
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/F70C0B5E4A8C11F18179024696EE528E.roa
File: F70C0B5E4A8C11F18179024696EE528E.roa (raw, json)
Hash identifier: 5Yst2FyhyH3jYpzIiDAy6NxPFa9IDDIEKH6KQxiG41Q=
Subject key identifier: 23:6E:D3:36:0E:59:C3:75:0C:5F:15:C8:75:FA:4A:56:03:DA:8D:C5
Certificate issuer: /CN=A914F521/serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948
Certificate serial: 0E6F
Authority key identifier: 29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/F70C0B5E4A8C11F18179024696EE528E.roa
Signing time: Fri 08 May 2026 03:21:13 +0000
ROA not before: Fri 08 May 2026 03:21:13 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 137843
IP address blocks: 103.104.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl
rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3695 (0xe6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F521, serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948
Validity
Not Before: May 8 03:21:13 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69fd56a8-1652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:5c:8e:f2:c4:de:bc:44:52:3f:f5:82:db:
c1:dd:46:4c:a0:6b:fa:50:5c:22:cc:74:45:bf:b1:
d8:a4:0b:6d:27:cd:21:e7:06:e7:47:22:02:59:e3:
3d:8b:01:73:8b:44:e3:83:88:e9:ba:34:55:53:f0:
3c:55:2e:6f:0c:ed:8c:22:93:e4:dd:32:ae:9c:a6:
f7:ce:36:ea:5b:95:3c:3d:37:8d:65:ad:50:01:16:
e3:50:bf:75:ee:1d:dd:04:78:58:5e:2c:5d:96:0d:
b6:70:a3:a6:45:49:d8:e6:31:49:e1:e4:fe:51:b4:
54:be:f2:9f:72:56:69:58:e8:ec:30:46:72:e6:f4:
c0:3e:04:ad:4c:13:fb:17:1e:60:df:61:a6:ed:3c:
28:52:bc:92:f0:9d:14:53:91:ec:38:e6:52:28:eb:
b0:8c:dc:e9:07:92:f2:3e:13:ec:ae:d1:c8:68:5d:
85:b9:de:eb:b2:dc:ae:e4:f8:ff:ec:9c:79:6a:84:
6a:cc:6d:3e:e7:a3:0c:93:1f:55:53:80:f5:36:45:
35:9b:8c:cc:ab:d6:46:fb:8e:05:a6:d3:85:aa:11:
40:07:96:97:35:60:ef:b0:ee:31:ff:0e:eb:5d:18:
c5:09:e3:1b:47:0b:15:15:f5:02:ff:44:c2:e1:ba:
c3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6E:D3:36:0E:59:C3:75:0C:5F:15:C8:75:FA:4A:56:03:DA:8D:C5
X509v3 Authority Key Identifier:
keyid:29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/F70C0B5E4A8C11F18179024696EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.104.242.0/23
Signature Algorithm: sha256WithRSAEncryption
86:fe:0b:0d:5f:e0:eb:de:c8:8e:cb:b8:f6:fc:1b:84:5a:9e:
e1:3c:ec:7f:ea:87:74:08:94:4d:5a:c0:4c:25:5b:e8:21:aa:
73:10:85:fd:f4:30:d8:6a:23:0d:a4:32:7e:af:69:61:cc:6c:
7f:58:4e:22:45:f5:62:2f:a7:19:da:ad:0a:f4:9a:ba:e1:bd:
35:c1:73:30:8d:66:f2:fb:48:7a:b2:fb:e1:fb:c0:f8:14:12:
6e:2f:0c:90:bd:d8:cf:aa:79:58:40:75:19:81:2e:e9:b9:22:
1a:86:4a:8a:87:38:2f:a3:f9:1f:f8:0e:3a:8f:2f:3d:01:0f:
e7:b6:06:b5:87:3d:a8:0f:89:9b:0f:29:d4:52:64:3b:86:01:
13:85:fa:8f:67:e0:9c:aa:88:5b:6c:74:65:ce:78:6c:47:ec:
c3:41:80:ba:e5:ca:b4:c0:80:04:5b:43:a8:de:bd:a0:57:c1:
c3:fc:6c:17:66:d5:78:87:fb:d6:e1:bb:c9:3f:ea:5c:65:d1:
c6:83:0a:ad:67:f8:af:ef:1b:6e:82:fa:77:5d:9c:68:57:46:
29:0e:04:4a:3a:8d:67:11:b2:f5:15:8c:87:43:03:03:d6:81:
50:7f:08:44:9f:f0:0d:8c:2d:5b:ac:3d:eb:22:ed:af:b0:f0:
70:6e:ad:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:05:17 2026 by rpki-client