
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/FB2EC05CA3B111EE92169F16C4F9AE02.roa
File: FB2EC05CA3B111EE92169F16C4F9AE02.roa (raw, json)
Hash identifier: fr4dysk/P3zUmlCOKjsEU0eRwe8F4JdrkBJKvGf87s0=
Subject key identifier: A3:85:75:67:3A:02:40:BD:D7:E2:A5:D2:DB:C6:6D:11:83:D4:BA:C0
Certificate issuer: /CN=A917EB0C/serialNumber=506D780ED1797480F15251347FC28443D72E9507
Certificate serial: 0C77
Authority key identifier: 50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/FB2EC05CA3B111EE92169F16C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:43:11 +0000
ROA not before: Thu 20 Mar 2025 18:58:30 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139901
IP address blocks: 103.85.236.0/22 maxlen: 22
103.85.236.0/23 maxlen: 23
103.85.236.0/24 maxlen: 24
103.85.237.0/24 maxlen: 24
103.85.238.0/23 maxlen: 23
103.85.238.0/24 maxlen: 24
103.85.239.0/24 maxlen: 24
2400:b340::/32 maxlen: 40
2400:b340::/48 maxlen: 48
2400:b340:236::/48 maxlen: 48
2400:b340:237::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:40:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3191 (0xc77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB0C, serialNumber=506D780ED1797480F15251347FC28443D72E9507
Validity
Not Before: Mar 20 18:58:30 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a4264f-78bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:6d:63:ba:5e:23:76:7d:11:df:77:0b:fc:
27:d3:ad:97:19:5e:7b:2d:20:5c:39:8d:ca:19:3d:
c0:b2:89:82:a0:95:6d:4c:ed:b7:60:56:3d:22:da:
97:9e:cd:98:25:cd:54:92:3e:c8:eb:94:59:ef:00:
ed:9d:e5:61:4e:0b:8c:8a:69:3f:70:08:0b:c5:00:
51:74:37:3b:2e:72:53:44:bb:41:11:d6:25:87:07:
9f:0e:63:b3:43:ea:92:50:55:05:0f:aa:e6:1e:3c:
f7:0c:66:c2:82:bc:b4:ad:a5:9c:da:9b:6e:51:5d:
45:be:28:a1:34:9c:bd:1a:88:28:ec:7c:dd:7a:14:
2f:43:6f:97:1b:57:dd:7b:65:61:4f:21:0a:55:c7:
43:68:85:99:d4:69:fd:59:4e:38:14:d4:cc:cd:77:
6c:61:4f:53:78:d5:29:aa:5e:1b:f0:fb:66:78:50:
9e:5b:8f:75:6c:37:0c:30:b4:4a:87:8f:8b:76:b2:
fd:fd:f5:bb:3a:ce:c4:a8:30:8e:58:c7:45:f2:b2:
0d:c2:ad:6c:4b:e3:7a:63:47:6a:7b:13:2f:7f:99:
54:94:87:20:53:ac:56:20:6e:d4:5a:36:5b:57:7f:
07:bc:55:5a:53:98:32:12:cc:78:70:14:e3:bd:f1:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:85:75:67:3A:02:40:BD:D7:E2:A5:D2:DB:C6:6D:11:83:D4:BA:C0
X509v3 Authority Key Identifier:
keyid:50:6D:78:0E:D1:79:74:80:F1:52:51:34:7F:C2:84:43:D7:2E:95:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/UG14DtF5dIDxUlE0f8KEQ9culQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UG14DtF5dIDxUlE0f8KEQ9culQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB0C/61375B6A222A11EA9A826D45C4F9AE02/FB2EC05CA3B111EE92169F16C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.85.236.0/22
