
$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/F70F5E7A505E11ED9947920DC4F9AE02.roa
File: F70F5E7A505E11ED9947920DC4F9AE02.roa (raw, json)
Hash identifier: o3juqhlkzvoSTkKnkj2B9rqpg4vlEounEHggkPD3cB4=
Subject key identifier: 55:AC:F5:E7:FD:03:15:E6:07:FA:6E:35:50:3F:9F:23:DA:06:12:5F
Certificate issuer: /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Certificate serial: 09DE
Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/F70F5E7A505E11ED9947920DC4F9AE02.roa
Signing time: Wed 22 Apr 2026 17:22:58 +0000
ROA not before: Wed 22 Apr 2026 17:22:58 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 132298
IP address blocks: 103.135.252.0/24 maxlen: 24
103.135.253.0/24 maxlen: 24
103.135.254.0/24 maxlen: 24
103.135.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2526 (0x9de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912611F, serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Validity
Not Before: Apr 22 17:22:58 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69e903f2-bf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:58:aa:d4:56:cd:21:1d:81:6a:e6:d5:1e:
7f:c2:82:8d:8e:f6:3f:20:e8:e9:58:13:64:44:68:
3f:e1:fc:b9:80:8a:4a:4b:19:d9:24:f6:5c:f5:9c:
29:ec:48:d3:88:53:12:04:87:97:60:e8:00:9f:49:
2c:c1:76:b0:fa:ed:1a:dc:c8:21:32:ee:0b:65:1e:
e9:e6:31:03:6d:26:66:6f:74:28:45:e7:a4:bb:75:
7b:42:31:31:25:a5:f6:62:12:e7:dc:8b:53:22:5b:
2c:d6:b7:6b:e3:4c:b0:ef:b0:ee:95:f0:a6:cd:a8:
32:72:b3:e5:41:b4:d6:c0:e8:18:78:27:56:db:93:
ff:44:2d:61:32:77:f3:2b:f6:a6:da:42:26:7f:77:
04:ce:ab:40:01:18:c8:9a:16:e5:ea:93:14:a2:7b:
31:aa:1d:ee:9f:c8:fc:f9:d1:75:fb:5c:8a:1a:93:
a0:e2:0d:b5:ec:e9:da:34:ae:23:63:dc:56:2c:7f:
fc:24:9c:63:d3:f9:0e:ef:7e:22:55:39:9c:5c:ac:
49:ce:7f:12:ce:10:ec:b4:14:56:6b:a4:6d:f8:ca:
73:d4:b8:63:4f:41:77:11:e5:fa:7d:1e:cf:3a:05:
15:73:20:50:c2:11:46:11:c6:03:40:1a:3d:b1:49:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AC:F5:E7:FD:03:15:E6:07:FA:6E:35:50:3F:9F:23:DA:06:12:5F
X509v3 Authority Key Identifier:
keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/F70F5E7A505E11ED9947920DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:e9:1f:c3:ed:1a:ca:21:69:4a:b5:43:61:21:81:bf:09:dd:
20:c3:03:e6:f3:0d:8d:4e:9b:ac:53:0c:bf:ad:87:9e:ac:6d:
1f:43:8e:d4:e4:48:4e:86:2e:24:9d:a2:62:df:48:93:4b:62:
27:09:25:ce:0c:26:33:bc:b4:91:fa:db:91:f4:e9:54:52:69:
f8:77:ed:73:ac:ac:fb:55:99:55:5c:7f:10:f9:19:9b:ec:96:
c2:64:bd:4e:fb:b6:cc:2a:86:5d:aa:1f:ea:fb:a6:44:e2:6e:
01:87:55:8c:cb:d1:ce:f6:d3:a1:f1:00:07:0e:f8:9c:f1:2f:
61:d6:48:0d:0e:b4:c4:ff:fc:39:09:29:f1:83:fa:e9:a1:f9:
4c:32:46:5a:db:df:2e:89:2c:fc:5a:00:b5:fe:61:3b:65:61:
a9:ed:df:88:14:29:4e:5c:4d:50:fd:a8:a4:ed:e5:7c:38:1a:
da:a2:80:7d:c4:6e:d8:b3:f1:28:d0:be:39:f6:51:61:98:44:
11:c4:0e:ff:84:53:4f:8f:05:2c:d6:c1:e5:8c:69:7d:fa:13:
ce:90:90:41:e0:26:6a:56:77:64:b6:dd:c8:49:6b:f2:08:4f:
b4:fd:58:d2:06:ee:53:5b:f9:e0:7b:9e:79:e4:94:b5:da:b8:
72:68:53:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:19:21 2026 by rpki-client