
$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/F70F5E7A505E11ED9947920DC4F9AE02.roa
File: F70F5E7A505E11ED9947920DC4F9AE02.roa (raw, json)
Hash identifier: e25Eh5ysW99xEZdZeEMO20g/Wj/Kb6T5qU+ioCm+p3Q=
Subject key identifier: 5B:7A:CC:39:D5:79:3C:7E:6D:01:5C:7B:1F:3E:A7:EF:ED:6C:7C:7A
Certificate issuer: /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Certificate serial: 09BF
Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/F70F5E7A505E11ED9947920DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:00:40 +0000
ROA not before: Sat 12 Apr 2025 17:26:55 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 132298
IP address blocks: 103.135.252.0/24 maxlen: 24
103.135.253.0/24 maxlen: 24
103.135.254.0/24 maxlen: 24
103.135.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2495 (0x9bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912611F, serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Validity
Not Before: Apr 12 17:26:55 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a48cd8-78b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e6:6a:cc:23:fd:19:d5:f6:be:bd:7a:c0:46:
8a:91:b7:20:75:9a:4c:d4:a5:be:58:89:dc:af:ad:
28:35:f9:82:40:f6:ca:03:98:46:8f:13:42:f7:e4:
51:54:3f:89:95:97:7a:f8:e0:5a:8b:b9:ef:1a:dc:
31:7c:9b:48:f7:48:18:5e:0f:2f:75:e9:71:0f:32:
44:ef:84:1b:ea:d0:49:41:1c:ef:58:5f:49:50:05:
7c:52:1a:b5:7f:35:e5:e5:cb:18:c5:19:e2:9a:96:
a8:29:be:8f:8b:15:7f:86:89:19:e3:78:1d:c8:91:
97:32:ef:92:df:4a:91:27:a9:10:b3:3b:7c:33:ce:
45:02:61:04:50:e7:65:7c:55:14:35:1c:fb:cc:dc:
bb:2f:e8:31:0f:a1:cc:4d:d9:8a:55:1f:47:00:22:
62:ef:a7:72:84:47:c1:52:dd:23:fb:23:97:04:b1:
3c:e6:c0:4b:29:e2:8f:35:65:a0:4d:52:78:1d:69:
a8:d6:24:cd:9d:bb:30:73:35:cd:3c:2e:9b:6a:79:
1e:b9:9a:55:c3:24:41:bf:21:a6:ae:b2:86:fc:48:
eb:d4:70:e5:25:79:8e:8d:16:8d:bd:72:df:fe:46:
44:b5:6b:b7:54:47:2d:41:63:a2:2b:57:14:b5:25:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7A:CC:39:D5:79:3C:7E:6D:01:5C:7B:1F:3E:A7:EF:ED:6C:7C:7A
X509v3 Authority Key Identifier:
keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/F70F5E7A505E11ED9947920DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.252.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:20:7a:71:13:d6:77:45:80:25:dc:89:56:2b:61:e1:73:41:
60:2f:d7:5d:29:33:56:ef:22:fc:36:c4:87:b1:52:2d:e9:bd:
17:97:27:dc:b3:c2:a4:fa:56:01:6d:ab:ba:4e:fb:ca:c3:1d:
a1:ba:68:7a:16:ca:c0:16:bc:de:66:12:ef:f9:e4:f2:2c:11:
f8:b0:81:74:28:99:9f:ac:7a:3d:22:b3:ce:b6:93:a1:9d:9e:
5d:6c:6a:f2:76:a0:6b:13:17:58:6a:ca:b3:c2:c7:e0:94:da:
ca:e5:a5:63:44:b4:33:2c:16:1a:d6:9f:d8:14:33:0c:a3:cf:
da:67:53:5d:97:ad:3a:7d:40:d5:a7:c2:af:81:d8:49:3a:9b:
b5:a7:68:76:19:93:07:d4:96:2f:22:da:e8:42:1c:b5:06:30:
55:91:04:c8:a0:e6:77:82:46:a8:4d:53:84:f4:c7:78:65:4f:
e1:45:94:0a:9b:ee:28:ef:c1:d9:9d:85:6c:ff:7d:04:7b:81:
7e:fb:8b:4f:c2:ec:ef:3c:84:87:b8:1f:6c:d4:53:0a:d3:43:
e0:9f:3d:2a:72:9c:f6:fa:54:5f:93:14:be:a2:0a:d0:76:e4:
69:54:0f:92:96:fc:d0:81:bc:b3:e3:48:eb:86:cd:4c:d1:30:
29:c2:88:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:18 2026 by rpki-client