
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/A0E12EEC782011F0A1950D84C4F9AE02.roa
File: A0E12EEC782011F0A1950D84C4F9AE02.roa (raw, json)
Hash identifier: P//Kkv1Cdx4PiGkjmnz6vPX7R+COjaveRQQO4LjPR0k=
Subject key identifier: 63:BE:95:76:F9:13:4A:FA:FD:D7:0A:25:78:08:28:81:16:D1:52:38
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 3516
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/A0E12EEC782011F0A1950D84C4F9AE02.roa
Signing time: Wed 13 Aug 2025 08:36:38 +0000
ROA not before: Wed 13 Aug 2025 08:36:38 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 51765
IP address blocks: 122.8.44.0/22 maxlen: 22
122.8.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 15:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13590 (0x3516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Aug 13 08:36:38 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=689c4e96-baea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:8d:5d:d8:a0:4b:e0:79:83:83:c6:6e:dd:
28:76:cc:39:4e:37:5a:2c:d6:b1:1f:56:8d:38:c1:
da:44:38:27:46:c4:af:f8:2e:e5:61:ac:c6:13:6a:
22:95:99:dc:f8:96:68:e4:1a:77:d6:82:20:3d:83:
97:e5:67:14:1c:61:00:c1:70:44:41:f3:9e:34:3a:
77:09:1c:e6:03:ce:14:1f:ab:f3:cf:dd:64:b8:8f:
a6:26:70:0f:da:4e:f2:13:05:a5:3d:95:44:f6:e0:
1d:e9:1d:54:87:c0:0d:ee:03:98:95:9c:58:29:21:
94:62:c2:ef:6d:86:e0:1f:6a:5e:cc:94:fe:25:66:
d6:d7:91:18:b6:59:eb:8e:7f:d1:0d:50:81:f8:48:
a3:90:2e:cf:5d:3f:29:f0:b5:f3:0f:e4:78:b9:3c:
9d:bc:90:4d:8f:d0:68:cc:34:78:de:15:2c:e6:c6:
bc:ba:1e:a4:a4:90:03:35:05:d3:de:ae:a4:af:05:
58:ba:42:75:2f:b1:e9:3e:16:cc:68:df:c8:e2:97:
7e:d7:8a:5d:76:16:40:00:1a:c6:2e:a4:2a:2f:e9:
dd:7c:0b:dc:b7:03:b1:fb:21:82:28:2e:7c:6e:35:
e3:57:5e:04:60:d4:4d:c9:ed:98:1f:15:85:07:92:
42:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BE:95:76:F9:13:4A:FA:FD:D7:0A:25:78:08:28:81:16:D1:52:38
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/A0E12EEC782011F0A1950D84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.44.0/22
122.8.92.0/22
Signature Algorithm: sha256WithRSAEncryption
e2:b3:76:25:f1:a7:a8:70:70:52:f0:ec:2a:50:ce:cb:eb:a8:
1d:de:4d:ed:cf:b5:18:ce:f9:19:46:ae:28:d4:b7:65:6d:b4:
ef:6e:60:ff:fd:e5:67:67:70:22:e2:82:74:d7:ac:e0:5d:ad:
93:b2:3a:c3:4d:32:74:97:0a:e2:bc:45:81:f4:7b:57:4e:69:
f8:96:96:9b:ff:2c:21:86:bd:3d:54:a0:61:db:cc:4b:94:5d:
e2:05:17:4a:c6:32:91:c7:97:d4:c6:87:1f:aa:27:d3:ab:57:
61:2e:4b:6a:7f:54:50:a7:b4:28:42:6b:b0:d9:3c:37:72:a6:
82:ae:c4:8b:f8:9e:ae:39:0f:62:7d:dd:26:78:4e:1b:8a:1b:
2d:29:c6:46:72:5a:66:bb:ed:f4:d2:fe:6e:a8:12:b4:36:ba:
0d:9c:8b:3c:ba:b7:ae:f3:f1:ee:9a:f3:93:93:f1:04:20:42:
c6:99:64:f1:11:14:23:6c:ef:51:02:eb:7f:ef:33:b1:fa:60:
d2:0c:64:c7:5f:b0:6e:9a:4e:0e:bd:39:4c:59:42:64:3f:7f:
79:36:70:a3:2a:db:6d:89:4e:9d:40:fe:ce:76:fb:22:92:90:
71:d0:3d:5a:31:bd:a9:41:dc:4e:a5:00:1f:53:4c:ad:0f:44:
fc:5b:89:99
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICNRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1
MkZERjYzM0YwHhcNMjUwODEzMDgzNjM4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02ODljNGU5Ni1iYWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwo6NXdigS+B5g4PGbt0odsw5TjdaLNaxH1aNOMHaRDgnRsSv+C7lYazGE2oi
lZnc+JZo5Bp31oIgPYOX5WcUHGEAwXBEQfOeNDp3CRzmA84UH6vzz91kuI+mJnAP
2k7yEwWlPZVE9uAd6R1Uh8AN7gOYlZxYKSGUYsLvbYbgH2pezJT+JWbW15EYtlnr
jn/RDVCB+EijkC7PXT8p8LXzD+R4uTydvJBNj9BozDR43hUs5sa8uh6kpJADNQXT
3q6krwVYukJ1L7HpPhbMaN/I4pd+14pddhZAABrGLqQqL+ndfAvctwOx+yGCKC58
bjXjV14EYNRNye2YHxWFB5JC/QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGO+lXb5
E0r6/dcKJXgIKIEW0VI4MB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw
NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvQTBFMTJFRUM3
ODIwMTFGMEExOTUwRDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJ6CCwDBAJ6CFwwDQYJKoZIhvcNAQELBQADggEBAOKzdiXx
p6hwcFLw7CpQzsvrqB3eTe3PtRjO+RlGrijUt2VttO9uYP/95WdncCLignTXrOBd
rZOyOsNNMnSXCuK8RYH0e1dOafiWlpv/LCGGvT1UoGHbzEuUXeIFF0rGMpHHl9TG
hx+qJ9OrV2EuS2p/VFCntChCa7DZPDdypoKuxIv4nq45D2J93SZ4ThuKGy0pxkZy
Wma77fTS/m6oErQ2ug2cizy6t67z8e6a85OT8QQgQsaZZPERFCNs71EC63/vM7H6
YNIMZMdfsG6aTg69OUxZQmQ/f3k2cKMq222JTp1A/s52+yKSkHHQPVoxvalB3E6l
AB9TTK0PRPxbiZk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:14:18 2025 by rpki-client