
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/F6B0145ACD2011F0B3EB5B69C4F9AE02.roa
File: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (raw, json)
Hash identifier: /IS4YM9w5ydj5jQwxn3DGGKdeny8JyV0qrmFMYEg2lc=
Subject key identifier: 01:67:90:23:55:80:B0:19:64:4B:9E:BD:0A:93:BA:6D:2B:28:DE:B6
Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Certificate serial: 0FAC
Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/F6B0145ACD2011F0B3EB5B69C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:57:34 +0000
ROA not before: Sat 29 Nov 2025 12:43:11 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138358
IP address blocks: 103.138.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl
rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4012 (0xfac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1
Validity
Not Before: Nov 29 12:43:11 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a461ee-3afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:7a:95:e9:08:3c:97:7b:47:c4:84:4e:2b:
c9:08:df:a1:18:8d:6a:7c:4e:18:fa:3d:59:89:53:
a9:d5:43:8a:59:44:ea:70:aa:79:65:24:b1:77:7a:
61:87:ee:e3:05:0a:3a:78:cf:5d:31:45:a6:66:1f:
aa:a7:34:c6:7a:94:5d:8b:1c:46:dc:26:40:f1:05:
f9:5b:8f:45:a2:12:03:77:9a:4a:1b:c9:1c:f2:21:
f3:e8:1e:26:36:f4:6d:99:e8:d5:a7:48:a8:07:34:
d0:ca:db:ef:c6:d5:ab:04:e4:72:9b:db:27:45:34:
00:01:38:da:12:97:85:0d:f8:24:b2:3b:65:06:72:
1a:37:fe:76:74:ea:f0:d5:11:96:80:61:0c:21:b6:
ad:19:d4:cc:b4:d0:9a:69:23:c8:30:c0:6f:9b:fd:
20:f4:c9:71:ab:59:6e:12:39:f4:c9:b0:a3:ac:2e:
a2:1c:13:23:6e:92:3d:4a:54:2e:99:72:b2:f3:83:
78:76:85:1c:a8:3e:a3:1d:31:e9:9b:7e:31:b8:7f:
8d:cf:b3:1a:54:d0:65:73:6f:1e:0e:47:8c:0c:ce:
f9:f7:c0:e8:21:f1:cf:18:61:f5:7f:7a:65:89:ce:
8c:ed:fa:7d:16:a0:22:6a:64:ba:e3:85:0c:50:4d:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:67:90:23:55:80:B0:19:64:4B:9E:BD:0A:93:BA:6D:2B:28:DE:B6
X509v3 Authority Key Identifier:
keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/F6B0145ACD2011F0B3EB5B69C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.150.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:0e:5f:c1:10:21:61:d3:81:f4:d0:ad:82:a7:2d:da:d9:d6:
df:1f:cb:83:f1:a2:37:fb:d7:fb:c8:3a:d1:61:10:0f:ba:43:
0c:dc:ea:64:cf:16:c6:26:15:8f:99:5d:2e:fe:47:68:5a:f2:
a9:2d:56:f8:16:6f:0b:ea:3d:43:bd:a1:a1:4a:63:fd:8e:75:
16:58:40:fc:68:fc:c2:cb:8e:f9:7c:81:97:cb:9a:c5:0a:39:
f0:e0:44:4e:cf:88:fe:5f:95:3f:2c:1f:99:27:27:b5:80:1c:
ac:a3:97:25:e0:77:aa:5b:96:d9:b1:ab:58:cb:d7:0d:74:b5:
67:9a:80:26:44:08:ea:e4:a7:93:f2:b2:0c:80:8a:98:b5:12:
7e:77:fe:c6:ba:ed:5e:ed:c1:74:e0:2b:d6:4a:6c:86:77:5f:
7c:c9:44:8c:aa:ca:37:40:73:07:f7:54:15:ef:68:51:25:2a:
cf:02:00:4c:11:3c:3f:a8:74:32:3e:92:2e:00:e8:b1:1e:ce:
8a:da:6e:63:45:14:63:47:ed:7b:78:61:ed:86:2c:5a:a1:f3:
17:76:84:ff:f2:63:5c:5d:a2:84:52:d4:ec:41:ee:6b:1d:f3:
d3:6a:cf:cc:a4:98:5c:62:a2:9d:81:2a:33:63:d9:f3:f8:31:
65:db:3c:3e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICD6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy
RkQ4NjM5RjEwHhcNMjUxMTI5MTI0MzExWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjFlZS0zYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArmp6lekIPJd7R8SETivJCN+hGI1qfE4Y+j1ZiVOp1UOKWUTqcKp5ZSSxd3ph
h+7jBQo6eM9dMUWmZh+qpzTGepRdixxG3CZA8QX5W49FohIDd5pKG8kc8iHz6B4m
NvRtmejVp0ioBzTQytvvxtWrBORym9snRTQAATjaEpeFDfgksjtlBnIaN/52dOrw
1RGWgGEMIbatGdTMtNCaaSPIMMBvm/0g9Mlxq1luEjn0ybCjrC6iHBMjbpI9SlQu
mXKy84N4doUcqD6jHTHpm34xuH+Nz7MaVNBlc28eDkeMDM7598DoIfHPGGH1f3pl
ic6M7fp9FqAiamS644UMUE3R/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAFnkCNV
gLAZZEuevQqTum0rKN62MB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4
REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0MyQ0MvQ0MxOTM4NzY3OERBMTFFOTkwMUI3RjREQzRGOUFFMDIvRjZCMDE0NUFD
RDIwMTFGMEIzRUI1QjY5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4qWMA0GCSqGSIb3DQEBCwUAA4IBAQAcDl/BECFh04H00K2Cpy3a
2dbfH8uD8aI3+9f7yDrRYRAPukMM3OpkzxbGJhWPmV0u/kdoWvKpLVb4Fm8L6j1D
vaGhSmP9jnUWWED8aPzCy475fIGXy5rFCjnw4EROz4j+X5U/LB+ZJye1gByso5cl
4HeqW5bZsatYy9cNdLVnmoAmRAjq5KeT8rIMgIqYtRJ+d/7Guu1e7cF04CvWSmyG
d198yUSMqso3QHMH91QV72hRJSrPAgBMETw/qHQyPpIuAOixHs6K2m5jRRRjR+17
eGHthixaofMXdoT/8mNcXaKEUtTsQe5rHfPTas/MpJhcYqKdgSozY9nz+DFl2zw+
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:49:24 2026 by rpki-client