
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/12C0FA5EA8E811EB8801993BC4F9AE02.roa
File: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (raw, json)
Hash identifier: iEFgU1Qm/Iuc4U4Fc9T/1IELrhOtOZtYVcokYZc+zT8=
Subject key identifier: 1F:98:A6:6C:08:F2:35:B4:62:59:3E:95:37:7C:A5:83:00:81:04:97
Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial: 353A
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/12C0FA5EA8E811EB8801993BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:11:03 +0000
ROA not before: Wed 02 Apr 2025 14:41:00 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9534
IP address blocks: 43.251.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13626 (0x353a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Validity
Not Before: Apr 2 14:41:00 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a42cd7-9429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:d1:d8:ea:ca:97:ab:30:ba:46:72:9b:ea:
ff:b0:46:82:4c:e7:bf:95:05:ef:ab:9f:4c:dd:c7:
3b:e1:ee:27:29:60:f4:6f:3a:4e:62:b2:57:bd:d0:
4c:a6:f8:a6:13:5d:e1:47:f3:61:63:b0:c7:75:47:
92:de:6a:31:e1:55:aa:31:cf:d3:c0:8c:14:fa:d9:
ab:af:3d:51:79:7b:4c:a8:8e:75:84:0f:4e:b6:59:
b5:81:ce:70:5e:1e:50:a1:8b:78:8d:8a:4b:27:eb:
35:c1:da:c7:fe:5f:64:9f:a5:7c:fc:22:2a:17:b4:
35:43:a7:e8:03:4b:71:a0:59:e7:fc:f1:6b:1b:6e:
2c:a6:fa:6a:7e:8d:1a:63:b5:1f:51:e3:2c:d7:b1:
1b:21:40:85:59:6f:cb:12:e9:cc:3d:cb:42:44:77:
4e:97:c2:d6:fa:f6:3b:40:03:6d:45:41:e5:9d:ef:
e0:29:07:34:c0:12:cb:4a:0e:5d:b7:c1:e5:79:7b:
1d:3d:cb:70:35:4d:7a:5d:ac:24:81:82:5a:c3:77:
51:82:ae:dc:d8:2a:5a:ab:0e:f0:88:d3:cd:2b:36:
7c:01:de:cc:52:f0:51:70:07:ce:35:fa:58:8d:b7:
1d:0e:8b:1c:b4:cc:a0:44:69:b8:d1:ac:c3:54:f0:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:98:A6:6C:08:F2:35:B4:62:59:3E:95:37:7C:A5:83:00:81:04:97
X509v3 Authority Key Identifier:
keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/12C0FA5EA8E811EB8801993BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.251.138.0/24
Signature Algorithm: sha256WithRSAEncryption
97:6a:b4:51:3f:44:45:c4:61:45:e6:00:79:d5:92:c9:ec:2a:
82:b9:56:19:21:f7:24:38:75:ed:c4:e9:96:76:fa:05:93:ae:
b6:8b:c8:18:78:da:78:e8:ed:5e:87:4f:14:07:26:d2:08:bf:
b4:1d:33:71:dc:2a:86:49:03:b2:44:47:1f:3b:8a:ce:f2:6c:
bc:44:45:52:c8:bb:6c:bb:8f:0b:44:02:47:dc:df:a4:8b:06:
8d:c8:04:9d:3e:65:6e:eb:b9:7f:c5:01:a4:78:53:b3:7f:a7:
10:b8:50:b0:8f:7a:de:3b:7b:b2:70:27:96:fb:9b:f8:9e:49:
ee:dc:98:8f:0c:8e:36:2c:a7:81:7a:03:9e:bb:2a:b7:67:5c:
c1:ff:4e:16:5a:ee:3f:df:b6:47:7b:fe:5f:5f:8a:96:5c:16:
87:a9:d8:c7:ed:6e:7d:fd:d4:6b:9f:87:1c:c7:d2:31:2a:e9:
59:cf:3b:cc:1c:f9:d9:84:fd:d8:6d:1a:a0:2d:7e:cb:3f:45:
33:9e:51:9f:4e:85:ea:47:31:07:60:1c:06:d8:0f:e0:d6:a6:
1e:da:50:61:52:a3:cc:96:40:e6:c7:21:7c:8f:82:f1:9f:90:
ac:d0:6d:55:27:30:12:25:ae:07:c7:2d:54:dc:ee:09:3f:1b:
3f:8d:b4:c1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2
NTU4QjlEODkwHhcNMjUwNDAyMTQ0MTAwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmNkNy05NDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxQTR2OrKl6swukZym+r/sEaCTOe/lQXvq59M3cc74e4nKWD0bzpOYrJXvdBM
pvimE13hR/NhY7DHdUeS3mox4VWqMc/TwIwU+tmrrz1ReXtMqI51hA9Otlm1gc5w
Xh5QoYt4jYpLJ+s1wdrH/l9kn6V8/CIqF7Q1Q6foA0txoFnn/PFrG24spvpqfo0a
Y7UfUeMs17EbIUCFWW/LEunMPctCRHdOl8LW+vY7QANtRUHlne/gKQc0wBLLSg5d
t8HleXsdPctwNU16XawkgYJaw3dRgq7c2Cpaqw7wiNPNKzZ8Ad7MUvBRcAfONfpY
jbcdDosctMygRGm40azDVPAvvwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB+YpmwI
8jW0Ylk+lTd8pYMAgQSXMB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE
OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu
WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTZFNkMvNDI2RTNEQkExRDhEMTFFMjkzQzREQUVBMDhCMDJDRDIvMTJDMEZBNUVB
OEU4MTFFQjg4MDE5OTNCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAK/uKMA0GCSqGSIb3DQEBCwUAA4IBAQCXarRRP0RFxGFF5gB51ZLJ
7CqCuVYZIfckOHXtxOmWdvoFk662i8gYeNp46O1eh08UBybSCL+0HTNx3CqGSQOy
REcfO4rO8my8REVSyLtsu48LRAJH3N+kiwaNyASdPmVu67l/xQGkeFOzf6cQuFCw
j3reO3uycCeW+5v4nknu3JiPDI42LKeBegOeuyq3Z1zB/04WWu4/37ZHe/5fX4qW
XBaHqdjH7W59/dRrn4ccx9IxKulZzzvMHPnZhP3YbRqgLX7LP0UznlGfToXqRzEH
YBwG2A/g1qYe2lBhUqPMlkDmxyF8j4Lxn5Cs0G1VJzASJa4Hxy1U3O4JPxs/jbTB
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:22 2026 by rpki-client