
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/8FFC4170EF6C11F0B51A35C1596F56BC.roa
File: 8FFC4170EF6C11F0B51A35C1596F56BC.roa (raw, json)
Hash identifier: SZgx2vGxiiOSvAnv0nEwuS0dEUkmyd32705iGeGq47o=
Subject key identifier: 75:6E:9F:EF:B3:E3:79:41:83:EE:7D:12:F9:5C:D8:7D:DE:DA:1E:02
Certificate issuer: /CN=A911D951/serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
Certificate serial: 1D
Authority key identifier: E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/8FFC4170EF6C11F0B51A35C1596F56BC.roa
Signing time: Sun 01 Mar 2026 05:44:54 +0000
ROA not before: Mon 12 Jan 2026 04:10:00 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 140967
IP address blocks: 103.109.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl
rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D951, serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
Validity
Not Before: Jan 12 04:10:00 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3d256-93e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:0d:17:99:fb:f1:7d:38:06:28:03:42:4b:
e4:ae:21:a5:cc:2b:79:df:da:6d:76:8a:8b:4b:19:
55:0d:98:f7:91:32:d2:05:dd:4f:00:79:6c:c4:b9:
03:7d:b1:4e:30:b8:f9:dd:ce:f0:10:1c:bf:e8:19:
68:58:a0:c2:f7:ca:c3:33:32:49:23:93:be:95:ba:
20:88:cc:11:f7:ba:f9:e2:8e:4d:c5:0b:02:a0:f3:
37:b8:c9:15:5e:5f:2e:94:ec:79:a3:b4:fc:bd:a9:
34:be:11:a1:01:df:3f:37:8e:7d:54:57:b4:b3:96:
90:13:a3:df:6c:e4:58:1a:eb:ea:d8:84:f8:f7:34:
41:36:c1:85:d5:90:4d:24:b6:91:91:e3:69:0f:98:
a6:d9:ea:41:97:20:9b:c1:5f:70:80:a1:94:e4:e3:
8b:0b:28:b1:1c:bb:08:71:04:7b:0e:a4:69:9f:e7:
ba:e5:22:d5:31:f2:97:69:11:6b:27:c6:c6:a7:bd:
63:90:ff:59:32:6b:19:e7:e6:2d:45:44:ea:6a:ac:
e6:ee:2c:ae:e3:41:76:00:d3:29:65:a2:36:61:3d:
ca:7f:07:0c:29:db:e5:74:06:22:d7:ff:81:d5:23:
f5:dd:f8:54:84:03:a4:2e:ec:71:59:e7:84:7e:5b:
28:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6E:9F:EF:B3:E3:79:41:83:EE:7D:12:F9:5C:D8:7D:DE:DA:1E:02
X509v3 Authority Key Identifier:
keyid:E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/8FFC4170EF6C11F0B51A35C1596F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.109.77.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f1:bc:e6:bd:a4:95:19:14:a1:ef:83:aa:4a:42:01:7f:1f:
fd:7d:a9:08:b7:24:96:6e:5c:42:a5:dd:1a:48:a4:87:76:3e:
3d:70:7d:24:3f:1d:3b:d8:91:80:53:34:74:ba:98:9a:43:1b:
1f:42:49:74:9e:e0:b9:08:03:41:99:d8:bf:e3:24:78:2d:59:
9e:51:d7:44:b5:95:b4:7b:7f:26:f0:06:06:83:42:ce:d2:e5:
28:76:a7:b7:6d:41:6d:25:e6:7d:2d:93:d1:3a:86:e2:37:71:
ca:98:b5:e1:d4:ef:ef:59:75:77:db:b7:36:31:65:57:7c:7a:
3e:29:06:09:91:1d:e9:f4:a7:e1:d0:1a:0f:b4:82:f6:5e:ec:
d8:43:d3:28:6f:c5:39:6e:c1:d1:9c:51:17:69:bf:bb:06:b1:
9f:5e:b2:21:2b:c7:09:ff:1a:45:27:ed:fc:13:6d:82:f1:3c:
00:76:55:64:d1:fe:7f:02:6f:90:bc:08:4f:be:19:d3:fb:93:
b0:18:53:5c:43:18:36:44:5b:d1:fa:09:37:75:4a:7c:23:8b:
ed:fa:af:65:1c:9d:b7:75:a0:3b:eb:53:e4:59:42:8e:ec:04:
b2:ed:82:6a:e6:22:51:30:d3:a2:c6:52:d1:fb:64:5f:c7:05:
4d:b6:f4:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:02:43 2026 by rpki-client