
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFFCC36A05C111EE9AAEE76CC4F9AE02.roa
File: FFFCC36A05C111EE9AAEE76CC4F9AE02.roa (raw, json)
Hash identifier: /ujv8Aykb+iM4fFd4QHAMaV1cwI7Od8+C8XGA4QAGpU=
Subject key identifier: E1:28:10:82:05:7C:B4:69:EB:74:ED:B7:A0:E8:FB:93:95:6D:83:07
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D7C6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFFCC36A05C111EE9AAEE76CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:52:05 +0000
ROA not before: Thu 08 May 2025 16:26:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151152
IP address blocks: 103.131.250.0/23 maxlen: 24
2400:f660::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55238 (0xd7c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:26:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c315-641b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:42:d7:33:92:e9:53:44:8f:f1:d5:3a:fc:da:
c7:6b:6d:11:18:ad:1e:03:eb:4c:c2:68:4f:76:43:
23:25:9c:ac:40:43:bb:28:71:30:50:75:f4:af:d1:
dd:1f:02:02:23:55:c3:d3:ea:f2:0d:0f:ce:ab:e4:
12:c3:94:f4:14:e7:8c:eb:cc:c2:db:02:20:d8:a7:
26:ea:b4:75:c9:30:54:e5:62:5f:91:be:57:a5:33:
a4:08:25:42:31:0c:d2:00:c8:d6:4b:b5:b7:ee:9e:
4e:96:77:bc:ad:fc:42:f5:ba:a7:41:be:45:7e:80:
8e:a9:54:5d:b4:1b:56:e5:64:9e:b2:6f:1f:72:8c:
ee:66:2c:d3:ba:66:20:07:18:77:d7:8b:6b:c6:9f:
02:13:6d:ba:70:6e:8a:7c:cf:ee:88:5c:6e:d7:12:
9c:09:cb:7e:cc:9b:2e:fd:b2:4c:30:f9:2b:7d:85:
2b:77:f1:a4:a8:57:7d:77:ee:35:a6:24:cc:3f:83:
71:7d:3a:79:70:af:50:20:8f:aa:ef:1e:9f:b1:37:
da:22:97:28:ee:d0:ca:f9:98:7a:b6:7b:d9:d1:ae:
1b:0c:f0:97:e1:1e:8a:ad:8a:3f:ab:e2:48:fd:95:
f5:a6:35:b3:0d:6b:06:8a:89:d6:d9:1d:4a:5b:59:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:28:10:82:05:7C:B4:69:EB:74:ED:B7:A0:E8:FB:93:95:6D:83:07
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFFCC36A05C111EE9AAEE76CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.250.0/23
IPv6:
2400:f660::/32
Signature Algorithm: sha256WithRSAEncryption
8b:3d:95:19:b0:0c:f0:8d:02:15:d0:56:de:7e:33:9c:77:59:
06:e5:25:8a:87:3c:39:cd:d3:64:ad:61:79:9f:b7:f8:a3:ed:
48:50:22:91:a2:2e:e8:e3:d3:27:2f:a9:9b:fe:f0:96:05:d2:
af:10:d7:e6:bb:05:39:18:ed:bd:6e:26:b4:f5:38:ab:27:fb:
e7:0f:56:27:22:99:2f:08:4c:aa:b8:64:30:91:83:9b:06:9c:
02:90:4f:1a:b6:1d:f9:b1:b7:a5:13:64:5b:93:42:5a:0f:76:
4c:d0:81:1d:b8:76:a1:9b:6f:c7:e6:57:73:62:4c:76:cc:6b:
92:4e:0d:15:9e:e4:1b:24:1e:7b:b9:bb:d9:ae:7f:aa:5e:15:
6c:b2:42:a8:e5:18:b2:56:eb:c9:5d:fd:a6:39:49:76:d4:1b:
b8:ef:39:35:5b:73:f2:71:55:87:7d:a1:35:41:9b:a7:36:7f:
a1:d7:37:e6:f8:ee:b5:91:f4:f3:d2:a5:02:51:6f:ac:8d:d8:
8d:81:39:5e:5f:58:a7:ae:5e:87:73:c4:ae:92:61:ff:d6:1b:
1f:56:45:d6:1f:93:55:bf:b7:43:84:97:83:75:6b:2f:e8:4a:
e4:45:6f:10:49:76:61:48:77:1a:a5:50:c5:b1:d4:02:09:5d:
b4:b9:ed:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:21 2026 by rpki-client