
$ rpki-client -vvf rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/B0EE80B28FBB11EAA0855C73C4F9AE02.roa
File: B0EE80B28FBB11EAA0855C73C4F9AE02.roa (raw, json)
Hash identifier: 5aDrGDEFYNu7ffbk9UZWSu7Qf2Tr5ZhqxLOBkjSZqJQ=
Subject key identifier: 49:B3:3D:5A:F0:14:2C:4B:22:9E:D0:64:24:D6:5C:3B:ED:3F:59:15
Certificate issuer: /CN=A919690C/serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
Certificate serial: 0A24
Authority key identifier: 2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/B0EE80B28FBB11EAA0855C73C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:10:47 +0000
ROA not before: Wed 30 Apr 2025 19:59:20 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 136030
IP address blocks: 103.85.128.0/24 maxlen: 24
103.85.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl
rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2596 (0xa24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919690C, serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
Validity
Not Before: Apr 30 19:59:20 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a47317-de46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:3f:d3:1a:33:38:dd:7e:c9:ed:c0:03:9d:
8c:02:bd:04:98:5a:e9:d4:ee:94:a3:e0:58:31:65:
b1:ee:e0:bb:37:42:eb:cb:6c:ad:1d:e5:6a:fb:7e:
6d:35:d8:22:c8:f7:3e:86:3a:16:85:ea:ea:39:8d:
03:b4:93:f4:7b:7c:24:ef:be:52:c4:81:8b:9b:ca:
db:09:df:4c:3e:54:69:0d:87:8a:13:b1:af:f9:8f:
f4:d8:f4:c6:94:6d:5c:a8:fd:1c:fb:50:fe:f6:e3:
d9:5d:97:69:04:ce:54:87:1e:af:a1:81:9e:33:5c:
2c:a8:4a:08:71:59:a5:29:9a:c6:61:03:b2:3e:05:
dd:9d:43:42:b8:e5:c4:62:29:d0:85:05:fd:21:e6:
07:dc:2f:98:0a:7c:4f:04:48:22:e6:81:99:2b:db:
94:1d:fb:45:b3:af:3a:d7:5e:80:9d:2a:cf:55:01:
d3:1d:93:f8:76:cb:39:ce:03:e0:90:b1:47:9c:98:
43:13:b2:09:7a:e6:d1:50:69:b0:3e:49:90:4e:88:
50:4b:b0:66:4f:f1:1f:df:74:1d:6a:ea:d5:28:67:
c6:70:74:be:0e:19:c8:f7:f7:ef:d9:e5:e3:82:fb:
f7:ae:a7:70:33:8c:14:16:23:8a:8c:3d:01:a2:66:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B3:3D:5A:F0:14:2C:4B:22:9E:D0:64:24:D6:5C:3B:ED:3F:59:15
X509v3 Authority Key Identifier:
keyid:2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/B0EE80B28FBB11EAA0855C73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.85.128.0/24
103.85.131.0/24
Signature Algorithm: sha256WithRSAEncryption
70:88:7c:6c:9a:30:48:58:ff:34:32:96:2c:d3:2c:67:c1:87:
2a:f9:cd:cd:11:ae:b1:3a:ae:97:9e:aa:15:71:ab:f5:23:96:
ee:53:55:12:d9:31:59:77:1c:24:af:e9:fa:d7:8c:6f:37:58:
c6:0c:f7:51:0e:e3:02:23:4f:ca:24:4c:18:7d:69:ed:16:c4:
f2:9a:ba:35:75:c2:b5:40:6a:91:dc:b1:7a:95:22:f0:cc:82:
2a:d3:51:07:1e:21:c1:54:1a:24:9c:f4:cb:3a:b3:f6:7c:2f:
ba:c6:fc:2f:24:26:40:1c:b4:c3:01:1c:62:5f:26:d1:72:59:
7c:26:a5:91:27:56:9d:a7:c2:25:b3:21:2c:06:a5:24:2a:e0:
21:88:c2:83:2a:6a:37:3a:ae:ee:54:18:34:02:85:73:31:8b:
bb:74:12:dd:d6:bb:05:d9:68:07:b8:0c:3c:0b:08:21:3d:7c:
7c:98:74:55:15:10:ee:e2:46:26:e7:d4:af:40:81:8c:15:61:
7d:68:37:ec:f2:45:82:54:22:94:2d:55:00:41:09:09:30:1f:
9d:5a:a7:67:bf:0b:52:e2:59:df:4b:9e:cd:1a:b7:51:74:ce:
fe:e0:7b:da:22:4a:06:ea:e1:bf:2a:50:d8:82:9f:b2:82:1d:
d6:75:cc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:44 2026 by rpki-client