IPv6:
2400:b340::/32
Signature Algorithm: sha256WithRSAEncryption
07:94:d7:02:72:d3:da:6f:fd:a6:a8:b9:df:90:0a:57:44:5c:
2f:96:b3:39:57:90:57:2c:a5:d9:9d:11:41:74:d8:9f:45:9e:
5c:71:91:78:ba:2d:db:e7:61:93:a4:76:25:2c:2a:60:3b:0c:
06:2a:de:91:29:39:e8:69:79:80:11:42:c7:cd:97:e8:ec:76:
10:4d:db:3a:9b:66:51:55:30:79:c5:38:94:3e:df:db:c5:0d:
5a:8b:69:91:bc:d1:ed:f9:08:b6:cc:3a:b0:6a:f3:78:8c:43:
3f:96:b1:e8:96:66:76:ca:3b:80:d8:9c:49:95:e8:a3:db:b2:
00:5c:3e:b4:55:9d:31:4b:43:89:60:62:13:9f:be:ca:d8:88:
39:e9:46:75:61:74:e8:9e:89:29:09:6c:07:5a:55:b9:e0:dd:
8a:81:a5:0a:30:12:f6:1c:b2:5a:46:ee:1b:54:84:9f:6d:04:
2f:bd:c9:f5:4d:cc:c7:48:1b:49:88:05:ca:83:60:9e:12:8c:
e6:14:4f:90:d9:12:f4:8f:45:d1:25:26:67:be:13:9b:31:7c:
cf:43:52:91:a5:9c:51:8c:a8:49:63:da:b7:04:7e:39:a4:d1:
1d:da:b1:a1:0f:85:b8:f7:68:a7:08:69:cf:70:e1:07:4a:fd:
e9:96:a5:89
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICDHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VCMEMxMTAvBgNVBAUTKDUwNkQ3ODBFRDE3OTc0ODBGMTUyNTEzNDdGQzI4NDQz
RDcyRTk1MDcwHhcNMjUwMzIwMTg1ODMwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjY0Zi03OGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxRttY7peI3Z9Ed93C/wn062XGV57LSBcOY3KGT3AsomCoJVtTO23YFY9ItqX
ns2YJc1Ukj7I65RZ7wDtneVhTguMimk/cAgLxQBRdDc7LnJTRLtBEdYlhwefDmOz
Q+qSUFUFD6rmHjz3DGbCgry0raWc2ptuUV1FviihNJy9Gogo7HzdehQvQ2+XG1fd
e2VhTyEKVcdDaIWZ1Gn9WU44FNTMzXdsYU9TeNUpql4b8PtmeFCeW491bDcMMLRK
h4+LdrL9/fW7Os7EqDCOWMdF8rINwq1sS+N6Y0dqexMvf5lUlIcgU6xWIG7UWjZb
V38HvFVaU5gyEsx4cBTjvfG+OQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFKOFdWc6
AkC91+Kl0tvGbRGD1LrAMB8GA1UdIwQYMBaAFFBteA7ReXSA8VJRNH/ChEPXLpUH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUIwQy82MTM3NUI2QTIy
MkExMUVBOUE4MjZENDVDNEY5QUUwMi9VRzE0RHRGNWRJRHhVbEUwZjhLRVE5Y3Vs
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VHMTREdEY1ZElEeFVsRTBmOEtFUTljdWxRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VCMEMvNjEzNzVCNkEyMjJBMTFFQTlBODI2RDQ1QzRGOUFFMDIvRkIyRUMwNUNB
M0IxMTFFRTkyMTY5RjE2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ1XsMA0EAgACMAcDBQAkALNAMA0GCSqGSIb3DQEBCwUAA4IBAQAH
lNcCctPab/2mqLnfkApXRFwvlrM5V5BXLKXZnRFBdNifRZ5ccZF4ui3b52GTpHYl
LCpgOwwGKt6RKTnoaXmAEULHzZfo7HYQTds6m2ZRVTB5xTiUPt/bxQ1ai2mRvNHt
+Qi2zDqwavN4jEM/lrHolmZ2yjuA2JxJleij27IAXD60VZ0xS0OJYGITn77K2Ig5
6UZ1YXTonokpCWwHWlW54N2KgaUKMBL2HLJaRu4bVISfbQQvvcn1TczHSBtJiAXK
g2CeEozmFE+Q2RL0j0XRJSZnvhObMXzPQ1KRpZxRjKhJY9q3BH45pNEd2rGhD4W4
92inCGnPcOEHSv3plqWJ
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:39 2026 by rpki-client