
$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/FF1C0B44C0D411EEB8303680C4F9AE02.roa
File: FF1C0B44C0D411EEB8303680C4F9AE02.roa (raw, json)
Hash identifier: Lmq2NlPigyOuDvfNbo9bP8wwoc5cdlliVt/Do6DQwes=
Subject key identifier: 37:CD:32:78:00:DD:B1:18:BD:FE:78:14:C3:CC:AD:97:80:BC:0B:6F
Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0
Certificate serial: 0191
Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/FF1C0B44C0D411EEB8303680C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:03:39 +0000
ROA not before: Wed 07 Jan 2026 03:22:54 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 55361
IP address blocks: 103.254.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl
rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:08:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912404E, serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0
Validity
Not Before: Jan 7 03:22:54 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a41d0b-1393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:fc:f6:4d:3e:36:09:21:10:65:d2:6b:a8:
25:30:dc:89:0a:63:78:c6:46:28:c7:15:3f:0f:3d:
9b:a4:9e:f7:94:38:91:9d:e1:cd:06:ec:e1:5a:e3:
ef:74:b9:e7:45:59:ee:11:a2:c5:a7:ef:0b:38:5b:
8e:3f:e1:7a:f4:99:d0:3d:92:37:d6:ba:a3:fe:70:
b1:3c:e3:aa:8f:c1:b4:83:ae:05:c6:03:50:71:76:
1b:75:b7:4a:34:26:0c:72:be:e8:a1:77:78:c4:f3:
e4:57:a0:aa:60:dc:ef:d0:d0:2e:e2:9d:d1:9f:ea:
db:23:21:e8:52:13:e9:b3:4e:3e:77:0a:6b:59:19:
34:9a:cf:ba:83:2d:00:85:7d:2b:47:26:d5:43:85:
82:e9:6b:ce:b5:33:4d:43:0b:ea:d3:0d:ee:aa:2f:
67:09:d8:b5:fb:57:3a:1e:14:94:f0:56:cc:55:d6:
9f:ae:8a:a4:c4:0b:19:50:71:9b:92:a4:fb:3b:28:
47:53:46:0c:6c:67:58:ee:0e:63:94:51:15:46:82:
35:3c:39:7b:53:14:31:69:eb:b9:a9:ae:41:a7:47:
30:6c:b6:1f:0d:51:51:9f:4c:19:69:d5:8f:6b:20:
a2:fa:d2:18:0d:7d:f3:77:8e:f6:9c:fe:87:a6:a9:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CD:32:78:00:DD:B1:18:BD:FE:78:14:C3:CC:AD:97:80:BC:0B:6F
X509v3 Authority Key Identifier:
keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/FF1C0B44C0D411EEB8303680C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.254.220.0/22
Signature Algorithm: sha256WithRSAEncryption
89:2a:bf:f6:80:49:04:95:e3:87:e0:fa:98:e4:85:97:e7:47:
97:a7:a4:fb:09:ae:bf:19:ff:9e:de:36:21:38:d8:90:f7:40:
3a:3e:63:37:f2:b9:cb:d8:8d:cb:ca:ea:4a:9d:31:51:f3:ca:
ef:fa:77:f9:88:46:e0:88:50:a2:73:d8:f7:dc:1a:31:79:7e:
22:52:b7:a3:be:bd:5c:88:fc:12:52:6b:17:45:d1:15:9a:44:
c8:e1:88:64:a4:65:1e:49:93:d5:bf:e9:6f:55:b1:26:2e:a8:
c7:9d:63:5f:cb:cc:6c:e4:d4:3a:d3:f7:35:50:98:e1:1c:7a:
81:a0:8f:49:10:26:2a:ba:bf:26:1b:dc:9c:c5:6b:74:ee:85:
de:31:0d:e5:da:61:32:72:f3:dd:d5:c0:21:28:dc:78:f7:76:
94:13:7d:5d:cf:8a:b4:22:19:b1:b2:66:7e:96:da:ae:5e:f5:
c5:f7:f2:37:d0:92:62:f7:19:3e:61:9c:44:95:d2:7c:db:96:
c7:be:7a:eb:68:b8:a3:45:5e:a8:7f:6b:a9:f9:08:0f:6a:80:
54:b9:8b:ff:b9:9e:d6:c8:59:61:e2:14:96:20:f3:e8:36:2b:
3a:87:50:df:12:b7:a0:a9:b0:31:97:60:c0:ff:25:07:df:bc:
0d:6d:68:96
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQwNEUxMTAvBgNVBAUTKDU1MzkwRjNGNkIzQjMwRUQ0QTlDNkZCOUFEODI5N0I4
RUY5OTA2RTAwHhcNMjYwMTA3MDMyMjU0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MWQwYi0xMzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlfL89k0+NgkhEGXSa6glMNyJCmN4xkYoxxU/Dz2bpJ73lDiRneHNBuzhWuPv
dLnnRVnuEaLFp+8LOFuOP+F69JnQPZI31rqj/nCxPOOqj8G0g64FxgNQcXYbdbdK
NCYMcr7ooXd4xPPkV6CqYNzv0NAu4p3Rn+rbIyHoUhPps04+dwprWRk0ms+6gy0A
hX0rRybVQ4WC6WvOtTNNQwvq0w3uqi9nCdi1+1c6HhSU8FbMVdafroqkxAsZUHGb
kqT7OyhHU0YMbGdY7g5jlFEVRoI1PDl7UxQxaeu5qa5Bp0cwbLYfDVFRn0wZadWP
ayCi+tIYDX3zd472nP6Hpql9+wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDfNMngA
3bEYvf54FMPMrZeAvAtvMB8GA1UdIwQYMBaAFFU5Dz9rOzDtSpxvua2Cl7jvmQbg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA0RS80OURGNjUzRUJG
NDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01PMUtuRy01cllLWHVPLVpC
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjQwNEUvNDlERjY1M0VCRjQyMTFFRTlCMzU5NjU2QzRGOUFFMDIvRkYxQzBCNDRD
MEQ0MTFFRUI4MzAzNjgwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ/7cMA0GCSqGSIb3DQEBCwUAA4IBAQCJKr/2gEkEleOH4PqY5IWX
50eXp6T7Ca6/Gf+e3jYhONiQ90A6PmM38rnL2I3LyupKnTFR88rv+nf5iEbgiFCi
c9j33BoxeX4iUrejvr1ciPwSUmsXRdEVmkTI4YhkpGUeSZPVv+lvVbEmLqjHnWNf
y8xs5NQ60/c1UJjhHHqBoI9JECYqur8mG9ycxWt07oXeMQ3l2mEycvPd1cAhKNx4
93aUE31dz4q0IhmxsmZ+ltquXvXF9/I30JJi9xk+YZxEldJ825bHvnrraLijRV6o
f2up+QgPaoBUuYv/uZ7WyFlh4hSWIPPoNis6h1DfEregqbAxl2DA/yUH37wNbWiW
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:10 2026 by rpki-client