
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/CFED56A4240411F0B73CB374C4F9AE02.roa
File: CFED56A4240411F0B73CB374C4F9AE02.roa (raw, json)
Hash identifier: cpTkaIVcfxMsjIQ1xhEgH02kzgyJBnRj6lfOSU2p6Zo=
Subject key identifier: 85:61:29:3B:26:CC:F5:47:79:12:0B:54:67:45:08:0F:50:7D:21:2E
Certificate issuer: /CN=A913E62B/serialNumber=F2E073092976058EB98656141437F8FB68B7215D
Certificate serial: C9
Authority key identifier: F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/CFED56A4240411F0B73CB374C4F9AE02.roa
Signing time: Tue 05 May 2026 07:40:24 +0000
ROA not before: Tue 05 May 2026 07:40:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38038
IP address blocks: 203.34.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl
rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E62B, serialNumber=F2E073092976058EB98656141437F8FB68B7215D
Validity
Not Before: May 5 07:40:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f99ee8-d551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:99:d5:0a:78:76:be:50:bd:5d:f4:a0:b6:
47:b4:88:c6:83:27:15:99:50:4d:a6:92:b2:04:10:
75:5d:0e:38:80:6d:52:be:ae:73:db:df:79:57:ff:
f6:3c:0a:bb:4e:d6:8b:9f:a4:76:45:a0:8c:b0:79:
89:d9:ca:b0:6f:83:ae:07:16:64:92:d1:cb:d9:a6:
84:e5:fc:06:a2:b2:c7:75:0b:fd:4c:5a:73:ac:5f:
1c:b6:de:73:2e:35:80:f9:a3:93:f3:f5:43:c0:d1:
e3:4d:99:91:f1:d8:19:d3:be:05:3b:ab:4b:c4:61:
a8:eb:ec:ce:47:c1:32:ac:bc:38:af:be:5d:f4:56:
2d:91:83:91:74:35:97:20:76:00:80:c5:64:c6:44:
c6:4e:d3:ee:f3:4a:c3:ca:e6:54:8b:8e:e5:8b:00:
01:ee:c9:f2:f6:36:aa:6f:08:52:ee:6f:20:99:d4:
83:10:b7:db:01:16:2b:bd:b2:f2:39:11:ab:b1:bf:
f0:bd:eb:d9:90:e5:4e:28:91:07:69:08:7a:f6:97:
f4:32:05:ea:bb:45:1d:f8:35:ce:8a:92:47:b1:92:
12:67:fe:6d:4e:ac:2e:77:50:8c:04:73:79:d4:07:
8a:98:26:9d:9f:55:36:05:d8:ad:41:c8:53:c6:48:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:61:29:3B:26:CC:F5:47:79:12:0B:54:67:45:08:0F:50:7D:21:2E
X509v3 Authority Key Identifier:
keyid:F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/CFED56A4240411F0B73CB374C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.34.212.0/24
Signature Algorithm: sha256WithRSAEncryption
13:73:47:a9:b1:c7:74:51:b0:30:eb:0a:e9:30:1e:e6:c9:b4:
86:c4:1d:83:fb:c5:8b:5a:63:46:5e:39:a4:7e:f6:c3:16:ed:
65:b9:9a:cb:9b:12:33:ec:c5:f9:b7:15:db:2e:04:f7:9b:74:
90:ec:23:d7:ba:76:b3:0a:b4:05:11:60:85:f0:1e:37:6f:d3:
62:3c:87:e0:42:09:c8:85:c7:9d:df:52:ee:c3:0f:6b:25:64:
92:fb:5c:fe:31:81:bf:bb:34:9e:4b:b8:fd:ec:22:d1:6e:cf:
ea:fe:bc:99:4d:5f:f0:65:40:3c:d1:ba:78:50:be:a0:84:a9:
d1:90:7c:21:4b:ca:5e:4b:71:6e:9c:4b:4a:4c:d1:a3:d1:28:
15:51:f6:86:b2:a8:94:99:bf:94:96:d1:0a:b2:6d:af:65:47:
e3:e7:d0:af:ed:31:96:53:1d:f6:f4:ae:49:3f:d7:fb:64:90:
00:8e:0d:3d:58:f9:e8:ed:8b:23:b4:00:30:97:98:dd:3e:d1:
05:62:98:1a:e0:db:a9:b8:c4:3b:7b:5a:f4:8a:2f:45:cf:fa:
4c:ff:c2:42:d9:62:37:d7:5e:98:93:ee:63:30:ef:87:d9:5f:
fe:21:b3:84:40:ec:d6:ef:ea:0b:99:5d:37:1d:c3:8d:58:bd:
ce:7a:6f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:32 2026 by rpki-client