
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/0FFE5282122811F0AC9B4112C4F9AE02.roa
File: 0FFE5282122811F0AC9B4112C4F9AE02.roa (raw, json)
Hash identifier: m1Aw5cUYDfLAWM3hbDeaE7pof/2uEDGG8V0aGAP6Eio=
Subject key identifier: 51:3F:7E:4D:10:32:11:60:60:54:ED:78:20:41:93:BF:9A:ED:85:8D
Certificate issuer: /CN=A919A1BE/serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730
Certificate serial: 0B6A
Authority key identifier: EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/0FFE5282122811F0AC9B4112C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:27:04 +0000
ROA not before: Sat 05 Apr 2025 14:12:52 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 137396
IP address blocks: 103.107.76.0/22 maxlen: 24
2405:cf40::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl
rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 19:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2922 (0xb6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A1BE, serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730
Validity
Not Before: Apr 5 14:12:52 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a40668-e42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:28:60:3a:b9:c4:49:c3:50:43:2e:4a:99:
01:45:9e:01:c7:a1:cf:57:47:77:e7:82:76:40:e9:
97:90:e9:19:13:1b:6f:5d:a8:61:b7:aa:ce:01:40:
4e:56:48:c8:85:c3:b5:61:a1:54:0c:e5:92:5a:cd:
0c:54:40:0a:e3:35:b5:51:a8:e4:97:13:b3:60:48:
f7:cb:71:af:58:da:10:bf:79:07:5c:33:6c:d6:69:
ed:f7:a1:4b:9c:2c:62:ce:e9:fa:de:94:25:91:91:
9b:96:2c:d4:65:45:30:d4:36:c8:99:5c:db:0b:87:
53:28:b0:27:9e:38:3b:8f:91:1c:d4:6f:12:a3:64:
c5:b8:2f:ff:2f:a8:ba:49:41:29:6e:46:49:c3:6f:
85:82:83:d9:be:4a:2c:5b:b4:a7:ee:d0:92:e4:5f:
c6:53:35:8d:42:76:88:f1:46:8b:9f:9a:00:90:f3:
69:1c:5e:99:37:fd:3d:aa:cd:6c:db:1d:1b:93:d9:
b8:cd:ef:dd:d1:f9:73:a6:7a:6b:c7:32:64:21:bc:
65:af:6a:82:93:92:89:fe:4b:bb:e4:e9:a9:2b:ce:
ef:87:a0:1a:56:19:b9:40:b3:e7:21:83:5f:23:26:
dc:b6:9e:23:b4:89:a7:88:49:a7:2e:ed:3c:50:fd:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3F:7E:4D:10:32:11:60:60:54:ED:78:20:41:93:BF:9A:ED:85:8D
X509v3 Authority Key Identifier:
keyid:EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/0FFE5282122811F0AC9B4112C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.107.76.0/22
IPv6:
2405:cf40::/32
Signature Algorithm: sha256WithRSAEncryption
2f:eb:be:6e:87:30:b7:1f:cb:ff:a5:98:e7:ce:26:e0:09:87:
fe:c0:df:71:4e:02:2c:15:7b:78:7b:b5:1e:81:44:f3:f4:55:
78:54:2d:4d:04:98:77:18:2e:61:4f:1a:08:39:67:50:d6:4d:
ad:83:16:26:f3:e7:4c:bc:e1:d9:f0:64:b6:f1:31:8a:d1:f1:
e5:7b:9c:d4:1f:b6:af:b6:c0:97:ab:36:a5:92:e0:fe:55:ae:
4d:af:f7:54:7e:38:95:f7:27:30:9f:83:9f:a9:5d:36:de:f6:
4c:54:d7:38:5d:cb:fd:22:12:df:36:ad:72:6a:8f:57:ec:59:
92:2a:75:ae:ce:40:1e:9f:45:28:30:46:07:51:1f:a3:6a:7c:
78:27:11:17:d1:8b:5d:ea:e7:b8:02:2e:51:bf:94:34:38:65:
8a:6e:34:d0:92:dd:82:4c:b3:b6:80:cb:71:48:58:8d:f4:7e:
3d:cd:5b:01:58:f0:cb:0e:5d:df:76:13:49:f2:7c:b2:21:ed:
96:69:39:3d:6a:17:fc:1c:07:7e:ea:c7:f0:e9:a0:10:57:c2:
c5:1c:3d:ad:5e:5a:b9:f5:c7:f7:65:80:4f:2b:0a:a7:96:a4:
7b:fc:ed:13:e9:18:62:ad:0e:45:a6:9f:ee:23:e4:09:b7:4b:
bd:48:ac:b4
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICC2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUExQkUxMTAvBgNVBAUTKEVBQzI3MUQ2QkRERDU3QzMzMTlFNzFDODExRDg1MDQ3
NTM0QzQ3MzAwHhcNMjUwNDA1MTQxMjUyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDY2OC1lNDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsU0oYDq5xEnDUEMuSpkBRZ4Bx6HPV0d354J2QOmXkOkZExtvXahht6rOAUBO
VkjIhcO1YaFUDOWSWs0MVEAK4zW1UajklxOzYEj3y3GvWNoQv3kHXDNs1mnt96FL
nCxizun63pQlkZGblizUZUUw1DbImVzbC4dTKLAnnjg7j5Ec1G8So2TFuC//L6i6
SUEpbkZJw2+FgoPZvkosW7Sn7tCS5F/GUzWNQnaI8UaLn5oAkPNpHF6ZN/09qs1s
2x0bk9m4ze/d0flzpnprxzJkIbxlr2qCk5KJ/ku75OmpK87vh6AaVhm5QLPnIYNf
Iybctp4jtImniEmnLu08UP044wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFE/fk0Q
MhFgYFTteCBBk7+a7YWNMB8GA1UdIwQYMBaAFOrCcda93VfDMZ5xyBHYUEdTTEcw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTFCRS83MDA4NDc3RTRE
NjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4TXhubkhJRWRoUVIxTk1S
ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZzSngxcjNkVjhNeG5uSElFZGhRUjFOTVJ6QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUExQkUvNzAwODQ3N0U0RDYwMTFFQUFCNjM1Mzc0QzRGOUFFMDIvMEZGRTUyODIx
MjI4MTFGMEFDOUI0MTEyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ2tMMA0EAgACMAcDBQAkBc9AMA0GCSqGSIb3DQEBCwUAA4IBAQAv
675uhzC3H8v/pZjnzibgCYf+wN9xTgIsFXt4e7UegUTz9FV4VC1NBJh3GC5hTxoI
OWdQ1k2tgxYm8+dMvOHZ8GS28TGK0fHle5zUH7avtsCXqzalkuD+Va5Nr/dUfjiV
9ycwn4OfqV023vZMVNc4Xcv9IhLfNq1yao9X7FmSKnWuzkAen0UoMEYHUR+janx4
JxEX0Ytd6ue4Ai5Rv5Q0OGWKbjTQkt2CTLO2gMtxSFiN9H49zVsBWPDLDl3fdhNJ
8nyyIe2WaTk9ahf8HAd+6sfw6aAQV8LFHD2tXlq59cf3ZYBPKwqnlqR7/O0T6Rhi
rQ5Fpp/uI+QJt0u9SKy0
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:32:21 2026 by rpki-client