
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/CB6BD978592811E9AD7CEF21C4F9AE02.roa
File: CB6BD978592811E9AD7CEF21C4F9AE02.roa (raw, json)
Hash identifier: Q2AEf6i72VsxMPqUwVozRq1rBCIiecpepY5TE7lgfJc=
Subject key identifier: 3F:45:6E:EA:16:34:22:D5:A2:15:C2:A0:BE:FC:E4:A7:CE:CA:16:05
Certificate issuer: /CN=A919F46B/serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946
Certificate serial: 1051
Authority key identifier: 14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/CB6BD978592811E9AD7CEF21C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:32:28 +0000
ROA not before: Wed 03 Dec 2025 07:45:48 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 138601
IP address blocks: 103.134.88.0/22 maxlen: 24
103.244.247.0/24 maxlen: 24
123.176.56.0/24 maxlen: 24
123.176.58.0/24 maxlen: 24
202.129.193.0/24 maxlen: 24
2404:61c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl
rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4177 (0x1051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F46B, serialNumber=14BFAB79426E3D22BEC3FC61EE432FEA08272946
Validity
Not Before: Dec 3 07:45:48 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a45c0c-0ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:c6:93:f9:62:a2:d3:38:38:60:9b:2c:7e:
e8:3d:49:dd:80:d4:52:a3:15:19:06:ed:22:83:80:
8d:90:94:9e:a8:ff:71:cb:b3:ab:8e:bf:27:e6:f3:
2e:bb:22:80:43:19:f5:8b:b9:d4:cb:d5:eb:89:72:
f4:ce:7d:21:7f:5c:58:98:e9:2e:dc:16:ef:54:18:
9c:6e:97:4b:d9:82:e4:f8:b9:38:89:06:70:56:ba:
cc:96:1d:e1:32:84:a5:11:57:5e:5a:5f:38:c7:90:
ed:fe:97:d8:6a:84:51:6a:3b:22:e0:df:84:45:46:
5b:17:af:ee:ed:7a:8f:72:dc:7c:08:f5:30:04:44:
1c:5c:c5:1d:34:c5:67:b7:66:80:9e:c8:69:60:3b:
95:5c:4b:e5:94:60:10:30:ad:74:cf:b3:eb:de:d3:
a7:2a:c1:32:3e:15:85:5b:b4:bf:99:e3:9b:ca:22:
77:9e:cd:ab:96:51:7c:47:be:57:99:60:e2:88:34:
09:08:e3:06:36:f6:6a:50:b1:bc:c4:b7:c8:f5:38:
42:4f:3b:5c:45:bc:6e:ba:f8:6b:16:33:0d:09:1d:
fb:4b:fa:5c:a7:33:d1:c6:70:7d:3a:f4:9f:01:a3:
ee:c7:00:20:f9:56:5f:eb:af:03:eb:7d:0f:c3:cc:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:45:6E:EA:16:34:22:D5:A2:15:C2:A0:BE:FC:E4:A7:CE:CA:16:05
X509v3 Authority Key Identifier:
keyid:14:BF:AB:79:42:6E:3D:22:BE:C3:FC:61:EE:43:2F:EA:08:27:29:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/FL-reUJuPSK-w_xh7kMv6ggnKUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FL-reUJuPSK-w_xh7kMv6ggnKUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F46B/56EEBAE8592811E99FFF7A21C4F9AE02/CB6BD978592811E9AD7CEF21C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.134.88.0/22
103.244.247.0/24
123.176.56.0/24
123.176.58.0/24
