
$ rpki-client -vvf rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa
File: FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa (raw, json)
Hash identifier: Dy1nuBVOv5zlPF1NmK8r+tPhGrR42+dXOgfOIxmTV1A=
Subject key identifier: 8F:6D:72:76:54:EB:8E:CD:26:52:69:B8:DA:DF:8C:5F:C7:10:4F:7C
Certificate issuer: /CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F
Certificate serial: 018E
Authority key identifier: 6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:52:30 +0000
ROA not before: Thu 11 Sep 2025 05:12:53 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 135432
IP address blocks: 103.133.128.0/24 maxlen: 24
103.133.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl
rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:45:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915290D, serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F
Validity
Not Before: Sep 11 05:12:53 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a5961e-8270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:7d:6d:3b:28:1d:81:e5:1e:b4:b7:1b:b6:
d5:16:45:5f:c2:6f:3c:15:d2:f4:eb:68:f6:c4:72:
6e:7a:48:ed:54:72:92:68:a7:94:87:a1:5b:7b:b4:
c2:33:0c:6f:77:72:47:d1:7d:41:0f:1f:d9:5b:e6:
77:b3:6a:51:23:35:d2:9b:5e:6f:2e:ed:09:14:46:
aa:e6:27:86:e0:63:1a:c6:61:0f:c6:ee:33:12:e5:
73:cc:83:99:fa:d1:df:37:27:fa:44:79:28:c1:57:
43:1a:ed:d2:6d:25:85:5c:e5:0a:fd:17:c7:1f:29:
e9:99:ca:0b:a0:3e:4b:95:be:97:36:14:0b:31:d2:
ca:50:a2:56:fa:b0:6a:23:cd:cb:fb:5d:cc:f9:cc:
95:69:6e:df:8a:b8:0a:23:24:73:54:aa:1b:58:67:
75:15:ec:b8:ae:ca:34:4f:2e:45:4f:39:4f:ff:6c:
bf:4b:43:ce:3a:8c:f6:b6:ae:3e:5b:40:41:08:ab:
15:5d:63:6c:88:72:e5:5b:a6:41:15:a6:13:68:b5:
3e:99:cc:b4:0e:02:45:96:77:4c:f9:d0:24:35:26:
1d:48:db:6b:f5:52:09:af:47:7f:da:a5:a3:00:6d:
e7:1e:5c:0b:77:3c:1d:50:6c:d9:e3:7d:50:2b:e4:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6D:72:76:54:EB:8E:CD:26:52:69:B8:DA:DF:8C:5F:C7:10:4F:7C
X509v3 Authority Key Identifier:
keyid:6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.128.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:e3:52:3e:66:41:3a:2b:5f:1c:3f:46:53:6c:6a:d9:53:9d:
0c:0c:ee:80:21:85:a3:a7:90:50:34:c6:e5:ec:0b:7a:1f:db:
31:08:39:88:d8:74:54:b2:b6:12:eb:fd:d8:90:e3:ca:3a:23:
a0:0c:49:d4:c6:b8:76:a5:9c:86:06:21:89:28:65:d8:d6:48:
45:70:4f:bd:f7:9f:fe:a1:1e:9b:84:95:d9:85:24:22:1a:da:
71:e9:48:f3:a9:dc:23:30:4e:6d:f7:f8:2c:c0:56:2a:9e:05:
23:4b:a9:85:84:f8:f4:b0:3a:d5:ff:b9:da:f0:15:49:15:a1:
9b:e6:9d:43:0d:40:c8:43:00:61:c9:26:ac:e7:cf:f0:3c:2f:
54:8b:66:21:57:78:ec:04:13:1a:31:bd:06:1a:1d:6b:99:0e:
1a:ba:e8:c5:ff:f6:80:2c:7c:36:3c:35:24:9d:76:c2:96:91:
6a:c8:06:f0:b1:93:2e:d8:bd:6d:e1:e7:fc:1a:b6:f5:9a:d3:
4b:53:79:fb:34:1c:83:db:a4:4c:c3:70:5b:7e:6b:8a:7a:4f:
ca:31:f1:22:75:b9:a4:04:6f:e4:d0:2f:f7:d0:86:18:ba:07:
ac:0e:ba:42:11:f5:35:c3:82:57:36:45:9f:80:5e:e8:86:f2:
6d:87:2f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:37 2026 by rpki-client