
$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/FBFF89FC3AC611EEB790D485C4F9AE02.roa
File: FBFF89FC3AC611EEB790D485C4F9AE02.roa (raw, json)
Hash identifier: 6+5b1CfcZTuiHBvdAxqJb6CWPbZsPji1n33pmOP0SN8=
Subject key identifier: D6:D5:1B:13:7E:EC:73:7C:8F:79:43:1D:BB:53:7A:66:9A:6F:19:15
Certificate issuer: /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Certificate serial: 0C81
Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/FBFF89FC3AC611EEB790D485C4F9AE02.roa
Signing time: Mon 02 Mar 2026 19:22:35 +0000
ROA not before: Mon 02 Mar 2026 19:22:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132038
IP address blocks: 103.42.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3201 (0xc81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Validity
Not Before: Mar 2 19:22:34 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5e37a-742e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:5e:d4:39:93:dd:25:b3:68:0c:71:e5:fc:
c4:82:6c:e6:22:17:8f:80:72:f7:50:6a:e1:ce:73:
32:be:1d:69:12:54:bb:22:08:3a:13:4b:db:65:4d:
7b:1d:b7:12:b2:f3:fc:c0:a6:af:dd:69:6b:33:ba:
f1:c7:96:e4:5a:7e:b5:4f:26:e2:70:6a:e8:44:6b:
b8:2f:70:20:d6:95:2f:fe:de:a0:aa:00:65:33:dd:
1f:53:3f:0c:5b:19:ca:50:bc:8f:5f:d2:d1:93:69:
21:e8:13:7c:e0:9a:38:a5:0a:ff:f4:86:1b:e9:55:
ed:c5:e9:64:38:1a:03:61:40:d7:55:3a:c2:dc:19:
be:97:da:98:26:aa:0c:c2:05:d3:1f:3e:a2:51:94:
32:81:a2:46:00:b7:a2:d9:34:f6:ae:85:42:a9:05:
ca:9f:74:ee:da:10:a7:68:d1:88:8f:c5:e1:62:b6:
ed:e6:18:a8:30:bb:aa:4a:93:a6:f8:3e:93:27:39:
bf:09:07:43:bb:20:ac:31:51:48:be:9e:58:cd:e3:
82:23:f3:57:0c:18:08:37:77:ed:d4:11:3e:62:83:
9b:ad:55:48:7c:91:f2:a1:e0:7d:d3:b7:30:94:2c:
08:3e:cf:e6:5f:8c:a5:db:28:49:27:a5:6d:fa:11:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D5:1B:13:7E:EC:73:7C:8F:79:43:1D:BB:53:7A:66:9A:6F:19:15
X509v3 Authority Key Identifier:
keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/FBFF89FC3AC611EEB790D485C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.42.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:8b:2e:a9:69:b4:37:d4:bd:90:92:6b:36:39:20:d9:62:04:
9d:ae:f4:d9:5f:70:f9:12:b3:0e:b4:08:3f:15:90:b4:1c:44:
59:8b:6f:3c:9b:f3:ed:dd:48:35:f5:56:f6:8b:2e:34:66:3c:
89:f2:38:f7:ea:3a:e2:93:23:95:ca:49:47:62:ce:8c:59:4d:
5c:fe:b1:09:b3:0f:2d:e5:a7:a3:67:76:48:a4:33:9a:1d:7e:
38:03:44:d5:60:57:ca:f9:87:f5:00:a2:fd:2a:51:8b:c2:c9:
35:41:49:13:eb:92:8d:21:c4:ba:50:da:a7:7d:c3:e1:a6:06:
02:8d:67:76:bc:51:dc:b8:c8:b7:49:09:38:25:9b:a7:67:e0:
cf:72:ad:6f:5a:a9:50:60:60:a2:80:e1:05:cc:19:f0:a2:d9:
09:8d:d5:d0:04:c3:0f:d6:d8:bc:91:a0:1a:e4:28:13:33:48:
06:dc:36:48:99:9c:b7:b0:9c:75:ff:d6:3b:8f:6f:ea:de:ac:
3e:8b:7c:30:09:d5:c6:5e:3f:68:52:72:da:bd:1d:6a:6f:be:
97:9f:1a:cf:e0:81:9e:7c:1f:e8:93:f8:ae:3b:6c:bf:40:9a:
fe:ea:67:30:d0:77:4c:ce:2e:05:8b:6f:de:3c:24:a2:a2:ee:
27:33:27:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:28:23 2026 by rpki-client