202.129.193.0/24
IPv6:
2404:61c0::/32
Signature Algorithm: sha256WithRSAEncryption
ab:77:60:da:c2:04:47:68:9f:d0:b4:c1:e4:92:cd:56:c7:94:
8b:46:d3:2b:f6:f9:e6:e8:e9:ec:92:42:bc:61:e9:3d:ed:c9:
a9:c5:b6:e2:f0:30:b1:fa:48:f6:e2:8d:36:13:88:9b:7c:a1:
8c:da:00:bc:cf:92:ba:a4:6c:d3:8e:90:16:3e:c2:7f:1a:a9:
b2:55:64:f4:89:a4:0b:16:45:03:4a:e0:fb:37:05:d4:a8:f5:
0d:aa:11:e3:d4:a0:5a:62:ea:4e:99:f7:7e:3e:05:80:8e:80:
c6:ed:2f:72:68:bb:e5:83:23:17:eb:d3:80:c7:5b:f0:52:84:
10:9d:ae:c0:f3:5b:75:a4:26:b9:4b:03:08:93:6a:df:77:cd:
ea:b3:3b:4e:b0:c6:0f:0c:cb:cc:57:1f:91:27:45:3f:e6:61:
c1:5e:71:cf:0f:e8:6f:12:d4:fa:81:23:46:0a:0e:4e:2c:4b:
35:49:23:45:f8:92:68:50:ba:4a:11:49:76:96:09:91:cd:49:
34:f5:89:32:d3:18:08:5e:10:ef:b9:0c:90:70:d0:96:52:31:
77:0b:39:c6:cc:25:8f:cc:d2:80:00:b3:95:0c:c2:ee:22:12:
ff:27:6f:6c:be:27:17:99:93:fa:ee:d1:c1:df:4a:d3:33:23:
86:47:f9:fd
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgICEFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY0NkIxMTAvBgNVBAUTKDE0QkZBQjc5NDI2RTNEMjJCRUMzRkM2MUVFNDMyRkVB
MDgyNzI5NDYwHhcNMjUxMjAzMDc0NTQ4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWMwYy0wY2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAplPGk/liotM4OGCbLH7oPUndgNRSoxUZBu0ig4CNkJSeqP9xy7Orjr8n5vMu
uyKAQxn1i7nUy9XriXL0zn0hf1xYmOku3BbvVBicbpdL2YLk+Lk4iQZwVrrMlh3h
MoSlEVdeWl84x5Dt/pfYaoRRajsi4N+ERUZbF6/u7XqPctx8CPUwBEQcXMUdNMVn
t2aAnshpYDuVXEvllGAQMK10z7Pr3tOnKsEyPhWFW7S/meObyiJ3ns2rllF8R75X
mWDiiDQJCOMGNvZqULG8xLfI9ThCTztcRbxuuvhrFjMNCR37S/pcpzPRxnB9OvSf
AaPuxwAg+VZf668D630Pw8zFmwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFD9FbuoW
NCLVohXCoL785KfOyhYFMB8GA1UdIwQYMBaAFBS/q3lCbj0ivsP8Ye5DL+oIJylG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjQ2Qi81NkVFQkFFODU5
MjgxMUU5OUZGRjdBMjFDNEY5QUUwMi9GTC1yZVVKdVBTSy13X3hoN2tNdjZnZ25L
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZMLXJlVUp1UFNLLXdfeGg3a012NmdnbktVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUY0NkIvNTZFRUJBRTg1OTI4MTFFOTlGRkY3QTIxQzRGOUFFMDIvQ0I2QkQ5Nzg1
OTI4MTFFOUFEN0NFRjIxQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk
BAIAATAeAwQCZ4ZYAwQAZ/T3AwQAe7A4AwQAe7A6AwQAyoHBMA0EAgACMAcDBQAk
BGHAMA0GCSqGSIb3DQEBCwUAA4IBAQCrd2DawgRHaJ/QtMHkks1Wx5SLRtMr9vnm
6OnskkK8Yek97cmpxbbi8DCx+kj24o02E4ibfKGM2gC8z5K6pGzTjpAWPsJ/Gqmy
VWT0iaQLFkUDSuD7NwXUqPUNqhHj1KBaYupOmfd+PgWAjoDG7S9yaLvlgyMX69OA
x1vwUoQQna7A81t1pCa5SwMIk2rfd83qsztOsMYPDMvMVx+RJ0U/5mHBXnHPD+hv
EtT6gSNGCg5OLEs1SSNF+JJoULpKEUl2lgmRzUk09Yky0xgIXhDvuQyQcNCWUjF3
CznGzCWPzNKAALOVDMLuIhL/J29svicXmZP67tHB30rTMyOGR/n9
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:06 2026 by rpki-client