
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/FFB68BF6067311F19CC2DF5A3C3D8C67.roa
File: FFB68BF6067311F19CC2DF5A3C3D8C67.roa (raw, json)
Hash identifier: k9kaJXO8PQNyQBahywqQxP62KA454/soqOWb5claBqg=
Subject key identifier: 18:0E:7A:FD:68:31:74:A4:1C:94:55:07:3C:49:5C:85:E1:EF:C5:AF
Certificate issuer: /CN=A9129738/serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
Certificate serial: 20
Authority key identifier: 66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/FFB68BF6067311F19CC2DF5A3C3D8C67.roa
Signing time: Tue 03 Mar 2026 09:45:45 +0000
ROA not before: Tue 03 Mar 2026 09:45:45 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136225
IP address blocks: 103.84.53.0/24 maxlen: 24
103.84.54.0/24 maxlen: 24
103.84.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl
rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129738, serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
Validity
Not Before: Mar 3 09:45:45 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a6adc8-381d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:22:a3:b5:47:b1:20:52:2a:41:05:ff:57:15:
e5:76:de:bb:5b:40:2d:9d:df:60:06:44:ca:4d:11:
dd:36:dc:3c:c7:ec:f8:62:e0:81:1c:11:76:7a:6f:
f9:e7:95:40:93:d8:97:81:1d:70:92:08:d7:08:38:
e7:fe:6e:17:07:d8:65:f8:07:2b:8b:fc:80:67:bc:
15:99:16:82:68:10:01:0f:39:e6:78:bf:32:8f:a5:
41:e2:67:a5:12:82:d0:73:4a:67:00:f2:97:20:36:
f6:42:08:b2:37:1b:23:ac:34:37:20:51:51:a2:86:
c3:0e:ef:08:19:6c:25:a2:1c:18:2a:e7:32:2f:47:
a6:72:75:6a:30:7a:6e:4f:c2:53:03:f9:a4:62:45:
aa:9b:75:24:01:60:bb:9d:cd:68:47:e0:c5:e2:eb:
84:00:b0:44:28:44:45:fe:ec:a0:29:d5:c6:c4:81:
89:21:39:e9:f6:9c:69:88:21:7d:86:6d:cf:c8:ae:
ad:98:97:9d:01:28:b8:96:8a:ff:1d:40:ff:99:4e:
da:03:5f:40:a4:aa:30:35:f9:ca:1d:bb:91:06:d9:
d7:34:ec:7d:e4:6e:77:d8:ff:56:94:e3:32:92:01:
20:cb:09:ca:ee:02:cc:ad:5b:76:ef:ee:de:ac:f6:
35:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0E:7A:FD:68:31:74:A4:1C:94:55:07:3C:49:5C:85:E1:EF:C5:AF
X509v3 Authority Key Identifier:
keyid:66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/FFB68BF6067311F19CC2DF5A3C3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.53.0-103.84.55.255
Signature Algorithm: sha256WithRSAEncryption
18:d2:06:8f:0a:78:b0:e4:76:9c:15:71:11:f7:8e:17:92:31:
81:52:0f:4f:ad:28:39:49:86:84:9a:65:a5:94:49:ba:54:02:
4a:6d:3c:6f:40:27:c2:52:52:97:9c:6f:28:43:e5:6b:ec:f6:
6f:a5:e5:80:6e:9c:fe:8a:49:2b:cc:24:89:b2:4c:92:6c:76:
08:11:36:ea:5c:5d:e4:d4:08:75:ed:49:6b:d4:aa:75:31:c7:
a2:cd:49:b3:8b:29:2b:50:40:bc:0b:2c:df:5f:c2:48:37:58:
76:ee:28:95:bb:63:7a:38:12:bd:15:b7:9d:7f:44:a3:51:d0:
27:1c:33:81:85:cf:58:9f:7c:d4:37:69:29:a3:d7:4e:6a:00:
be:6b:1f:f9:f3:6f:2b:52:37:41:6d:46:42:50:43:0f:ba:39:
ec:aa:70:a6:4e:15:2a:c7:ad:99:61:72:d3:f4:cc:f9:7c:a6:
63:c2:ce:23:03:86:ae:9a:8b:53:ab:52:e1:dd:77:f1:46:09:
92:53:6d:58:4a:3e:53:2f:3b:a5:a3:62:65:49:2a:ec:3e:73:
4c:16:d6:01:3a:21:2e:ad:eb:c2:cf:62:a4:75:97:24:e6:0e:
05:aa:ad:f5:1b:4d:85:7b:a8:91:b9:19:b0:5b:ff:d9:b1:a0:
0b:c9:2b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:15 2026 by rpki-client