71:39:80:22:b2:1f:
35:4b:e2:fe:4f:eb:59:24:76:07:43:b4:31:d1:5f:
5e:f5:25:8e:2d:bf:8a:a7:eb:b2:01:aa:b4:83:44:
b8:5f:29:24:26:10:53:3b:64:2d:55:f3:a6:e1:d8:
66:37:4a:9c:ac:94:61:1a:aa:11:46:b7:75:ed:93:
a8:ec:5e:68:e3:f8:c3:83:aa:ca:3a:8f:ca:4e:5f:
fe:c5:d1:b8:db:25:f0:30:b9:9a:e7:23:b5:c7:4c:
e5:41:c8:aa:6a:15:8a:72:18:89:93:13:32:8e:67:
43:d1:e9:ad:bf:9c:98:6b:40:23:25:ad:80:cd:56:
07:8a:73:88:1e:e2:e6:2e:f9:01:42:d6:98:09:a9:
a3:d0:a5:71:4a:be:44:8f:5f:b6:6b:9d:e5:15:d3:
42:4b:70:3d:2d:9c:a3:19:49:e5:ba:2a:7c:93:16:
14:75:c0:f9:76:51:65:7b:9c:87:cb:2e:4a:65:1b:
73:36:59:69:47:7e:d0:c4:73:fa:8d:a0:79:4c:08:
fb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AF:38:1B:AC:49:7F:83:A5:0E:4A:C5:A5:C0:22:E1:5F:9A:3A:DC
X509v3 Authority Key Identifier:
keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/12B1AAB4B74B11F1A50305EC3B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.20.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:39:f7:6e:b7:ca:1e:cc:07:8a:36:2f:85:49:06:fd:dc:aa:
1c:3f:47:cb:25:5f:08:08:3a:a9:b8:83:62:3b:6d:dc:ed:7a:
d3:1a:cc:8a:70:a5:7f:3a:ab:70:c9:e9:ef:d4:29:25:43:5e:
e3:88:db:7d:2f:9d:a8:05:8b:46:91:9e:94:2b:a0:0b:21:50:
f8:f6:b4:6f:a5:15:86:f8:2e:a7:1c:74:17:66:5c:fb:2a:78:
48:1c:47:0c:0d:61:1b:8a:89:d1:91:bb:66:2e:32:ba:26:8a:
05:bd:c7:ea:7b:fa:6f:72:c3:1a:64:d0:2f:8d:6c:93:76:69:
d5:a6:c6:a7:1e:c4:43:25:d8:78:b1:3e:26:08:ac:ee:76:33:
6c:99:02:24:07:72:04:e0:99:a0:1e:bd:68:c2:9a:16:d9:c3:
3f:02:4f:c2:4d:9c:12:e4:a0:ca:2d:c9:e6:08:83:e3:d3:96:
e6:31:6d:c4:2f:d8:7f:82:1f:58:55:2a:e3:e6:53:9c:f1:bc:
6c:52:79:b8:db:1c:69:79:91:3d:a5:b8:6a:73:37:c3:77:4d:
a7:69:96:60:d2:0c:60:5f:8e:d6:fa:56:e9:55:96:0f:23:be:
15:36:a3:5a:ee:21:e8:06:f4:84:94:7b:a1:93:44:be:7b:8d:
d2:2a:57:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:11:45 2026 by rpki-client