
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/0FFE5282122811F0AC9B4112C4F9AE02.roa
File: 0FFE5282122811F0AC9B4112C4F9AE02.roa (raw, json)
Hash identifier: hvYPHarDWHv0diZ2Z9sjrMrnKIoU9wqJbUj+0JMrSEY=
Subject key identifier: 6C:C4:E6:7A:BC:63:56:8E:E0:FB:00:93:17:5E:53:C0:49:3A:1D:E8
Certificate issuer: /CN=A919A1BE/serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730
Certificate serial: 0B71
Authority key identifier: EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/0FFE5282122811F0AC9B4112C4F9AE02.roa
Signing time: Fri 06 Mar 2026 19:25:24 +0000
ROA not before: Fri 06 Mar 2026 19:25:24 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 137396
IP address blocks: 103.107.76.0/22 maxlen: 24
2405:cf40::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl
rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2929 (0xb71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A1BE, serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730
Validity
Not Before: Mar 6 19:25:24 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69ab2a24-d566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e1:88:95:b1:85:a3:bc:57:04:84:e9:9e:c2:
99:5a:33:d6:49:4a:81:58:b2:d6:18:53:d8:57:f2:
ce:d6:91:da:56:96:d3:73:11:48:b3:c3:dd:ac:f7:
3c:25:ce:f4:26:c7:b9:48:58:d7:91:11:b0:42:68:
aa:a1:78:eb:80:bd:44:d0:55:35:3e:97:49:cd:f0:
a9:32:87:f3:2f:8e:49:e4:c2:25:23:08:29:a5:39:
93:0e:6e:86:c6:9a:55:4a:8f:87:1a:a2:fc:cf:bb:
e8:3a:b7:b6:2f:fb:99:20:da:87:f9:9b:ad:37:24:
33:a5:c6:df:fa:21:43:fa:7b:4f:fc:b3:84:2a:92:
65:ea:23:3e:c4:fc:23:36:aa:4b:b8:95:ca:b0:3a:
8c:fa:15:50:cd:f7:05:56:3a:42:9d:78:c5:30:11:
6a:94:8d:b9:24:81:84:dc:f4:6a:46:92:af:42:0b:
86:67:82:dc:55:cd:45:fb:2c:12:9b:1d:15:65:50:
25:01:b9:66:fc:5a:d5:0d:89:a3:00:67:42:a6:fd:
c1:81:d5:d3:80:f5:46:01:c6:b9:c5:ca:96:6d:6f:
bd:eb:59:83:a2:d9:ed:40:53:ee:f9:60:fd:f7:c1:
2b:c2:5a:a8:b2:c5:68:c7:47:19:6d:68:1a:66:41:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C4:E6:7A:BC:63:56:8E:E0:FB:00:93:17:5E:53:C0:49:3A:1D:E8
X509v3 Authority Key Identifier:
keyid:EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/0FFE5282122811F0AC9B4112C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.107.76.0/22
IPv6:
2405:cf40::/32
Signature Algorithm: sha256WithRSAEncryption
2c:98:f6:f3:62:5e:6c:23:c2:d0:69:ad:b6:d9:ae:8b:60:ff:
64:71:b5:6b:1c:2d:15:2d:d5:80:12:34:f1:e5:dc:a9:ff:fb:
16:2d:26:78:fa:84:4b:f3:79:e2:a7:10:3a:18:42:a3:b5:e8:
a2:4f:2d:ac:30:4e:e4:47:f0:37:4b:76:2c:d6:2a:52:85:cc:
66:e0:67:86:f3:a3:c5:db:87:c0:6c:03:59:a4:61:ce:96:b3:
a1:01:18:a0:a6:d0:6e:af:cd:a3:f0:3e:6e:43:e1:0d:34:92:
da:48:73:96:65:64:05:63:cf:35:24:31:da:d1:94:12:69:df:
67:21:03:59:91:b3:ee:7a:20:2f:cd:e9:28:89:a0:af:6f:75:
f9:76:10:ce:2b:3d:76:e4:b7:f6:63:18:60:a8:33:82:c3:8e:
08:43:18:12:4e:03:e9:0b:00:8f:e5:43:eb:e2:c5:1a:d4:3d:
d5:b9:31:b0:37:44:6f:33:d1:a2:8b:be:ec:33:56:73:51:d8:
8d:f8:63:c5:2f:b3:4c:55:19:2c:45:ef:bb:f3:1b:50:7e:9d:
31:54:69:d5:43:12:ae:29:28:97:d5:b8:3f:22:83:fd:94:73:
77:ea:bb:61:fd:b7:40:e6:41:3f:83:64:7c:2e:13:a2:f4:32:
97:5d:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:53 2026 by rpki-client