
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/FBFF89FC3AC611EEB790D485C4F9AE02.roa
File: FBFF89FC3AC611EEB790D485C4F9AE02.roa (raw, json)
Hash identifier: T3MJXs/ZtQniwR9QjRHP8UIXyIKxMfvi1d+U/3Dj980=
Subject key identifier: E1:35:99:ED:9C:61:AD:D6:4D:21:78:EE:16:30:C5:AE:7E:23:47:EE
Certificate issuer: /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Certificate serial: 0CE7
Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/FBFF89FC3AC611EEB790D485C4F9AE02.roa
Signing time: Mon 31 Aug 2026 18:36:30 +0000
ROA not before: Mon 31 Aug 2026 18:36:30 +0000
ROA not after: Fri 01 Jan 2027 00:00:00 +0000
asID: 132038
IP address blocks: 103.42.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3303 (0xce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Validity
Not Before: Aug 31 18:36:30 2026 GMT
Not After : Jan 1 00:00:00 2027 GMT
Subject: CN=6a95c9ae-c035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f9:71:03:06:b7:43:2f:68:7c:e5:c3:fa:1b:
e1:b6:ef:a4:7c:2c:d6:a8:a6:4a:f4:da:b4:be:5b:
a1:91:86:9a:0f:16:fb:7b:d2:45:15:8f:30:4a:5e:
4a:4a:7a:f8:f3:97:56:14:92:cf:97:b7:71:57:20:
a3:c6:a7:9c:5b:69:fd:ed:1c:a4:f0:f4:3c:59:26:
f2:d5:f7:a8:c3:82:2b:48:2a:66:61:0a:d2:f6:ce:
97:6b:98:d1:27:a8:27:a7:98:65:61:45:0c:db:36:
b2:37:6c:2e:89:1c:b7:23:70:74:ab:69:f1:c8:4e:
40:0c:d9:fb:93:8c:d9:60:f0:58:07:6a:bb:5d:a8:
3b:94:1d:97:10:68:e3:31:4f:f4:69:2c:57:e4:52:
5f:74:1b:5d:bb:88:93:5f:55:cb:8d:7a:a2:58:1c:
63:5a:d8:1d:02:25:24:99:8c:b4:ea:58:da:9d:20:
6d:d8:39:2e:d9:bd:5d:52:42:ae:a2:9c:2c:1d:93:
7e:ad:30:c8:c1:68:43:24:f4:e8:56:33:21:d6:96:
6c:ea:39:07:7f:a1:6a:6c:d8:44:9b:6b:fe:1c:76:
a0:f4:92:08:a6:03:af:45:1f:fd:a7:09:56:4e:43:
d8:17:c9:46:1b:f6:85:10:a9:14:be:c4:5c:dc:b1:
79:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:35:99:ED:9C:61:AD:D6:4D:21:78:EE:16:30:C5:AE:7E:23:47:EE
X509v3 Authority Key Identifier:
keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/FBFF89FC3AC611EEB790D485C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.42.115.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:e6:a4:da:6f:27:26:43:ca:f3:c7:57:a5:96:5e:eb:d5:dd:
ef:b1:03:d0:4a:9d:7b:ab:bc:e7:34:86:d9:68:64:1e:63:0d:
74:f5:21:2a:92:bc:c5:78:77:11:c7:fb:40:94:23:dc:d6:71:
5b:57:33:fe:bd:5a:85:16:7f:6a:ae:dc:8b:f3:37:69:c4:21:
a0:0b:dc:90:e2:d1:f1:42:90:a3:fd:7c:a4:6a:db:94:30:70:
7d:41:16:45:03:98:6b:df:57:95:d0:12:93:20:5b:f5:4f:74:
c9:3c:d6:31:18:d7:74:ea:73:e0:8a:09:71:37:13:be:69:41:
a0:bc:37:66:01:66:7a:c6:f7:a9:42:24:cc:ca:d1:e1:cc:f7:
b1:51:02:2c:a6:16:03:22:26:bb:20:dd:4e:3c:a8:dc:b0:bf:
7d:e3:94:f8:93:34:a0:33:85:76:50:45:08:65:4b:9a:68:89:
b8:b2:39:71:48:91:21:e4:84:ab:a2:cc:72:ef:30:46:df:49:
79:1b:63:56:7f:d8:a5:47:17:7e:40:7d:58:61:8f:87:56:ce:
60:5a:d6:c3:67:2b:66:6e:1a:cb:97:ae:2d:b4:af:d6:f1:01:
6b:f5:80:45:f9:aa:82:0f:88:80:e8:e9:4b:9b:26:62:e1:21:
4f:2e:ff:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:11:43 2026 by rpki-client