
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa
File: FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa (raw, json)
Hash identifier: AtB+m+Ix4i9/4knFjx2LUSCHiLi611chdYqeYI68ghI=
Subject key identifier: 0C:84:EA:9C:1C:1C:CA:C2:1C:38:0A:1B:C8:C4:CA:FE:30:BA:EE:F0
Certificate issuer: /CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F
Certificate serial: 01EF
Authority key identifier: 6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa
Signing time: Thu 03 Sep 2026 03:53:29 +0000
ROA not before: Thu 03 Sep 2026 03:53:29 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 135432
IP address blocks: 103.133.128.0/24 maxlen: 24
103.133.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl
rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 03:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915290D, serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F
Validity
Not Before: Sep 3 03:53:29 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a98ef39-1f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:9a:73:82:87:40:9e:f3:a4:9c:83:a0:80:
8a:90:37:cf:80:e7:64:9a:29:b2:c3:fe:bf:03:91:
51:99:5f:a5:e5:b2:f2:4c:9f:0d:23:eb:e6:8e:b7:
77:a4:a5:83:c5:2f:9c:00:01:58:d5:21:2e:d2:2b:
a8:c9:98:70:cc:15:89:e9:41:fa:0b:89:d0:18:2e:
5a:01:c1:1e:8a:33:f8:82:62:04:17:59:de:3d:84:
97:7b:97:af:f4:f0:ff:9d:68:67:26:ac:26:97:31:
61:70:c8:33:94:3d:03:45:8c:b5:70:39:d2:a6:e0:
3f:cb:b8:68:42:8b:28:02:96:02:2d:64:85:af:07:
2b:0c:ad:17:25:ba:26:f8:2a:d6:55:ad:ba:a1:a7:
65:ab:a4:c9:91:00:bd:7b:2a:5d:23:e9:5d:e9:6a:
15:71:9a:d0:b1:be:89:ba:12:fa:87:5a:ec:e0:5f:
e0:9b:78:fc:d8:69:4e:2d:05:36:b8:b4:3f:58:cb:
09:d4:7a:69:d4:b3:21:8f:88:ac:cb:24:54:82:eb:
73:2b:81:3c:cf:2d:bb:ed:c8:5c:eb:62:23:77:e6:
7f:8a:dc:39:70:08:6b:9e:04:3c:f0:d9:5a:3a:a0:
68:de:e5:a9:78:74:99:1a:d8:fb:34:ce:32:b5:78:
68:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:84:EA:9C:1C:1C:CA:C2:1C:38:0A:1B:C8:C4:CA:FE:30:BA:EE:F0
X509v3 Authority Key Identifier:
keyid:6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.128.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:e7:a2:94:c3:87:c1:00:f0:a5:49:19:c3:5a:e9:a9:00:a0:
9b:83:37:fc:6b:da:22:4d:0f:4a:ba:36:dd:18:3f:bb:1e:13:
d7:75:33:0e:24:9a:e5:28:7b:98:8f:cb:68:3a:89:18:07:5a:
8a:df:1a:09:be:98:1d:6d:95:34:f4:01:66:d1:a0:28:1a:ed:
24:94:88:84:02:0d:5f:7f:23:55:2f:84:9c:cf:e7:92:7c:28:
66:78:09:d1:4f:8d:e9:58:b8:b8:bb:2c:dd:ba:b5:e2:4b:c6:
bb:68:70:96:3c:f5:b5:38:f2:0c:9d:1c:c4:dd:9d:a0:21:de:
8e:fe:3b:bd:18:67:27:da:6b:2c:0f:af:20:0d:42:40:a5:a7:
19:f8:70:e6:9b:1d:89:37:06:dc:1b:5a:e3:6c:2e:0f:9b:84:
3a:40:ba:d1:ae:10:1e:c6:c5:75:00:b6:13:fd:d0:4c:b8:25:
5a:f7:2b:dc:6f:5d:02:b8:91:bb:58:36:36:f8:3b:2e:2f:61:
06:9c:8a:d1:4b:1c:e2:66:d7:b1:a4:3c:2b:15:fa:17:a0:a1:
00:35:b1:7f:e4:36:ea:78:57:91:48:45:5e:89:68:4c:61:cf:
5a:c4:dd:74:ee:c6:6f:45:94:60:37:a4:db:71:36:30:f7:35:
08:c1:22:c4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTI5MEQxMTAvBgNVBAUTKDZBQkE4NkQzMDRBQUY2NEVCNEEwOTdCMjlCQTU1Nzc4
NjBDQzg1NkYwHhcNMjYwOTAzMDM1MzI5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4ZWYzOS0xZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyP+ac4KHQJ7zpJyDoICKkDfPgOdkmimyw/6/A5FRmV+l5bLyTJ8NI+vmjrd3
pKWDxS+cAAFY1SEu0iuoyZhwzBWJ6UH6C4nQGC5aAcEeijP4gmIEF1nePYSXe5ev
9PD/nWhnJqwmlzFhcMgzlD0DRYy1cDnSpuA/y7hoQosoApYCLWSFrwcrDK0XJbom
+CrWVa26oadlq6TJkQC9eypdI+ld6WoVcZrQsb6JuhL6h1rs4F/gm3j82GlOLQU2
uLQ/WMsJ1Hpp1LMhj4isyyRUgutzK4E8zy277chc62Ijd+Z/itw5cAhrngQ88Nla
OqBo3uWpeHSZGtj7NM4ytXhoXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAyE6pwc
HMrCHDgKG8jEyv4wuu7wMB8GA1UdIwQYMBaAFGq6htMEqvZOtKCXspulV3hgzIVv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjkwRC9BNjg0OUFDOEQw
MjkxMUVFOUU2Q0JBNDBDNEY5QUUwMi9hcnFHMHdTcTlrNjBvSmV5bTZWWGVHRE1o
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FycUcwd1NxOWs2MG9KZXltNlZYZUdETWhXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTI5MEQvQTY4NDlBQzhEMDI5MTFFRTlFNkNCQTQwQzRGOUFFMDIvRkZCNkUwOEFG
NkExMTFFRUJDMEVGNjJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4WAMA0GCSqGSIb3DQEBCwUAA4IBAQCi56KUw4fBAPClSRnDWump
AKCbgzf8a9oiTQ9KujbdGD+7HhPXdTMOJJrlKHuYj8toOokYB1qK3xoJvpgdbZU0
9AFm0aAoGu0klIiEAg1ffyNVL4Scz+eSfChmeAnRT43pWLi4uyzdurXiS8a7aHCW
PPW1OPIMnRzE3Z2gId6O/ju9GGcn2mssD68gDUJApacZ+HDmmx2JNwbcG1rjbC4P
m4Q6QLrRrhAexsV1ALYT/dBMuCVa9yvcb10CuJG7WDY2+DsuL2EGnIrRSxziZtex
pDwrFfoXoKEANbF/5DbqeFeRSEVeiWhMYc9axN107sZvRZRgN6TbcTYw9zUIwSLE
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:45:09 2026 by rpki-client