
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/12483942E09911EAB8D3B833C4F9AE02.roa
File: 12483942E09911EAB8D3B833C4F9AE02.roa (raw, json)
Hash identifier: MZaVNf7iRFX1/H8g/r1VAgxVC7qDm+ZemPCzX1+//wM=
Subject key identifier: C0:CC:FD:6E:F1:AC:4D:2D:D0:44:8F:E5:06:A5:8B:4D:7A:2F:97:D4
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 317A
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/12483942E09911EAB8D3B833C4F9AE02.roa
Signing time: Sat 02 May 2026 16:18:32 +0000
ROA not before: Sat 02 May 2026 16:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 394984
IP address blocks: 180.87.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12666 (0x317a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: May 2 16:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f623d8-87f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:66:06:f7:80:5b:ab:a8:25:d8:6f:b7:aa:
d8:b3:e5:98:a9:7c:9b:2f:59:a0:03:54:29:cf:d2:
ab:9b:c3:3d:0f:12:49:51:d3:4a:8e:4d:a7:8f:39:
a7:d1:5a:c3:da:ec:75:ad:59:9b:3c:30:15:75:ac:
db:b0:db:3f:52:03:bd:ca:40:f5:69:e1:53:ea:b6:
f2:1f:aa:b7:2d:ff:56:a3:e9:3b:cf:6f:9c:09:96:
13:2f:f0:02:af:fd:80:6e:d6:aa:e5:ee:09:98:57:
51:74:f2:bb:85:c6:48:8f:f1:59:6c:56:04:90:12:
f4:77:9c:26:28:b8:f9:f1:51:55:5c:04:be:9b:e6:
17:8d:39:20:af:22:89:00:3c:a0:9d:43:77:af:db:
4e:9f:9f:af:7b:91:9a:40:9e:7d:b4:27:91:ab:11:
94:ac:e7:d1:0e:58:39:bd:d4:91:6b:f0:dd:a7:6c:
58:bc:c5:40:fb:65:20:1d:8e:13:5c:17:8f:9e:d5:
91:34:c8:25:6c:1b:07:e9:4a:fe:85:b7:e5:9a:2e:
4a:cc:49:d0:86:90:8b:07:95:5d:cd:32:9d:1d:39:
ac:bf:b9:42:f7:7a:16:0b:8c:e6:bc:74:25:97:97:
50:12:b9:8a:0c:5f:34:82:b2:a3:7a:46:58:9f:2f:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CC:FD:6E:F1:AC:4D:2D:D0:44:8F:E5:06:A5:8B:4D:7A:2F:97:D4
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/12483942E09911EAB8D3B833C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
180.87.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:40:14:04:e9:3f:cb:fe:88:4e:82:b9:f2:81:e2:bf:41:2a:
52:be:d8:a7:02:63:19:90:29:cb:31:03:4d:f4:2f:1b:2f:31:
fd:bc:fe:d6:04:14:8f:e8:e4:e9:c9:40:ed:e9:a3:1b:45:fe:
59:67:d7:ab:cc:43:7b:24:38:17:b5:2d:88:c3:c2:6f:9a:65:
e4:bf:9d:4b:a6:c6:c9:ee:99:eb:5f:f2:d6:cc:a8:54:ad:7f:
ff:ba:48:d6:ab:84:9d:b2:51:ee:e4:4f:b5:3c:b1:a6:42:6d:
9f:66:c8:21:55:82:9e:17:72:42:3a:00:3a:3c:09:b6:a1:41:
f8:51:cb:f6:bc:a6:c8:55:3b:c7:5b:44:c7:55:15:2e:8a:dc:
f5:3d:9f:a4:8b:54:f8:22:e9:63:0c:3c:cb:e5:12:77:38:71:
3a:d5:aa:20:30:cb:ec:7a:94:2e:e9:79:4f:82:fc:8f:a9:90:
28:9e:96:a6:bb:85:bf:b7:6f:ad:4b:6e:23:e1:0a:fd:7e:92:
27:f1:1d:9a:bb:6e:4d:a7:10:c1:7b:89:3f:4c:e8:74:0e:7c:
05:7c:c5:b8:49:40:75:42:49:b8:97:88:f5:ee:3c:1b:57:fb:
f0:b9:28:4a:13:cc:a8:5a:12:80:90:0d:82:e2:58:b2:3c:c8:
2e:88:44:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:20:23 2026 by rpki-client