
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/D12CC256A5F011F1A34023553E11F970.roa
File: D12CC256A5F011F1A34023553E11F970.roa (raw, json)
Hash identifier: NucdFsZmxt1AnXhYvxLBbqsEORBTiEqkjiFra0n2tn8=
Subject key identifier: 95:18:2F:CE:C7:2C:01:C2:C8:E8:41:48:EA:72:51:B9:A6:9D:82:A7
Certificate issuer: /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Certificate serial: 2757
Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/D12CC256A5F011F1A34023553E11F970.roa
Signing time: Mon 14 Sep 2026 08:57:10 +0000
ROA not before: Mon 14 Sep 2026 08:57:10 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 55501
IP address blocks: 203.124.56.0/24 maxlen: 24
203.124.57.0/24 maxlen: 24
203.124.60.0/24 maxlen: 24
210.56.6.0/24 maxlen: 24
210.56.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10071 (0x2757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Validity
Not Before: Sep 14 08:57:10 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6aa7b6e6-4d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:fe:1a:2f:63:47:c9:af:aa:12:de:05:7d:
e9:ed:fc:33:20:7e:a4:f0:d8:d0:a2:c6:51:14:cf:
c7:13:87:76:93:30:21:66:ea:bf:e5:5d:06:83:dd:
8c:3f:ea:f4:f2:00:64:07:08:bb:e6:3b:44:14:2e:
e0:97:0e:f4:20:03:85:42:6e:c8:c4:98:83:34:ee:
ea:d0:b0:4c:fa:57:15:d0:71:14:2a:3f:c3:15:48:
42:ea:bf:93:e8:12:09:a3:b5:76:71:36:68:1a:a9:
b2:70:9e:18:0c:6b:98:fa:b9:50:77:23:e8:cd:3c:
21:0e:06:7d:14:47:02:e6:a1:0b:3a:a7:d8:0f:c6:
9f:e5:eb:e1:08:71:f7:e5:3c:9b:55:a7:7c:ec:3f:
61:58:db:84:7d:ba:67:1a:a4:af:c3:28:80:fd:0b:
94:25:16:c0:ad:b9:f9:08:0a:bf:9f:50:af:05:36:
4c:cb:38:e6:35:b6:61:28:7a:e8:1b:3c:d0:5a:78:
3c:66:bb:c8:84:89:e5:a9:df:11:5b:ce:ef:49:d7:
27:98:3f:65:2e:a9:69:51:fc:2f:d6:4f:c9:18:73:
a8:56:68:77:17:71:fd:21:7f:61:83:1e:cb:16:22:
7e:64:93:74:95:02:b0:97:59:c0:b4:b3:4f:53:18:
1e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:18:2F:CE:C7:2C:01:C2:C8:E8:41:48:EA:72:51:B9:A6:9D:82:A7
X509v3 Authority Key Identifier:
keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/D12CC256A5F011F1A34023553E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
203.124.56.0/23
203.124.60.0/24
210.56.6.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:1c:b1:0f:45:f2:d7:1a:27:8d:f9:e8:fa:ff:1d:95:11:25:
48:34:97:e8:36:93:42:e6:89:b4:9a:18:4d:20:a6:36:cf:58:
e3:ac:bd:e7:2a:91:67:39:a6:3f:1f:53:81:ea:da:d9:c8:f6:
16:90:e6:7d:a6:d6:f0:67:27:b7:08:dc:81:23:ac:1d:6f:b0:
5e:18:df:7b:b4:6f:1d:81:fb:fc:b7:e3:29:8f:3d:dd:a2:12:
6e:25:7a:79:9c:26:ac:cd:3e:56:0c:f9:fc:8c:e1:f5:0d:17:
0f:a0:d7:30:0c:8c:99:29:44:fb:ec:79:0f:9d:bd:dd:f8:27:
de:b2:35:6c:4e:79:74:0a:2d:33:ce:72:2e:61:74:b7:a8:39:
75:e5:03:3e:ab:1e:3e:26:e4:4c:2c:2b:0b:39:69:f8:ee:30:
8f:3d:8c:86:a3:8f:6c:56:e5:75:ec:14:1c:af:5c:2a:92:c9:
c8:5a:ee:e1:2a:d0:88:c7:a2:d7:90:ee:bf:b9:16:58:3c:ee:
6e:2f:ec:b9:b5:72:80:41:c9:5b:83:62:8f:cf:f1:ac:54:11:
29:ce:f3:4f:45:b8:ff:33:6b:25:57:7e:9a:c3:13:45:48:d4:
c4:c9:7c:46:4e:93:4c:38:46:0c:43:4e:ee:2d:ba:23:68:4b:
86:09:bd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:41:40 2026 by rpki-client